Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: 0VNcPeGGHD9JdNH2E2GEKjZsli3TUTcSY+92Hgd1xj0=
Subject key identifier: 36:FE:77:97:C1:1B:B7:B8:3F:6F:B4:9F:45:D0:22:C7:10:3D:68:41
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 0197488BEE9F465EE73503763E40CA6DA9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 12B6
Signing time: Sat 07 Jun 2025 04:00:19 +0000
Manifest this update: Sat 07 Jun 2025 04:00:19 +0000
Manifest next update: Sun 08 Jun 2025 04:00:19 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: F2hiH/LpiOR8Kw66CrcB2Nke91tbOFsKOs4CTJER6so=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:ee:9f:46:5e:e7:35:03:76:3e:40:ca:6d:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Jun 7 04:00:19 2025 GMT
Not After : Jun 8 04:00:19 2025 GMT
Subject: CN=36fe7797c11bb7b83f6fb49f45d022c7103d6841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:c5:45:eb:52:ee:a5:8d:f8:da:01:09:00:
9c:85:a3:13:43:dc:1b:a7:f2:e2:77:70:bd:d0:50:
f6:44:48:01:46:e1:a7:06:9a:91:5c:bf:6d:2b:0b:
8a:82:1a:8f:09:11:e7:13:2e:64:ad:4b:a9:59:69:
9a:fb:0f:42:4c:17:a5:e2:7a:ac:9c:4d:79:76:07:
60:1e:47:7b:b3:ea:0c:ab:a4:b3:23:4d:ec:ad:3a:
aa:aa:f7:27:a2:20:2e:99:45:8e:bd:e4:5d:76:ec:
47:cf:fc:78:8b:c8:68:40:15:b9:0a:58:43:91:2e:
28:fd:24:1e:dd:51:1b:04:44:27:08:ca:b7:42:69:
de:9d:7c:63:a3:07:db:88:87:68:16:21:75:70:a3:
e7:57:eb:fc:61:e1:b2:78:63:4b:ca:42:7e:0e:c8:
a8:ea:60:31:0f:4a:a6:f5:5f:29:2e:f0:c1:05:20:
a7:38:ee:43:f4:4e:ac:94:39:5e:42:8a:9e:64:7b:
a4:bc:61:6d:c9:0b:87:a6:09:f6:0d:a4:88:50:b9:
df:8e:fc:2c:e8:2f:ec:1e:c5:0c:99:1a:3c:d7:2e:
fa:90:13:a7:0f:a4:68:24:10:05:4b:8b:3c:a5:ce:
77:64:d0:14:0a:b3:b3:10:45:c7:35:20:b0:68:da:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:77:97:C1:1B:B7:B8:3F:6F:B4:9F:45:D0:22:C7:10:3D:68:41
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5f:28:00:70:27:c3:8c:9b:e1:33:5d:9a:25:73:dd:18:1c:
cb:cc:4d:2b:0c:1e:6f:e8:e1:77:9b:ed:aa:da:ff:04:7c:ac:
04:7e:08:d3:07:c3:0a:6c:cf:35:01:43:55:eb:b0:de:7c:2a:
d7:fd:f5:04:d9:52:0f:fb:9e:a2:4a:78:51:52:01:58:3b:08:
a1:67:2f:a7:b5:10:cb:c4:4a:18:f7:8e:e0:f8:65:11:17:70:
e0:dd:39:35:3e:05:00:5c:5f:ae:6b:89:14:58:51:61:40:b3:
8a:18:e4:10:8d:aa:8b:54:76:b0:9d:3c:4b:fe:5a:05:d9:20:
54:76:41:9a:56:62:16:e2:58:71:e8:ee:ba:d4:e2:da:d2:6b:
52:ed:9d:24:86:dd:d1:bb:52:2f:9f:6b:44:21:04:bf:ef:b6:
d8:df:78:1e:93:4d:54:c3:86:8b:2c:e0:35:80:d1:49:80:33:
67:02:7e:bf:4a:27:ff:eb:11:dc:64:02:75:9f:d6:e3:ea:01:
54:6e:c1:84:60:99:06:4d:6e:8d:b5:fe:91:27:54:39:6b:48:
98:d5:24:5f:32:91:35:7b:e2:6c:f2:ac:a8:1b:59:28:4b:5e:
b1:b8:0a:5b:9d:49:d1:af:86:cf:9e:f7:43:21:77:71:66:31:
67:6b:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:47 2025 by rpki-client