Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: ZF5MTaTw5mdYJJtG+u9DhotyU0Kkrx6QqwVoNpdi+SQ=
Subject key identifier: 31:28:C6:D3:13:F9:74:27:1F:51:6E:D7:C9:7C:CC:03:9E:4F:FC:9B
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019A71B819DF5DE9EC9AF9628A02348176BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: E+kJa+5XPeSPFbo4zg/3qoWLj44xaqsODpYRtfU9vKY=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:19:df:5d:e9:ec:9a:f9:62:8a:02:34:81:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=3128c6d313f974271f516ed7c97ccc039e4ffc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:31:79:cf:e5:19:89:fd:b5:26:4c:ee:ae:
6f:ce:ef:16:7e:f0:b1:ab:8a:91:61:67:20:16:d8:
39:47:f7:86:1f:97:0a:56:5d:53:c4:bd:33:65:d0:
6d:3d:9b:12:d7:33:06:b6:cb:58:1e:fb:a4:54:62:
58:00:06:78:8a:1c:75:3c:b4:77:4a:00:f4:8f:9a:
6e:8d:c0:ff:3f:b2:86:b9:4f:74:a0:01:f7:da:8c:
5d:46:97:71:fd:eb:ee:1e:4c:e0:b0:d0:e4:b2:60:
6d:0f:79:70:1b:0b:8e:36:27:23:c1:57:59:28:a2:
37:f5:30:27:95:31:b4:13:38:22:b1:43:30:f2:38:
28:f1:0a:80:a5:89:b4:b3:10:e3:ed:82:1d:d7:ec:
33:c9:8d:de:20:e2:32:fa:5d:73:19:51:fd:02:1c:
4d:76:5a:20:18:bb:34:b8:dc:49:ed:92:54:b4:a5:
26:f1:b2:15:96:7d:d2:f1:9a:03:c2:7a:38:82:3a:
4a:15:ad:6e:a6:2c:0e:cd:a8:ae:94:ab:7b:27:e9:
e8:37:5a:b1:7d:9d:31:54:2a:84:e4:cb:ef:80:4d:
47:43:5f:a2:22:a2:58:63:8c:55:74:4c:05:d0:22:
2d:92:fd:2f:4a:36:6d:f9:69:3e:78:97:0d:80:0e:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:C6:D3:13:F9:74:27:1F:51:6E:D7:C9:7C:CC:03:9E:4F:FC:9B
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fe:20:0c:06:02:36:6d:90:dd:33:75:bb:a5:6f:5b:18:3e:
93:91:c6:d7:e1:d3:be:a3:3a:74:1b:c0:49:d6:4d:f1:f2:db:
79:73:93:6d:d7:b2:6f:c6:68:7a:7f:d1:da:12:0c:c7:1b:8f:
0e:c1:a7:97:37:3a:59:a3:24:a0:ea:fa:07:62:f0:6a:4b:5b:
83:d1:ea:c7:a8:cc:e4:11:bc:6b:72:b7:ee:46:e6:41:18:e3:
e5:5f:b8:9c:69:e1:5c:e5:76:0b:78:ea:af:3f:37:8a:e7:0e:
86:2b:52:19:de:98:03:8a:47:20:15:f4:33:47:9d:aa:4f:20:
f0:33:e4:4a:a5:ec:08:27:25:c1:f0:ab:d0:75:e2:9b:fa:a3:
fd:a6:23:9f:e1:c9:8d:94:15:b5:b9:f6:a9:a4:87:eb:64:91:
18:77:e6:1b:b9:ab:2b:c5:e8:f1:05:99:85:3d:ac:70:0e:d4:
37:61:fb:d8:18:4a:bd:7d:06:d5:19:34:86:31:f5:51:6a:64:
8a:fe:5c:fc:82:a3:b3:80:4c:fc:71:37:14:83:d0:2e:e3:85:
de:e4:a7:f7:74:3b:5e:50:5d:15:9b:90:07:62:e9:ee:c6:67:
8c:81:6d:c2:af:f6:7f:c4:58:3a:b7:cf:b4:70:ee:69:0b:96:
cc:09:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:04 2025 by rpki-client