Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: ZdgEPAWK/bH6SiOawNkhILFAxkotoZQYMZ8aaq4pETg=
Subject key identifier: 1F:CB:7C:80:18:33:DE:7A:47:A3:E1:AC:95:C7:4B:D7:C0:49:F0:76
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 0196C5A88CACEE567BC3E9E0EC242798A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0DB9
Signing time: Mon 12 May 2025 18:01:19 +0000
Manifest this update: Mon 12 May 2025 18:01:19 +0000
Manifest next update: Tue 13 May 2025 18:01:19 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: rxmqL7h2dogn4PHi5VXwfqkcbK7WpCV4v1zRqr9UFvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:8c:ac:ee:56:7b:c3:e9:e0:ec:24:27:98:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: May 12 18:01:19 2025 GMT
Not After : May 13 18:01:19 2025 GMT
Subject: CN=1fcb7c801833de7a47a3e1ac95c74bd7c049f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:90:8b:3e:a7:c3:7b:71:68:b0:6f:61:bc:
80:eb:31:8b:53:8e:3a:69:c4:8b:09:f8:2e:86:7e:
1a:97:de:df:48:6a:69:f7:a4:76:e7:50:30:ad:07:
05:7f:07:d8:d8:2b:16:29:15:a6:07:68:9f:bf:4a:
15:4a:0d:e8:74:a8:da:70:33:c1:c1:53:6e:15:b1:
d8:3a:a6:0a:13:03:df:6f:da:35:b0:59:d8:8c:a1:
67:77:3a:73:49:f9:8c:fa:3d:dc:7c:c1:d5:a3:04:
04:af:30:4f:c3:ee:91:25:26:2a:30:b1:13:f0:71:
7a:d2:55:2d:df:06:02:78:73:d7:2d:ba:69:ab:0b:
7e:22:33:4b:b2:53:bc:fa:4d:31:a2:81:2c:8b:30:
21:a5:12:d3:10:0b:7d:eb:1a:01:12:6b:a6:64:f4:
40:8b:e0:f2:2c:c3:2c:a8:c5:90:5e:76:0a:90:cb:
68:ca:73:24:5d:79:43:12:6a:a3:8e:fe:b7:b3:25:
08:42:e6:9c:7c:c1:b8:f5:c1:3a:9f:d1:f5:cb:d5:
d2:13:3a:1c:1f:70:dd:7a:95:ee:d6:08:da:b9:83:
60:8d:4d:a5:b2:8d:e2:76:75:fa:5f:d4:0d:20:fe:
a0:52:fb:37:ae:df:05:7c:f8:75:b0:05:87:d6:ac:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CB:7C:80:18:33:DE:7A:47:A3:E1:AC:95:C7:4B:D7:C0:49:F0:76
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:d4:83:bb:e6:a3:40:2d:28:bc:af:09:2e:19:09:9a:3e:
19:cb:db:d5:c6:8d:b1:dc:29:87:2c:80:fb:0c:64:73:73:3a:
71:8d:02:c5:4e:e7:10:28:ab:63:31:b4:47:09:a5:5f:d8:f3:
ce:c6:49:e4:ff:a7:89:63:e6:ee:1c:a8:51:1e:c3:ce:59:48:
7a:b7:d6:17:df:d3:36:d7:aa:ba:3c:cf:72:0a:6d:9e:56:ea:
bf:9d:6c:9c:24:bd:7a:18:dc:50:7d:c1:1f:83:dd:4a:2a:58:
b1:48:23:70:e3:cf:d8:86:37:1a:47:c8:33:03:02:d0:a1:a5:
4f:45:69:ef:34:70:4e:37:50:f5:62:d9:b3:eb:46:df:c1:a9:
af:ef:4e:b6:4f:80:3c:14:cd:e8:8a:7c:58:55:7b:cb:48:a0:
20:31:24:7b:5c:0e:30:17:f0:dc:1f:ad:ea:bc:cf:31:76:6f:
0b:45:99:cd:68:b9:0a:c0:88:94:d3:5f:99:8d:19:5a:c6:5e:
d1:30:05:7e:01:9f:b0:0d:08:29:0d:6c:25:77:cb:97:c7:ce:
db:77:b5:04:34:dd:e3:04:25:0d:5f:10:ca:bb:0a:81:b3:b6:
ab:62:e0:40:73:74:b1:f2:c4:d7:df:63:36:4e:cc:c4:55:bd:
af:8c:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:11 2025 by rpki-client