Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: 0iXbIx8ZAb3acxIsbQYcZ4ZnW1aYCGJmpQl8iClV6Pw=
Subject key identifier: E5:EF:D2:A3:C7:B6:A2:CB:BD:76:3F:AE:65:34:EE:0C:E5:66:A8:65
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019A4F62CDF568E5F75B242F7EE956776180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0F8E
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: JUzTnLsIy9oRyNRd9U7udAGlyaJNxY8zRG6Q7RzRTuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cd:f5:68:e5:f7:5b:24:2f:7e:e9:56:77:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=e5efd2a3c7b6a2cbbd763fae6534ee0ce566a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:78:e0:10:e5:f7:b9:00:e5:1a:0e:a7:f0:
9c:b8:21:4e:11:e6:72:c9:6b:3b:d8:c4:c6:94:c0:
a7:3e:e4:87:30:8c:29:59:b2:64:0b:84:d7:d9:e8:
59:7d:15:02:99:8c:09:f8:fe:ea:7f:7c:d3:40:10:
e7:05:59:c4:0a:d2:32:87:66:42:2d:fa:d9:10:10:
47:71:11:f0:d5:51:7f:4f:c1:79:b7:d9:b3:02:05:
df:38:d0:a6:09:1b:dd:c9:9c:ef:25:e0:47:7e:01:
ee:27:86:b2:f7:18:31:a3:c2:24:6a:a7:f5:ee:e7:
8e:ac:d9:fa:fc:2b:81:83:0d:33:43:fd:d8:08:1e:
b4:86:07:ab:d4:7d:ed:df:c0:a1:cc:31:90:a0:63:
d0:d3:55:f9:be:9d:1f:4a:f1:d0:a5:7e:ef:96:41:
10:2c:a1:e0:db:15:55:ab:b7:c4:1e:7a:aa:23:4b:
58:3a:1a:01:40:27:7c:fe:5b:87:7f:e3:84:24:d2:
17:b7:a5:73:2a:7b:5a:c7:81:86:b4:2b:bf:8d:fd:
d2:2a:43:76:bb:2e:9e:20:17:eb:f1:56:64:5e:89:
4b:67:9d:c2:f9:e4:7c:77:bf:77:a6:18:4a:00:1c:
2a:06:70:8b:d0:99:3e:25:7b:99:8a:16:2b:31:e3:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:D2:A3:C7:B6:A2:CB:BD:76:3F:AE:65:34:EE:0C:E5:66:A8:65
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:f7:77:c5:45:86:57:de:af:0c:01:05:f2:5f:73:83:61:
22:76:39:9c:15:fc:8d:2a:f9:30:ec:b3:7b:46:9d:29:1e:1c:
10:87:da:97:25:aa:8f:73:81:2f:fa:ab:35:ed:ec:db:35:c2:
b0:51:60:e4:b1:26:a8:1c:1d:1d:1c:db:ae:5c:df:a8:e9:6f:
fd:25:13:db:2e:56:b8:96:67:2e:cf:63:68:8d:49:74:07:1f:
cb:51:0b:d6:cc:6d:98:00:8c:49:79:1c:e1:92:41:b4:6a:4b:
4d:13:e3:51:a3:32:2f:96:2a:8e:91:b0:2a:16:6a:58:37:de:
0c:b1:18:57:19:4d:38:c5:68:d3:e5:bf:4e:80:e9:38:69:a7:
4b:ad:94:cb:a4:ee:1d:cb:83:a7:33:2f:5d:d2:12:2a:cb:28:
60:7b:81:8a:f7:89:ff:7e:7e:37:dc:78:4b:a1:c5:52:04:13:
fe:b9:2e:95:ce:e0:ad:f6:d0:1c:a8:bd:1c:28:8e:05:d4:49:
8f:4c:30:67:7e:bb:86:9d:ed:bb:c9:df:4c:b7:ed:20:5f:cd:
58:f6:f0:51:a0:3e:c6:f8:45:d2:d8:af:1b:a1:0a:4a:1c:fd:
41:4e:96:c0:48:e4:13:34:c2:35:23:97:d1:00:f0:00:34:6a:
a0:5c:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:17 2025 by rpki-client