Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: /kyJDOtAbZ2ugvzwaN4OswoLdr4YO7+AvVlBGZ0Uqy0=
Subject key identifier: 4A:CE:ED:A3:D9:67:9B:A0:F5:86:03:C5:8E:C2:04:DD:D1:A0:69:5E
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 0199239FF4CCCE60834DB496BBA5980382D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 13AC
Signing time: Sun 07 Sep 2025 10:01:49 +0000
Manifest this update: Sun 07 Sep 2025 10:01:49 +0000
Manifest next update: Mon 08 Sep 2025 10:01:49 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: ujEXqEoxKm9iovZNMw/WcKIXkajlBAPesmFXV13/fQM=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f4:cc:ce:60:83:4d:b4:96:bb:a5:98:03:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Sep 7 10:01:49 2025 GMT
Not After : Sep 8 10:01:49 2025 GMT
Subject: CN=4aceeda3d9679ba0f58603c58ec204ddd1a0695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:eb:f8:13:bc:41:09:d1:da:7c:0e:47:c2:
24:e7:23:26:54:b1:ab:2a:26:b4:66:ec:27:d2:d8:
61:1b:00:33:0b:4f:c4:8c:f5:c3:57:a7:c6:7b:fe:
cd:3e:b9:2a:08:51:c3:86:90:cc:d7:d6:a7:72:57:
a6:75:1d:07:f6:4f:4a:c0:7e:92:5b:54:31:0a:a9:
22:d6:6f:3e:cf:6f:19:d0:6d:1c:ab:7f:32:4c:ed:
dd:d0:8a:b1:e8:c3:6f:b7:b5:ec:a7:08:4f:f2:93:
ee:7a:c1:fc:c9:63:84:08:b8:74:c3:4a:2d:5e:3b:
1b:8e:b6:b8:bb:1c:45:e5:2b:12:0d:f2:1f:c0:b8:
be:59:fd:38:80:b6:49:9b:dd:14:c2:4c:a4:c3:2f:
d8:0b:68:bc:ea:0f:51:25:ee:54:f4:26:65:0a:8f:
bb:0e:e4:8c:8a:eb:ad:a4:d4:58:de:ed:34:2f:d3:
4b:b4:89:e2:ae:5a:64:87:49:9c:99:7e:43:99:9a:
ff:4f:eb:b7:3b:0d:13:f1:f3:ea:eb:11:3a:c9:f1:
2d:f5:0e:e3:df:f7:38:8b:e2:f4:c3:63:51:bf:9d:
53:aa:08:1f:17:91:0f:88:e5:9b:85:14:d6:a7:6d:
5f:b5:49:91:bb:2a:73:d0:36:34:3e:29:ea:e6:bb:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:ED:A3:D9:67:9B:A0:F5:86:03:C5:8E:C2:04:DD:D1:A0:69:5E
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8e:09:7a:8c:ee:0d:54:49:79:d7:ba:17:4f:e4:a9:8b:eb:
2f:1c:98:68:a9:c5:92:64:09:c1:e1:0b:02:95:07:28:3a:c3:
a3:54:ef:7e:c2:4c:b3:e9:9f:34:fa:15:e8:c3:ad:23:1a:a8:
4e:48:ee:e5:26:36:fb:16:a0:cf:53:63:eb:60:69:a7:15:ca:
94:b3:77:a7:8d:8e:6e:72:5f:68:d3:0f:14:8d:ea:cd:43:1f:
8d:d8:2a:5d:1d:b3:5b:48:72:a6:fd:2c:2a:8b:9a:54:85:27:
2d:00:75:6d:af:13:27:89:cb:ad:36:7d:2e:73:b1:29:36:05:
5b:7a:06:eb:2a:a6:d1:b7:ae:ad:03:6d:c2:68:27:6f:38:ae:
74:8c:7c:d8:cc:5a:26:34:46:f8:75:29:f2:0c:08:f3:ff:e6:
84:c0:7f:e1:33:af:d4:93:56:8f:3f:c8:56:7c:9b:76:64:4b:
3d:b0:f1:4d:26:6f:fe:de:82:3b:e5:25:7f:e3:3f:b9:bd:b5:
56:4f:9f:b8:ab:c5:b0:60:2e:06:97:b0:33:d6:0d:e6:e1:20:
75:a3:3b:4b:aa:b7:9a:49:b5:6d:78:37:ea:2d:4c:d5:36:54:
10:8a:4a:cb:f3:e5:8a:c5:36:08:ab:e6:26:0e:c7:46:8d:d8:
ba:ec:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:29 2025 by rpki-client