
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: QAD+ZGKlRFvrS9wScnAvI6Af7Mt9EjZpMsfvL7l2a7c=
Subject key identifier: BB:D3:D4:93:80:DF:51:21:B5:E8:4D:C8:C9:8D:70:5F:AD:AE:DC:F6
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01988B0FF97643E7A15DE5DBDAFBDDCF2DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0F88
Signing time: Fri 08 Aug 2025 19:02:16 +0000
Manifest this update: Fri 08 Aug 2025 19:02:16 +0000
Manifest next update: Sat 09 Aug 2025 19:02:16 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: sqY4oCKO6ZIcTpd3eKPbiVX3NttV0UP64mpSbn9c3+E=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:f9:76:43:e7:a1:5d:e5:db:da:fb:dd:cf:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Aug 8 19:02:16 2025 GMT
Not After : Aug 9 19:02:16 2025 GMT
Subject: CN=bbd3d49380df5121b5e84dc8c98d705fadaedcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:5d:d0:d6:4c:75:51:f7:1b:6b:7c:6a:88:
b5:bf:c1:c3:b6:07:57:49:1c:9a:dd:04:d3:3e:78:
d7:9a:78:e5:93:fb:3c:af:ff:19:73:8a:b7:08:bb:
a7:f0:6d:1c:98:a9:9f:a3:ad:4e:6d:eb:c3:f2:c4:
1f:64:a9:bd:02:59:8f:dc:37:53:bc:da:50:60:e6:
3f:a4:1b:25:d1:45:d0:2f:c7:ca:ae:6c:a3:5d:16:
5b:61:62:9a:cf:f6:4d:ef:d6:83:6a:b2:64:20:5f:
4c:42:30:cf:b1:90:2d:92:7e:18:8f:6c:f9:1e:5b:
3a:3a:e6:63:2c:9c:c8:ad:c4:42:67:ac:4b:99:5b:
e6:b7:7d:b2:fa:9d:e1:7e:d2:99:2e:40:0e:41:65:
32:c4:30:27:06:6c:4f:2f:e2:e5:09:a6:d3:44:0e:
4a:b6:fb:6e:f7:b3:4b:ba:cf:91:bd:e3:17:4c:e7:
eb:6a:2d:b8:84:2c:2f:75:ac:cd:1d:11:ef:e9:1c:
ea:5c:34:a3:2e:74:bd:f9:b6:90:ef:bd:ef:7e:67:
5a:fb:26:33:17:16:08:e5:2e:ec:be:28:aa:d8:f9:
7e:4c:55:46:e3:3d:7d:a3:44:14:23:60:ba:cf:7c:
c0:d7:44:33:75:ea:54:86:43:a4:bd:ee:9a:cd:19:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:D4:93:80:DF:51:21:B5:E8:4D:C8:C9:8D:70:5F:AD:AE:DC:F6
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d2:fa:de:19:b9:4b:3c:05:db:b1:b7:c7:93:f6:3d:58:d7:
a9:da:01:82:ee:79:57:a5:6c:8f:c0:0f:35:e2:35:ba:e6:a0:
c9:bf:db:44:be:f6:09:c8:28:c7:46:5d:b0:f2:7f:c9:e7:49:
83:0a:29:45:d7:1e:18:c1:9a:e0:cb:c5:cb:38:0d:9e:78:8b:
5c:c9:d2:e3:eb:e6:b3:58:4a:ce:35:3f:cd:84:26:18:30:09:
3a:a8:27:bf:f4:cb:f5:ae:34:21:c1:76:69:52:cd:43:8f:18:
d6:59:4e:22:2d:26:bb:0a:c2:a1:7b:58:ca:4f:ab:7b:c6:ee:
73:be:b8:fa:b1:b3:9a:56:3d:7d:01:42:00:1f:9e:24:3d:03:
f7:ec:36:5d:9b:21:34:e7:fb:49:f3:7d:b1:40:cb:57:8e:c1:
d0:77:86:c7:cb:0c:1c:54:80:65:c4:0e:0c:8e:85:06:10:64:
34:3d:cf:51:d3:de:ed:24:97:b5:24:1d:9e:87:c8:45:18:ff:
6f:a4:1c:dc:7d:a0:6b:d2:23:35:ee:bd:8e:22:c6:f6:a3:e4:
2b:52:45:5b:0a:7d:d1:b1:ac:67:96:92:fc:59:e5:1a:49:9d:
67:33:36:1c:7a:72:85:b7:ca:54:0a:7e:2b:65:b1:44:b7:93:
23:a7:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:49 2025 by rpki-client