Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: b+f8A1PHizcsd0v/PImCO2Kl0EO6CX7d6rBCIVi0Mzw=
Subject key identifier: 64:F9:4A:FA:8C:8A:8A:8E:44:BA:1F:24:82:62:20:E9:9E:96:62:F0
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 019A266742CF45A75FE59A143C09E21376BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 105D
Signing time: Mon 27 Oct 2025 16:01:32 +0000
Manifest this update: Mon 27 Oct 2025 16:01:32 +0000
Manifest next update: Tue 28 Oct 2025 16:01:32 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: snlRNcHwSaQO9aLkSe2x7fcVSZZ5VqUqeQbOvlGPkGw=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:42:cf:45:a7:5f:e5:9a:14:3c:09:e2:13:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Oct 27 16:01:32 2025 GMT
Not After : Oct 28 16:01:32 2025 GMT
Subject: CN=64f94afa8c8a8a8e44ba1f24826220e99e9662f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:62:64:c6:78:a9:0e:01:cb:e2:04:f5:11:
4c:d3:68:77:9c:da:ae:66:b7:76:50:80:fb:0c:c1:
bf:25:a5:4d:22:bf:42:ce:86:07:e8:bd:88:a5:03:
9b:0a:6e:e6:6b:96:4e:94:dc:65:47:15:a2:59:e6:
53:a8:7b:ce:5d:60:83:af:f3:5c:c2:0f:0e:a0:47:
2f:2f:bb:e7:01:8c:08:70:62:d8:8f:8d:fc:e7:27:
c4:af:54:1c:6f:dc:86:40:9e:42:f3:33:ae:20:bb:
6e:cd:3e:58:13:b0:13:ff:a1:85:8c:c4:a6:3b:d1:
34:99:a6:c3:47:09:3f:ad:73:2d:83:1d:72:cf:8e:
13:cf:42:4a:a8:be:08:ad:60:31:3e:10:b1:55:31:
b4:43:a6:bb:dd:7c:d7:c4:fe:9a:e1:26:62:9e:ac:
b9:71:85:c1:45:98:71:3c:2c:28:87:5f:ab:44:70:
eb:8a:5a:87:07:66:1a:c3:07:10:4b:31:c0:c3:0f:
f1:c1:50:b3:b8:92:a2:5c:72:a7:a9:85:33:13:da:
ca:af:38:80:2e:b7:d3:ff:d5:a8:c2:9d:5d:f2:8c:
d8:74:1a:fd:eb:81:1f:12:cf:84:79:b9:21:b2:c6:
49:c9:a4:6f:c1:a9:cf:63:74:fb:b9:7c:eb:8c:ff:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:4A:FA:8C:8A:8A:8E:44:BA:1F:24:82:62:20:E9:9E:96:62:F0
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fa:f5:1d:53:a3:5d:02:ed:e9:a5:d7:7a:1a:15:a1:a2:e8:
ce:77:06:86:bb:3b:d3:98:8b:5f:c5:4a:1c:16:90:cd:6e:3a:
39:20:06:b5:31:e4:ce:65:70:7f:41:12:15:38:1e:dd:54:26:
5a:1b:bb:a2:13:ad:2e:32:f1:31:46:52:ea:82:8e:19:64:4c:
8c:5b:a0:36:2a:4d:59:68:3a:9b:5d:90:4e:11:49:4e:b3:89:
ee:00:1a:e0:41:94:4b:02:28:fb:d5:ff:7b:ff:fd:fe:7b:60:
fe:d9:e6:95:7b:27:2e:77:39:5b:ed:08:1c:e6:6e:58:38:8d:
30:a9:f7:59:5c:f1:2e:13:bf:73:ef:4b:6a:94:46:45:c1:14:
bc:4c:77:3a:da:7d:e0:fb:51:5a:78:70:24:c4:31:2e:cf:b2:
d4:ca:16:19:9b:32:55:b6:b0:ec:6b:89:c7:86:19:53:ba:84:
54:5d:a0:7c:dc:d4:d7:63:2d:8d:18:e9:cd:a0:f4:46:b1:ca:
f9:e7:9a:d7:55:9a:4b:2d:c9:38:b9:1c:c5:64:4e:99:f2:cc:
6b:e4:32:42:bf:bf:6a:d7:cd:8f:d0:f4:65:81:3d:08:66:49:
f6:c8:06:ed:92:35:f8:c5:b6:87:03:3b:c1:ac:e6:d5:58:b0:
3b:30:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:47 2025 by rpki-client