Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: H2I7yJGhqAk3veyLlgVlOYfrnTeb1csQP+Lp5IgquDk=
Subject key identifier: 8A:7A:66:6B:6C:20:47:70:14:48:0B:74:E6:DA:EE:66:E6:07:75:34
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01974A7A56DCA7C3D5AE4907A96DD50CE5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0EE2
Signing time: Sat 07 Jun 2025 13:00:20 +0000
Manifest this update: Sat 07 Jun 2025 13:00:20 +0000
Manifest next update: Sun 08 Jun 2025 13:00:20 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: Np+13jmW/lqf1Ok2bJlpJ9PCNckAN3cfSSRZoCN6oXg=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:56:dc:a7:c3:d5:ae:49:07:a9:6d:d5:0c:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Jun 7 13:00:20 2025 GMT
Not After : Jun 8 13:00:20 2025 GMT
Subject: CN=8a7a666b6c20477014480b74e6daee66e6077534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:7f:11:20:15:dd:6b:a0:ad:58:16:45:6d:
59:8a:12:f8:e5:5d:9b:9a:83:95:43:e5:0b:62:01:
c4:ff:0f:4e:38:41:36:f2:16:10:27:2c:31:d1:84:
8f:7d:44:e1:8f:09:a6:47:8d:fe:7f:51:94:67:e5:
f6:e8:de:4a:ef:0d:f6:48:34:e9:16:06:59:b2:7a:
8f:2b:5e:7b:b7:95:cc:50:ff:b3:89:55:bd:f9:cf:
0d:a7:ff:05:83:8f:9e:27:09:aa:c0:c8:6a:fc:72:
a7:be:7e:ec:78:1b:29:38:9a:79:6c:ac:b8:01:da:
f6:49:11:1c:e2:1e:04:38:7f:bb:12:4e:75:1f:2c:
59:ad:18:da:66:4f:68:ac:d4:98:79:ad:79:c2:83:
ed:86:0e:1c:69:03:1a:41:07:78:93:00:76:d8:8a:
42:7f:57:c3:72:4c:73:2a:a3:7d:d5:f4:2b:0f:39:
ce:b1:f0:96:ce:5d:0e:06:5c:25:8e:20:b6:49:3c:
b9:0a:c3:a8:63:b3:16:52:39:f6:89:a8:8e:1f:a0:
6b:01:61:f8:8f:e7:57:50:e3:cf:80:49:de:e2:36:
05:45:ca:ca:4a:d3:5a:85:ec:27:6d:fd:f4:ad:3a:
d0:27:f8:1d:1e:7a:d0:34:47:75:e0:0f:08:c1:56:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:66:6B:6C:20:47:70:14:48:0B:74:E6:DA:EE:66:E6:07:75:34
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:65:21:19:11:a8:f0:72:f6:64:c7:99:15:56:ee:a5:9e:8d:
71:3a:41:81:31:2e:bf:ef:60:89:e2:a5:a3:66:b0:d0:85:46:
6a:f1:31:00:35:7d:6e:0a:bc:ac:4c:94:66:6a:00:55:92:22:
e3:df:80:0c:45:91:16:dc:1a:da:99:e0:39:e6:5e:ba:22:93:
ed:6f:e3:cd:a5:fe:1a:5f:9d:75:d0:c5:07:20:ba:4b:31:39:
c2:38:03:08:5d:28:18:64:19:0a:2c:68:f2:1a:ba:dd:3a:5b:
9f:d7:4e:af:b8:d3:c4:9d:95:86:c2:3d:a5:f5:4d:1c:c2:52:
0a:30:29:16:db:18:a2:bb:be:ec:4b:cc:54:f8:f2:1b:98:ff:
e2:eb:82:5e:f9:13:0b:0f:2a:e8:ec:33:b0:67:83:d9:ce:4a:
03:08:86:ea:f8:89:39:87:fd:87:1b:fd:c1:43:b2:0a:65:d0:
62:7a:b7:3d:dd:7f:95:c1:ee:53:73:28:46:ac:79:ea:e8:5a:
16:7c:0e:fd:e1:65:ac:78:6d:9c:36:21:a4:62:b3:47:37:af:
99:c3:ba:96:b8:8c:7f:17:19:e9:16:af:92:3c:45:04:ac:86:
10:a2:20:b0:56:72:93:16:02:bc:5c:0b:41:91:68:20:9b:93:
52:e0:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:42 2025 by rpki-client