Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: ktfFsI3QmBfK9EhnbdaP5AcaeZNcmm1PMwEzJY057ww=
Subject key identifier: 23:16:BF:95:41:BB:21:01:96:59:CE:F3:FA:DF:1E:28:92:72:3B:2F
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019A71EEF2413B4DF4C4530251DDF1229B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: RIEN9bwYP95imbaIrfHCti1xZgo9zESG2f2lz4f4hgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:41:3b:4d:f4:c4:53:02:51:dd:f1:22:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=2316bf9541bb21019659cef3fadf1e2892723b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:66:91:ff:c5:08:8f:3e:bc:1b:fb:8b:12:
61:78:4b:46:fe:02:67:b2:97:43:f4:3d:b1:e4:d2:
87:a4:5e:61:67:2e:a9:30:33:c0:2c:ad:20:3d:c5:
14:31:5a:35:45:dd:31:1d:ae:3b:a5:01:a8:81:b0:
c6:30:a0:03:c1:de:d6:73:b1:d8:95:29:cc:2d:3b:
2e:37:f9:72:1e:87:e2:d4:02:67:3f:81:fb:19:6a:
8b:5d:4c:62:59:ab:04:bf:71:e8:2a:42:34:22:24:
7e:00:43:e9:5a:e9:23:5c:36:62:84:7a:b8:fb:08:
b5:52:6f:c3:e5:0d:00:7a:9d:98:16:cf:8b:9a:01:
32:d6:6c:4d:18:fc:96:f6:d5:19:fb:43:90:02:c6:
b2:96:dd:9b:19:89:a0:4b:05:cf:b9:a7:a9:0d:33:
25:87:bc:c5:96:13:1e:63:7b:1a:6d:b1:90:a8:a5:
77:f0:45:8e:68:8b:77:0e:d1:f8:2d:e4:4e:85:e6:
f1:73:66:4f:ae:7e:c0:1e:57:56:53:26:4d:ee:4b:
63:85:3d:21:eb:13:35:af:74:26:ad:4b:e2:61:13:
0b:1b:75:f7:e0:5e:7a:f1:af:fd:bd:fb:75:b0:38:
92:e1:b3:16:8e:e2:b0:52:df:46:c0:b4:25:ba:b0:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:BF:95:41:BB:21:01:96:59:CE:F3:FA:DF:1E:28:92:72:3B:2F
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:12:5a:5d:b8:5f:28:a0:6f:9e:8c:fc:b2:f5:a2:d7:af:
61:71:f0:06:e6:6b:d9:fe:aa:d6:a6:41:3b:86:f9:99:0e:d8:
c8:56:57:80:bb:d3:29:4c:c6:71:2d:68:0e:58:77:83:aa:9c:
3f:a0:f0:c3:54:fc:74:8a:fd:2b:d7:31:80:67:ea:81:0b:86:
9e:0e:81:ef:bb:3b:c5:fa:6f:6f:02:86:be:10:a1:52:77:7a:
08:91:4d:7e:e6:c5:d5:df:db:e3:f2:27:66:9a:f1:22:38:bc:
52:ea:ee:7d:eb:66:49:23:39:f6:74:d2:91:a1:b2:82:4b:70:
16:d1:01:d9:2f:62:70:16:d3:e8:09:4c:23:b9:a4:fb:ac:af:
0d:0d:ac:87:d9:62:1f:3f:20:f9:2e:fe:15:6f:7e:9b:95:a5:
98:a6:b9:dd:be:93:c5:80:55:0e:d5:80:da:d9:17:14:9e:2e:
5e:65:1b:11:66:fa:37:29:2e:43:f3:20:27:05:54:65:48:12:
94:bb:9c:68:38:a6:b9:7b:de:29:a6:64:5e:fa:23:fe:a5:69:
2d:8a:63:f0:33:91:3f:48:89:57:9b:cc:d3:ec:5f:fd:b0:ac:
f3:49:7d:36:6c:01:92:c7:34:3c:6a:db:f1:98:3b:64:d3:8b:
25:54:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:51 2025 by rpki-client