Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: nVEM1FJip4MHtKUnvdpHs8p7ysJaUg0OYLJNHRlN2mI=
Subject key identifier: 19:2E:3D:39:A4:90:9D:EE:0E:E9:18:D4:0C:A4:D1:3B:69:57:5D:1D
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01992F35A87E40B3F1275B995791AB5CA3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0FDD
Signing time: Tue 09 Sep 2025 16:01:09 +0000
Manifest this update: Tue 09 Sep 2025 16:01:09 +0000
Manifest next update: Wed 10 Sep 2025 16:01:09 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: QsxPVn/8fJWBykX0oE9xQuGADXiCCybDT7To8OV4CH8=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:a8:7e:40:b3:f1:27:5b:99:57:91:ab:5c:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Sep 9 16:01:09 2025 GMT
Not After : Sep 10 16:01:09 2025 GMT
Subject: CN=192e3d39a4909dee0ee918d40ca4d13b69575d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:66:dc:03:f3:f2:b2:b6:32:71:74:b1:7e:
b0:dc:41:db:a2:20:62:0c:1e:7b:27:ae:28:ec:8c:
5e:39:0a:88:cc:9a:df:63:53:5c:a4:98:f1:e3:c9:
3e:8d:7a:42:b7:d8:11:15:cf:ca:70:f0:20:1a:98:
ff:45:50:16:43:45:e2:f9:1c:15:7a:b6:1b:b0:06:
be:e3:1a:07:ef:a9:98:06:91:b4:b7:a4:fd:c1:3a:
2b:19:b9:2e:14:29:b9:84:89:c9:ef:4f:80:14:6e:
63:35:16:0c:46:fc:fe:e9:b8:d5:63:7d:cb:0a:5a:
49:a4:0a:7a:be:95:0f:5c:5e:71:88:d5:0c:37:58:
9b:2d:b0:44:a0:3b:db:47:69:12:db:21:ee:d2:73:
fb:6c:98:b6:a6:07:18:45:97:40:5d:06:fb:3c:7a:
81:ca:4c:0a:80:f1:b6:f0:e8:c3:ec:95:51:82:48:
29:9d:c8:d4:9c:6d:c4:60:53:1a:b2:2a:59:e3:19:
ca:18:12:0a:b2:f6:d6:5d:58:41:ac:63:76:f9:f9:
ee:6e:5b:a8:ab:bd:df:48:fa:65:3e:1f:ff:61:d9:
44:fa:15:c3:c3:c3:8e:16:9e:2e:f8:ca:1e:5d:43:
9b:6a:db:cb:9d:4a:4a:a0:25:d5:99:dd:72:2c:a6:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:3D:39:A4:90:9D:EE:0E:E9:18:D4:0C:A4:D1:3B:69:57:5D:1D
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:f0:8d:d2:74:3c:1f:2d:9c:69:fc:4c:c2:1f:86:6e:e8:
1e:4b:6a:ba:3c:05:69:aa:66:f4:78:24:18:57:a5:e3:00:f0:
bb:cf:45:41:6f:c2:7c:c0:cb:5d:5d:34:49:f5:7b:0a:08:60:
f2:05:d4:1d:15:e8:6e:c8:e0:5a:38:68:a2:c7:35:d6:79:9a:
8a:8f:17:a7:ca:40:63:b8:86:97:1e:0a:9a:13:3d:b1:6c:09:
e6:a1:95:ed:20:23:06:0a:8f:24:a9:15:ac:c8:5d:84:f0:86:
d4:98:5c:d4:79:fa:6e:a5:e0:ea:4a:d0:57:48:68:38:01:62:
d1:db:71:26:00:6e:00:39:ba:fc:aa:e0:ca:1c:0c:5c:d6:9c:
10:55:5d:bb:ad:f6:b8:5c:e6:3b:ad:bb:65:75:4b:55:16:65:
d2:a0:dd:df:c2:84:da:97:d6:11:f9:40:12:bb:b1:bd:a4:a3:
4f:a6:b6:26:2f:c6:0b:62:1c:7c:b7:20:ab:9d:29:39:2d:d4:
a4:1f:d8:d6:b0:fe:a9:de:50:f0:13:d3:36:48:dd:b6:ba:66:
de:fa:55:fb:44:d3:9c:5b:35:15:73:3e:85:9b:12:ba:48:87:
ec:06:63:ca:37:81:d7:e8:ec:6f:f8:9a:27:2d:6f:42:a2:03:
f8:74:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:16:05 2025 by rpki-client