Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: e6SzEs4Wxxw+GDSFTaPaqNeoXTrn0/OqewmeKtNvlm8=
Subject key identifier: 4A:C9:19:CE:72:C5:B5:21:C3:A9:72:A5:33:31:48:6F:44:71:08:78
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 0197B70F1FDF20DAA34927C155596E1CAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0E36
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: IEX85TxWxk2GB3M9lGfdH2/u34dbNLnGDAXi/yETeoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1f:df:20:da:a3:49:27:c1:55:59:6e:1c:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=4ac919ce72c5b521c3a972a53331486f44710878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:d4:4d:76:e7:41:c6:7d:3e:36:bc:28:c3:
ab:07:8e:59:c4:7e:ff:0d:e0:d4:b4:27:6c:36:31:
f5:9d:16:23:4c:88:45:bf:72:38:fa:51:88:ad:23:
0c:16:72:9a:76:57:c5:c8:3e:17:8d:d2:b5:05:e9:
6e:80:4f:2c:d8:35:f4:83:03:c7:4d:a0:00:8c:3c:
55:70:94:db:a9:dc:14:f6:6f:14:ee:7e:91:43:7a:
ff:82:18:9e:47:1b:dc:32:1a:22:70:53:7e:ce:82:
ec:ac:9a:ba:63:e9:d7:a6:88:37:4d:2d:98:d0:ed:
66:5a:0a:06:ad:c5:05:08:69:ab:48:08:35:90:7b:
10:b9:4b:62:ea:d8:84:07:e3:81:96:f2:39:82:ef:
18:56:d6:7f:95:b2:7c:d2:b1:a9:08:59:b3:99:cc:
b5:3d:74:fb:a9:78:07:52:ef:d4:42:c7:1a:07:fb:
9b:db:52:b0:16:5d:7a:35:15:a2:0a:58:0c:28:45:
2a:16:ba:40:7f:3b:c5:14:29:77:4e:54:04:7f:77:
7f:dc:fc:ec:31:10:ac:a4:7c:16:ee:95:bf:b9:b8:
5f:11:d5:7b:02:aa:3d:f9:1e:3d:34:55:a1:d9:0b:
de:08:52:b9:0b:f1:89:b7:f8:96:95:57:c2:7c:1b:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:19:CE:72:C5:B5:21:C3:A9:72:A5:33:31:48:6F:44:71:08:78
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:62:58:b3:a6:f3:9f:7c:45:91:39:6e:ac:5b:dd:c3:8e:60:
a1:12:f2:68:e3:82:fc:da:9b:bb:49:58:fe:ee:a7:c7:c9:67:
c4:a3:86:5b:3e:eb:9e:89:3d:2e:41:82:6e:98:b5:fb:34:cb:
9c:d1:44:67:2c:78:b6:a8:97:a4:60:f7:12:2f:c6:07:03:4d:
9b:78:16:e5:a6:0d:af:3d:82:41:c7:79:57:07:75:63:1a:39:
cb:c4:a6:1a:d8:d4:21:38:97:75:1b:98:b1:fc:de:e1:1c:de:
8e:19:dd:55:df:d6:68:43:b6:46:f4:2d:5a:e5:17:96:1f:b0:
d6:50:0b:be:19:71:e4:0b:57:9b:c5:6c:ce:78:72:ba:de:40:
ec:34:ce:e2:c0:fa:29:65:a4:57:6d:d1:69:10:e6:c8:39:c4:
ce:ca:7b:e1:57:5c:e8:cb:a6:c1:6a:d6:43:bc:f5:5e:f7:6f:
74:ab:dd:37:7a:68:d1:8a:ae:13:97:ae:b1:7a:00:78:31:68:
50:90:73:fb:3f:a1:ec:af:17:c7:da:19:37:9c:11:d6:f0:dd:
2b:5b:27:b4:a3:4a:a3:fb:f4:d8:0a:e7:b3:ef:5f:50:8e:f0:
2d:4a:f4:58:d4:1d:99:99:4e:46:d1:a3:fe:29:66:06:95:69:
98:4e:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:12 2025 by rpki-client