Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: kCSto2CBpo3Tb0WmzYB+r0WMfcWmmm/ZoybuPz7/Lso=
Subject key identifier: 03:7E:C9:A7:2C:8C:84:C1:7D:64:55:3E:3E:DB:E6:C3:91:C8:5E:40
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 019778D3CFF0C30B25569138C4A4E48A700A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0EFA
Signing time: Mon 16 Jun 2025 13:00:36 +0000
Manifest this update: Mon 16 Jun 2025 13:00:36 +0000
Manifest next update: Tue 17 Jun 2025 13:00:36 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: yk6iVBvtYYkx/k42aZQZTvTONKQqGkxZW2IEzqTlkb4=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:cf:f0:c3:0b:25:56:91:38:c4:a4:e4:8a:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Jun 16 13:00:36 2025 GMT
Not After : Jun 17 13:00:36 2025 GMT
Subject: CN=037ec9a72c8c84c17d64553e3edbe6c391c85e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:40:ef:d9:36:3e:e0:ea:57:cd:df:2a:f8:
9b:28:7b:5f:21:70:f9:8e:d5:ce:db:c4:2f:85:2a:
8a:f1:77:c2:3b:da:c6:e8:c8:6b:0b:99:24:54:51:
c5:87:06:e1:ff:22:56:9b:e8:36:87:73:c3:a3:2a:
2f:a8:ce:ae:a3:ad:ee:53:00:38:41:18:0d:91:5d:
d7:b4:e8:df:6b:15:94:fd:f9:99:79:7f:ff:2d:c8:
78:fd:bd:54:2c:ad:58:82:c7:94:3f:41:6b:92:79:
9d:10:44:0c:69:8b:b6:0e:ea:cb:8b:b1:e6:b8:8c:
33:64:f1:d5:56:b6:78:b7:74:c9:f3:8b:2b:53:4f:
31:f2:45:cd:32:f9:42:32:7f:e6:19:1d:03:94:67:
79:1f:b6:a3:f2:07:6b:b1:f9:41:6f:20:1b:b5:eb:
93:3c:ac:d0:05:4e:29:8a:82:80:77:23:5c:d0:20:
12:a1:2b:10:cb:4f:38:58:11:89:02:fd:52:4d:cc:
35:1b:f0:fb:95:4a:5a:1c:14:f9:5f:ee:04:1b:24:
b0:56:26:e3:6c:6f:98:78:0d:83:33:9f:7c:dc:57:
d1:8e:82:9e:1d:32:fb:4c:7e:ac:95:f1:52:4e:26:
1b:b2:fe:97:c1:e9:b2:2e:53:ff:97:ae:dc:11:c3:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:C9:A7:2C:8C:84:C1:7D:64:55:3E:3E:DB:E6:C3:91:C8:5E:40
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:d5:dd:7a:df:44:b1:42:63:28:25:b7:5f:44:f9:53:d5:
c0:49:54:b8:a1:92:ed:94:76:25:15:9f:d0:4b:48:86:5c:d3:
a0:30:42:20:49:b0:32:02:cd:3f:c1:0f:31:f9:5c:c5:de:90:
32:7b:a6:c4:1f:86:78:80:b1:b5:4d:1f:b6:4e:86:bc:ce:33:
5a:88:ea:9b:b5:fc:37:04:27:c3:4d:01:73:b8:8b:44:3a:bd:
1a:d5:ab:3c:87:50:a0:84:1b:34:4e:09:a2:ac:a8:70:3d:54:
a1:e2:fc:bf:f7:91:e9:56:20:61:fd:df:3e:87:84:f6:b3:78:
f7:8d:4b:da:d3:51:a1:22:bf:6e:2d:1c:2f:7d:96:19:10:a6:
19:59:97:8e:53:84:2b:20:01:73:11:ef:94:ac:5d:67:12:55:
54:89:19:ae:e2:ca:25:f2:56:65:06:73:36:e0:95:b2:b6:4a:
ae:30:25:94:85:95:3f:97:b8:99:ee:32:57:36:86:f7:8e:f0:
0e:d3:40:f0:d0:3f:c9:98:a2:ce:ac:49:62:1c:f9:ef:25:6d:
44:05:be:54:15:82:43:20:09:73:f3:5f:24:3e:8f:ff:25:3d:
33:83:5a:99:ff:5f:21:15:6a:9a:cc:15:64:28:eb:f2:b3:a2:
db:cd:5d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd408/wwwslVpE4xKTkinAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTRmZjY3ZjNiOGQ0ZjZmNmJkYTIzZWNiYmM3YjBmMDlm
ZTYwODAwHhcNMjUwNjE2MTMwMDM2WhcNMjUwNjE3MTMwMDM2WjAzMTEwLwYDVQQD
EygwMzdlYzlhNzJjOGM4NGMxN2Q2NDU1M2UzZWRiZTZjMzkxYzg1ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UBA79k2PuDqV83fKvibKHtfIXD5
jtXO28QvhSqK8XfCO9rG6MhrC5kkVFHFhwbh/yJWm+g2h3PDoyovqM6uo63uUwA4
QRgNkV3XtOjfaxWU/fmZeX//Lch4/b1ULK1YgseUP0FrknmdEEQMaYu2DurLi7Hm
uIwzZPHVVrZ4t3TJ84srU08x8kXNMvlCMn/mGR0DlGd5H7aj8gdrsflBbyAbteuT
PKzQBU4pioKAdyNc0CASoSsQy084WBGJAv1STcw1G/D7lUpaHBT5X+4EGySwVibj
bG+YeA2DM5983FfRjoKeHTL7TH6slfFSTiYbsv6XwemyLlP/l67cEcOMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN+yacsjITBfWRVPj7b5sORyF5AMB8GA1UdIwQY
MBaAFDUU/2fzuNT29r2iPsu8ew8J/mCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQt
ODg1NGM5MmQ0N2IxLzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQtODg1NGM5MmQ0N2Ix
LzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp/V3Xrf
RLFCYyglt19E+VPVwElUuKGS7ZR2JRWf0EtIhlzToDBCIEmwMgLNP8EPMflcxd6Q
MnumxB+GeICxtU0ftk6GvM4zWojqm7X8NwQnw00Bc7iLRDq9GtWrPIdQoIQbNE4J
oqyocD1UoeL8v/eR6VYgYf3fPoeE9rN4941L2tNRoSK/bi0cL32WGRCmGVmXjlOE
KyABcxHvlKxdZxJVVIkZruLKJfJWZQZzNuCVsrZKrjAllIWVP5e4me4yVzaG947w
DtNA8NA/yZiizqxJYhz57yVtRAW+VBWCQyAJc/NfJD6P/yU9M4Namf9fIRVqmswV
ZCjr8rOi281dAA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:49 2025 by rpki-client