Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: HOBZ59hkGciJjBDudq8FRFs6cp7kRFKBJfDTATgxglU=
Subject key identifier: 6A:AA:BA:8F:0E:DF:7F:46:55:BD:F5:7D:36:E8:AC:A5:4C:F7:42:B6
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 01974CD75FFDE4D301DD6B1640A463794873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:01:12 +0000
Manifest this update: Sun 08 Jun 2025 00:01:12 +0000
Manifest next update: Mon 09 Jun 2025 00:01:12 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: HPYBI/jLsidH0Yc3g/f3OK+KW1/PZHOylfI+tmGRJ9Y=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:5f:fd:e4:d3:01:dd:6b:16:40:a4:63:79:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jun 8 00:01:12 2025 GMT
Not After : Jun 9 00:01:12 2025 GMT
Subject: CN=6aaaba8f0edf7f4655bdf57d36e8aca54cf742b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:db:1d:e5:76:7b:a8:95:59:e0:8d:d7:9d:
65:ee:a7:0b:16:9d:da:2f:3b:a0:aa:fd:75:d9:52:
23:2e:2d:d7:e0:df:93:dc:54:ff:57:ac:4b:c5:3f:
4a:82:e1:92:f6:d1:a5:96:f1:b3:34:aa:9d:cf:8f:
c5:14:2b:62:03:61:fd:bc:0b:18:4e:8f:b1:d2:c3:
d0:ff:ee:a9:7f:cf:6d:0c:8c:d0:8e:31:44:c2:b9:
aa:d9:43:da:54:75:c9:b1:d8:72:26:94:cb:b8:be:
fb:76:1c:cf:06:78:a8:3e:f7:2c:50:48:6c:a8:2e:
e4:dc:55:b1:e7:0f:a0:65:7d:c4:b3:76:94:ed:f3:
dc:01:be:e6:11:7d:17:b4:5a:41:dc:1c:ce:2f:aa:
7f:f2:ae:7c:f9:19:f5:ce:75:48:b3:63:c4:45:52:
ee:1f:5e:db:33:7c:fe:bb:0f:ca:c3:44:62:f4:34:
31:60:90:48:74:45:a1:ec:6b:ad:69:1d:e6:22:12:
bf:77:ff:bf:a4:f8:7e:47:be:26:0b:fd:a7:4d:24:
26:65:34:9e:13:35:e3:b1:bf:61:9e:5f:81:35:e1:
15:38:b8:7a:4a:4e:cb:cc:03:91:8d:c6:a1:4b:20:
09:47:7b:a2:1f:ce:e4:e2:df:94:47:90:2d:c7:7c:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:BA:8F:0E:DF:7F:46:55:BD:F5:7D:36:E8:AC:A5:4C:F7:42:B6
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:c9:28:8c:36:c2:e8:f8:f8:11:08:56:36:fb:84:74:f0:
39:3d:78:5d:fc:51:54:f3:ed:c7:5d:48:0a:23:fb:46:3a:2a:
b8:36:24:ed:e1:62:f3:89:4c:23:66:f0:73:51:ff:80:cd:fb:
d8:b8:72:64:07:47:cc:6d:0e:af:72:e7:3e:db:55:b8:66:7d:
43:1b:50:68:93:37:73:85:dc:07:a9:75:2e:60:7e:4e:33:70:
a8:33:58:39:4b:65:10:b7:20:c3:09:25:5e:25:22:0b:2e:b5:
53:43:40:dc:53:99:eb:9d:3f:43:13:7a:01:8a:75:4a:f9:99:
41:7a:36:ac:8e:ac:f1:50:49:72:bb:7e:68:4c:a7:47:77:8a:
c1:78:70:ae:d3:d8:51:89:dc:7b:ec:80:b0:cc:bb:54:e5:55:
93:a9:95:a6:b7:93:1b:03:31:a7:a8:a2:42:d2:ab:5e:d4:13:
fa:20:da:75:50:78:84:2d:54:b2:00:23:65:11:6d:af:c4:64:
53:ee:f1:b5:fe:56:2e:36:0f:b5:d0:b4:9e:aa:ef:d4:5b:64:
04:3a:84:12:63:c1:de:31:c3:f3:ed:91:2b:a8:54:f0:c1:06:
40:18:0d:b6:71:5e:7d:d4:b6:87:0f:21:58:13:3b:23:8d:e8:
5f:5a:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:22 2025 by rpki-client