Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: ih/8+WnP47Di8hHmD2FrPmvj7dlMIYKydZEeMwXbLfE=
Subject key identifier: 7E:78:87:57:F3:7E:AC:6A:66:64:17:B3:CA:65:0B:4F:A4:16:15:36
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 0198D4E097FA15B9BD3B840F1DE0F7812362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0ECA
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: cbAMJWD59SMz5BLm4FoeX+mUsKMceaXWPf2n0lmr9Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:97:fa:15:b9:bd:3b:84:0f:1d:e0:f7:81:23:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=7e788757f37eac6a666417b3ca650b4fa4161536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9f:f4:e6:52:af:69:a3:d6:c7:9f:1e:a2:7c:
0e:73:4f:d9:66:16:3a:bf:84:6c:78:6c:d1:05:27:
ab:11:f1:2c:c6:65:cc:04:35:2c:ff:94:3b:0b:ac:
81:56:4c:45:21:8c:e3:30:50:51:b5:0f:3f:c1:9f:
cd:dc:12:96:df:fa:0b:ad:42:61:1f:80:5e:c6:fa:
ab:0d:77:d0:9e:ad:0a:14:5c:c8:b6:a7:c7:c4:36:
fa:ae:a3:82:3e:94:eb:bc:56:a9:18:3d:fe:80:4f:
c4:18:9e:0e:11:52:b5:ff:38:8e:c9:41:be:1e:20:
cc:ec:65:29:c0:fa:53:9c:74:8e:80:0c:00:02:6b:
78:17:14:27:0a:a8:0f:a1:88:a7:0d:95:ab:73:65:
bf:3d:ea:22:61:91:db:a0:12:29:6d:49:bc:ca:d1:
0c:ca:85:58:a2:d0:d2:4e:78:21:a1:b3:6f:91:47:
29:7d:42:16:59:a1:09:e8:fe:c3:65:55:f9:b7:37:
6f:82:88:fe:4f:d0:86:c5:e3:1d:21:e5:df:c5:12:
f6:14:2a:6f:41:81:22:77:a9:85:e5:4a:1a:bb:53:
68:4c:f8:49:c2:8d:e3:fe:aa:a2:8d:54:e1:e3:ab:
b0:b8:77:58:99:84:b9:0c:7e:cb:8b:42:40:03:55:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:87:57:F3:7E:AC:6A:66:64:17:B3:CA:65:0B:4F:A4:16:15:36
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:d3:ea:1e:5a:ee:3c:16:de:26:69:0f:eb:d0:5c:30:3b:
c4:92:a8:dc:80:1c:62:d7:97:d9:70:bc:b3:fb:b7:24:07:93:
d4:5d:ed:35:7c:2f:9c:6e:a6:fb:58:97:b7:c1:0b:86:70:8a:
98:b3:ab:c4:5c:67:d6:d3:7e:c9:6d:29:d3:3c:3a:ee:0f:4a:
1a:be:04:5d:15:42:31:2b:1f:45:fd:16:74:c1:8a:2f:ff:07:
ef:e4:38:ae:12:37:8e:0a:ed:a0:71:e0:bb:4e:c2:03:82:f4:
f4:53:ae:43:3f:73:3e:fc:3a:c8:fe:e9:28:be:b2:66:64:03:
e0:93:2c:8b:5d:83:dc:bb:f6:92:11:ce:8c:82:ce:19:be:26:
22:c5:74:b1:87:27:ef:c1:53:12:b7:0b:52:1d:41:84:18:18:
56:bc:f8:5b:1a:3e:cf:c2:cb:f8:fc:88:c5:9d:24:07:62:13:
90:10:4a:58:23:8e:0f:a9:e1:b5:1d:bf:43:38:84:85:0f:6c:
71:4b:45:ec:d3:d0:d6:c2:2d:d4:43:8f:49:8c:88:1d:d8:72:
52:65:ff:d5:fa:1d:df:eb:42:59:30:38:91:ee:ae:73:55:e0:
76:2a:a1:73:be:70:d9:3d:e3:a1:ae:aa:ee:37:d0:c5:07:29:
11:79:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:32 2025 by rpki-client