Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: hUDewYjWcc0jz+THjZh/wsF+ygZECKZyad3O9O4TDVM=
Subject key identifier: CE:CA:68:81:E6:E8:88:AE:56:06:CF:13:1B:2E:66:07:E6:05:35:2D
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 0197B6D79B815C1BA41A00FB69D70A10FA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: bNoLiiugbhuxfWR6oGeavrvWaLUdQgHnKe51u/6jjyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:81:5c:1b:a4:1a:00:fb:69:d7:0a:10:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=ceca6881e6e888ae5606cf131b2e6607e605352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:86:3e:e5:d1:40:fe:07:6e:4d:c2:24:ec:
ff:36:51:04:5e:d2:51:64:bc:8c:e0:46:5a:4a:39:
b1:ef:ac:50:f8:dd:e8:38:ff:1d:10:d7:37:a9:7b:
6b:d0:c1:54:43:32:7c:97:bc:17:2e:c8:c4:8f:5e:
09:ce:83:6b:d2:58:a7:72:77:37:2e:54:22:0f:20:
52:a0:32:d1:8d:4f:cd:13:41:73:65:4a:34:a3:88:
94:37:65:7e:0a:11:85:2e:3c:c3:e2:35:7b:87:dc:
33:e0:04:af:6d:8f:d3:c5:41:cb:62:34:2f:0b:4a:
ab:bd:00:bd:7e:c3:d3:a5:73:f0:eb:eb:05:55:74:
78:f1:37:f6:c9:8e:29:2f:93:ff:f3:10:b4:af:af:
88:ea:77:3d:fe:ed:30:ab:7a:9c:26:5d:3b:c3:7a:
16:b8:07:60:39:e8:16:64:ef:94:18:30:28:90:0d:
4b:c6:ef:50:28:14:6c:17:2b:75:70:85:f5:98:dd:
82:e1:0f:11:d0:84:f7:c6:c8:c6:8c:dc:35:08:b3:
34:29:1c:d9:ce:9a:e8:95:c1:bb:aa:7d:68:ad:a1:
13:a2:e9:12:cc:5f:a3:b8:30:ba:4d:11:ee:60:93:
91:8e:e3:b9:0c:3c:4a:d5:49:49:67:90:b0:e1:ab:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:68:81:E6:E8:88:AE:56:06:CF:13:1B:2E:66:07:E6:05:35:2D
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:11:b6:6a:6d:9e:72:05:9a:dd:f3:c9:e6:bc:2f:0d:ed:18:
6d:48:46:21:b0:a1:32:d8:29:61:2b:22:83:b7:d4:cf:ee:fa:
2c:83:03:1d:4f:08:c3:99:e5:89:e1:a8:e4:f4:2e:ce:c6:0b:
af:80:5a:96:6c:8d:53:d6:bc:d6:02:73:f6:1b:ed:6e:af:d9:
66:fc:57:c2:72:ba:4d:f3:59:c2:ee:7b:e9:71:f1:5f:a6:f9:
8b:d6:95:e0:c3:c2:8d:1b:1a:73:e4:d7:67:6d:70:18:7b:ed:
c8:8f:68:63:2b:28:13:fe:aa:b6:b6:97:6e:c3:ac:25:89:2e:
6d:73:51:26:cb:bd:cb:6c:92:c1:7d:10:86:98:f0:3d:84:15:
7d:cc:6d:19:61:ea:a2:c2:1c:f7:4c:07:1b:18:5b:5d:5a:6d:
9c:6c:27:c2:47:f4:77:94:79:87:02:92:bf:7b:f9:1f:4c:55:
f7:d5:17:97:6e:b6:9a:4c:e5:83:8f:4e:75:36:4f:0f:65:27:
6e:28:f4:26:90:a9:85:07:60:58:60:4a:ad:e8:22:99:4e:90:
74:be:3a:ef:51:d7:a2:64:86:9d:53:af:b5:3e:f1:bb:b2:53:
3c:22:ac:1c:be:90:21:cd:5e:88:85:72:1c:43:9e:d2:67:78:
d5:ed:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client