Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: hRwmT+ZLJZ8EFAwhEfAfKdbj/XAVTPg6yanO3XXaYrI=
Subject key identifier: 9A:E2:74:6E:E9:F1:47:30:78:DD:D3:E9:75:24:DE:66:BC:E5:2E:F6
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 01991E0AC216F49207D28121A14BC9C1BD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1674
Signing time: Sat 06 Sep 2025 08:00:45 +0000
Manifest this update: Sat 06 Sep 2025 08:00:45 +0000
Manifest next update: Sun 07 Sep 2025 08:00:45 +0000
Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: LzytuFkF+aEjrkDNFeVmQwXrM/FJIa+jWoc2SEr9Wfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:0a:c2:16:f4:92:07:d2:81:21:a1:4b:c9:c1:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Sep 6 08:00:45 2025 GMT
Not After : Sep 7 08:00:45 2025 GMT
Subject: CN=9ae2746ee9f1473078ddd3e97524de66bce52ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:ad:e7:b6:f0:f5:79:e7:89:37:27:ef:cf:
d4:81:c4:12:5d:be:50:0f:eb:1b:71:b1:b5:5f:49:
85:76:af:5e:ef:6c:79:0b:78:33:eb:cc:74:c2:17:
17:43:2a:b9:61:e0:55:8c:b6:34:aa:a4:4e:0c:81:
b2:5b:1c:7a:05:d6:61:4a:cf:7f:ea:f2:75:9c:79:
9d:c3:fe:6a:aa:4e:fa:1c:37:2a:71:cb:4c:8b:5b:
73:3d:e7:98:65:92:64:4e:f7:5e:92:9f:a2:7f:af:
a5:e4:42:ac:fd:81:fb:f8:b1:37:71:2e:a8:1b:cf:
3c:e9:89:b1:53:2e:f1:9b:b3:10:b7:6c:be:9b:58:
1e:d2:ad:9f:ec:c0:fb:a4:98:6a:8c:43:2f:a1:86:
01:f2:f9:43:97:46:38:02:98:f5:6b:c6:79:c5:04:
47:2f:5f:8c:64:40:1a:79:29:9c:7e:77:33:14:65:
04:09:2a:59:a7:94:5a:e1:a1:29:66:1c:a8:38:bd:
6e:34:a9:2a:d1:88:37:ac:c5:ba:b9:1d:6c:f6:bc:
17:2c:bb:31:65:a1:a0:7b:f9:d9:7c:0b:5b:cb:65:
86:2b:fc:0a:bd:86:a1:21:e3:3b:9a:c3:00:bd:4b:
2d:ef:84:57:79:b5:37:df:99:70:07:8c:b6:ed:b2:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:74:6E:E9:F1:47:30:78:DD:D3:E9:75:24:DE:66:BC:E5:2E:F6
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:a0:e0:07:b8:dc:06:8a:ea:47:23:bb:4f:ea:7c:6e:c3:
00:d2:2c:9c:1d:f9:83:fd:10:a0:d9:11:14:34:22:a2:23:30:
79:51:70:37:41:65:b5:f4:f6:8d:28:da:ac:58:a7:92:dc:ab:
d2:fa:ae:8f:a2:17:a1:c5:c4:c2:40:f1:b6:46:9e:d1:a6:59:
c6:14:67:24:2c:a9:1f:3c:08:c4:bc:bb:5f:2e:8d:fd:f8:94:
31:3b:f8:7e:b2:48:45:77:7a:6e:c0:42:2e:7b:40:e1:74:ae:
0d:55:55:62:73:90:f8:62:0f:0f:bc:00:b7:ed:ed:f4:9d:ee:
6a:20:42:4b:4f:ae:60:b0:39:84:44:f7:1d:92:cf:76:35:56:
c3:5d:c7:00:11:53:6b:06:4f:62:2b:d5:5a:40:c1:84:4d:b6:
e5:1b:f4:86:64:1b:72:08:8d:3d:8a:2a:fc:61:a1:4c:c6:9f:
20:42:f0:a2:30:6a:c2:fe:f9:f4:61:c3:b4:73:28:27:13:94:
8e:43:b9:6a:9f:83:c7:5f:4b:ac:cc:f9:65:9a:e4:b3:79:76:
4a:2e:59:bb:4a:3c:f4:26:38:29:b3:c8:f8:1f:98:d1:e0:ec:
ff:db:61:4f:5a:7f:33:b7:fe:fa:c4:f5:9b:0e:a8:1b:aa:25:
2a:0b:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:33:35 2025 by rpki-client