Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: bNINg1/CdOxyTfys/784Br0YXpIiynwovp556MKPDzU=
Subject key identifier: 45:81:C3:4E:58:08:60:32:72:55:03:65:65:BE:12:45:45:AE:B9:22
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 01976BBCC91A50983BD436A35631304FEEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0E0F
Signing time: Sat 14 Jun 2025 00:00:23 +0000
Manifest this update: Sat 14 Jun 2025 00:00:23 +0000
Manifest next update: Sun 15 Jun 2025 00:00:23 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: 5kZ1CS0fj+H2gptygMJhkEi5NpJ5TTHA6xc8fp2+Dj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:c9:1a:50:98:3b:d4:36:a3:56:31:30:4f:ee:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jun 14 00:00:23 2025 GMT
Not After : Jun 15 00:00:23 2025 GMT
Subject: CN=4581c34e580860327255036565be124545aeb922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:d1:56:65:b5:da:4d:6b:27:39:f2:ba:93:
91:fc:bf:85:bf:20:f6:b7:76:ea:6f:d8:3b:5a:c7:
84:f8:9c:a3:d9:25:05:81:2a:82:26:fb:32:dc:80:
ce:20:59:57:25:75:39:b9:b0:0b:f0:41:7e:c9:c6:
74:da:08:6f:d1:1c:ef:3a:7b:56:60:95:7c:02:77:
a4:1f:2c:e1:44:35:71:e0:7e:26:92:6e:f4:fe:be:
c2:70:9d:d1:45:94:53:43:78:18:1b:31:48:62:fb:
9b:a4:2a:82:f8:b0:f5:9f:74:ad:0e:da:47:6d:08:
32:29:e1:50:3d:ad:35:fc:b0:ee:f9:18:a0:38:95:
af:0a:58:35:ac:b8:3e:c5:f3:c2:31:ff:44:6f:b6:
75:71:66:e1:1c:57:39:e5:ec:5a:7b:36:d1:59:c2:
79:2e:59:57:ab:97:3d:26:d0:5c:9d:44:a2:a9:fa:
99:75:0e:61:0c:b2:7b:a1:12:22:ef:ed:0a:59:d4:
b2:9d:a1:77:f1:44:19:ed:da:31:6f:4a:2b:1a:26:
3f:58:02:ed:4d:d4:db:4b:71:54:08:8c:06:87:67:
60:e2:d7:1c:90:13:f7:ce:cb:de:c8:5c:70:4f:5b:
3a:49:2a:08:39:2c:45:31:bd:c5:37:a6:fc:74:03:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:C3:4E:58:08:60:32:72:55:03:65:65:BE:12:45:45:AE:B9:22
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:c3:c3:a5:4f:76:c0:a0:0a:52:66:bf:bb:54:25:b2:73:
d8:3d:9c:f4:da:de:d1:1d:0f:34:a0:26:d6:75:b1:15:cd:79:
ba:8c:99:f4:67:49:4b:a4:fd:c5:c5:38:d1:88:9d:d6:85:9e:
33:ca:59:9f:73:50:3a:05:27:a4:0f:0a:85:d0:7d:38:a0:61:
4d:54:ad:10:5e:56:04:f0:8e:89:da:f0:c8:78:96:a0:ee:d2:
6d:19:2b:0f:69:28:7d:ff:00:9c:13:c3:16:47:fe:62:c6:21:
61:a6:36:ed:b9:7c:ee:df:a3:94:fa:b2:d2:9e:e6:76:c2:56:
4f:12:44:4d:f5:55:59:51:7e:81:28:fc:8a:e4:21:f2:ff:d6:
a1:30:e6:5e:48:ac:f2:4c:47:2f:3a:e9:39:3e:92:ad:e3:c5:
05:75:69:0a:fb:1b:5a:f7:7c:86:1c:63:ab:8d:c2:5b:2e:52:
55:70:c0:a2:75:9b:61:5e:85:d1:07:94:b5:d0:c8:e9:88:91:
f0:d4:77:3d:93:6d:7f:2f:9e:c6:4c:b9:ac:04:6e:aa:6d:d7:
1d:2e:2a:f7:6a:3d:4b:dc:1e:cd:f6:8d:eb:02:28:c2:40:26:
21:8f:68:aa:1c:03:78:4a:2b:ef:68:ec:46:7a:84:e8:24:ab:
7d:d2:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:20 2025 by rpki-client