Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: PFoYPgecRlwNdGZzHjrj2bVwjQc4j+HkOCTtdcw0McA=
Subject key identifier: 8A:D8:E7:65:CB:A9:E6:98:00:D4:10:73:3B:9A:D4:31:A3:2C:32:80
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019A4EF48BBB6E17B6E700CC0CA96F7D41C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 1447
Signing time: Tue 04 Nov 2025 13:00:40 +0000
Manifest this update: Tue 04 Nov 2025 13:00:40 +0000
Manifest next update: Wed 05 Nov 2025 13:00:40 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: 1j1SbeqM5olWOFDELRIpdi1VdHPtBUnlBmlnEgScQ5c=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8b:bb:6e:17:b6:e7:00:cc:0c:a9:6f:7d:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Nov 4 13:00:40 2025 GMT
Not After : Nov 5 13:00:40 2025 GMT
Subject: CN=8ad8e765cba9e69800d410733b9ad431a32c3280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:1a:51:ae:7a:a5:a9:92:fb:e5:ee:4f:ac:
b0:ac:d9:fd:6b:4d:af:7c:33:74:73:a5:ee:7e:73:
d3:7e:b2:34:36:09:c1:f7:04:73:8e:c8:2a:81:7a:
54:ff:64:39:b7:61:f7:7b:b7:eb:f2:7e:c2:9c:c0:
34:04:60:c0:95:ab:bc:fe:a6:80:58:d2:64:24:a6:
c5:1b:04:a9:f4:aa:4a:bc:1d:50:13:1a:93:48:87:
74:4a:5c:1e:38:f9:ae:d2:f5:6d:7a:ad:3d:48:8b:
11:39:c4:59:ee:75:2b:8d:6a:a4:4d:8f:06:00:c9:
27:ac:06:47:6f:df:e9:24:a8:c6:d5:49:84:79:70:
e2:f2:b6:18:65:06:a2:82:ae:0a:42:25:ad:8b:fe:
de:8b:fa:b5:9e:e0:cd:38:bb:aa:e9:92:3b:dd:f2:
8c:a5:d6:c7:bf:1f:4a:aa:15:83:c0:16:bf:23:85:
8c:90:46:79:a7:a6:da:de:75:28:75:ef:ae:e8:ed:
1a:8a:1a:3a:ad:9b:07:62:cc:5d:68:64:49:1b:37:
17:6b:ac:25:6c:b4:f3:f8:53:c5:49:f8:6b:1e:f4:
73:df:60:33:4e:69:af:38:2f:1e:f0:46:28:ff:c2:
7a:66:4f:3c:9d:45:26:0e:7f:22:08:96:7a:73:54:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:E7:65:CB:A9:E6:98:00:D4:10:73:3B:9A:D4:31:A3:2C:32:80
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c7:c0:27:04:16:49:1d:c5:0d:1f:5f:24:2b:3a:0f:94:84:
43:3f:bd:32:f0:f3:da:cd:43:84:63:40:a8:f0:18:ac:c5:25:
4d:45:c7:d0:83:84:80:ac:bf:b2:3a:ff:fc:f4:32:8a:9a:1e:
e7:7e:db:5a:f0:42:39:ef:29:5b:4f:e1:0e:fe:a0:19:39:03:
81:df:6a:6b:2c:b2:cf:f2:80:5e:13:ce:e4:0c:e6:8a:77:22:
61:8b:98:53:2d:56:ea:51:cf:6d:1c:09:25:b4:03:f7:b7:74:
9c:b1:34:cc:86:fe:69:fd:1f:41:bd:31:5d:46:9c:26:a9:ad:
1a:e1:91:6e:cd:4a:d2:e0:00:77:be:88:04:b5:d5:4c:47:cd:
c5:fe:e4:9f:5a:0e:a1:ec:9a:0c:19:33:08:54:cc:0f:88:67:
fc:f0:7f:d4:6f:5c:b6:34:b1:31:9a:63:e4:b1:64:f0:b8:a0:
91:d9:16:1b:14:c1:e2:e9:81:38:0b:5c:dc:6c:24:c3:e2:76:
25:15:7b:8a:9d:77:a2:a0:73:b8:38:f0:f7:b9:7c:0c:36:e9:
80:22:1d:b1:b9:02:d6:3e:47:7e:ca:64:8a:0f:f2:c6:68:6f:
c1:14:e0:59:fe:68:02:eb:bb:ab:38:fc:26:9a:d2:ae:cc:6f:
6f:09:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:19 2025 by rpki-client