Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: IAJQhAt8gB5q1xvfVGVq0j9Gxvv2U+0/b42ylLO4adY=
Subject key identifier: 10:D2:21:AC:B5:16:C2:14:2C:A4:87:02:79:B5:0B:2C:EB:4F:48:C1
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019749D646929D266174A7D5D701F58934C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 10:01:08 +0000
Manifest this update: Sat 07 Jun 2025 10:01:08 +0000
Manifest next update: Sun 08 Jun 2025 10:01:08 +0000
Files and hashes: 1: 4sQRqg1wVxHplQEORYtm00xrQVY.roa (hash: J3w9Mg25j1wb94v36vArE3YS5FJrYK6v8WsTSNDodH0=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: DRo8D6IqJurDol0ipPmdbi/2YVC4CU4Wah/PBjtPgDU=)
4: v0Pp_40_Je3JS37_jHVbjgvZoEQ.roa (hash: aXXZgq4pgbYYIdcsGFx9uEujPB0OaP/SkcsCiqXmM3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:46:92:9d:26:61:74:a7:d5:d7:01:f5:89:34:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jun 7 10:01:08 2025 GMT
Not After : Jun 8 10:01:08 2025 GMT
Subject: CN=10d221acb516c2142ca4870279b50b2ceb4f48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:01:99:96:8d:69:60:9e:8e:a3:47:89:62:
09:77:44:74:3d:12:42:94:8f:55:34:36:55:c1:d5:
16:6a:64:4c:fa:67:db:93:aa:07:9a:7d:55:54:07:
b3:f5:7e:0f:cb:4b:e8:55:d6:6c:97:b0:e1:47:4c:
ae:54:c3:3e:1d:8c:e7:b7:57:41:5b:9d:6b:85:79:
03:0c:11:ca:d3:6a:96:69:a6:00:2c:0b:3b:18:05:
23:15:79:3d:95:62:9a:fc:f3:b3:f6:61:ab:c3:ed:
74:22:5c:a4:88:82:f5:6e:d0:8c:c5:a5:6d:48:7a:
e5:ee:4c:14:03:58:11:5d:16:51:8a:d7:39:1e:a3:
fd:03:71:be:2e:91:a6:31:b4:a0:65:f9:fd:38:ac:
b5:63:03:15:83:54:17:87:c8:df:a0:9f:ab:54:46:
ea:cc:c3:e2:82:06:d7:42:b8:ca:59:18:1c:db:9f:
76:52:72:e1:1f:e4:df:4c:8c:6b:db:58:fc:a7:92:
ad:a9:09:d8:2a:48:71:fa:77:d3:39:66:17:4e:02:
54:9c:96:af:9a:9b:e5:1c:26:c7:43:70:d1:c0:a3:
72:bc:12:7e:ef:4a:8e:31:1f:52:a0:1d:f2:81:cd:
a1:c8:18:f6:5b:1b:2b:00:14:7b:3e:95:96:ad:dd:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:21:AC:B5:16:C2:14:2C:A4:87:02:79:B5:0B:2C:EB:4F:48:C1
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:9d:62:49:a9:0d:71:74:01:d6:56:88:26:8f:8e:53:1f:
09:3d:6f:fe:5a:19:a5:b2:13:e0:87:d0:5d:57:07:a0:7e:45:
84:20:5b:35:87:b5:1e:55:a9:e9:2f:37:23:bf:b5:13:90:1e:
9c:f5:e7:f3:c1:ec:f2:13:a9:e0:3d:35:a0:0c:ab:13:38:4e:
f1:c2:d3:fe:48:d8:b0:3b:ca:ee:0b:71:11:d0:67:b7:c8:a6:
dd:12:ab:96:00:23:35:b7:e0:0e:f4:6c:4f:27:5c:4e:14:85:
27:14:a8:bd:1d:dd:74:f7:25:3f:2f:e5:63:a1:53:1d:cb:48:
de:83:1b:b8:cb:34:c0:f9:81:1d:28:9e:58:d5:72:80:3d:43:
32:f5:31:85:fd:e9:3b:05:fc:48:49:46:f5:3c:d2:09:b5:c5:
11:cb:ba:e0:15:3f:5f:8d:0c:c0:8f:80:2e:2b:36:4e:0c:a2:
6b:cb:10:1b:44:4f:89:0f:6a:ab:2c:d0:3b:21:db:39:46:9c:
06:7b:20:17:ab:09:c7:80:5e:95:17:66:31:a8:2f:4c:6b:d9:
6d:f0:f7:42:20:64:f3:c8:11:c7:74:6a:4b:66:68:b4:2e:d3:
71:27:50:7e:c9:11:70:b7:ad:10:6c:bd:77:93:d2:84:0e:af:
bc:00:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:56 2025 by rpki-client