Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: XrLkm5MCYIoiOltsgDShXdhHT+DHtJ+mPDLCzct0gfM=
Subject key identifier: F4:51:15:35:CE:97:77:F9:E6:E7:A8:39:BC:F4:95:72:1F:3B:27:93
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 0199FBEBEB9203EDEBBD3FA8B226ED788AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 141C
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: rdwsmAsRg1PhuyKHw9XHmBE0D8ak25cex/YzgpZkcPw=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:eb:92:03:ed:eb:bd:3f:a8:b2:26:ed:78:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=f4511535ce9777f9e6e7a839bcf495721f3b2793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:71:9f:47:6e:5b:26:04:b7:a8:ec:2e:32:
82:56:4c:f5:5f:d3:48:45:31:59:1f:2d:8b:fd:ad:
8a:a5:65:93:87:e7:37:fa:32:97:f0:0e:3f:0e:9d:
03:f3:72:04:f9:8f:61:0f:4d:e7:f9:ba:79:f9:c9:
70:f5:3a:7c:7b:3d:ae:e5:e2:3a:ab:6b:1b:32:9c:
7d:fe:76:7e:87:33:10:7a:4e:74:99:8c:07:a2:7f:
81:3f:d1:9c:a9:23:5d:35:2a:64:8f:56:35:39:a9:
cd:8e:60:37:01:94:2f:05:7c:fb:e1:b3:15:68:5a:
2f:38:79:fb:ab:5a:63:b2:e0:9e:13:0c:be:a5:bd:
e7:29:7c:64:55:3a:f6:4d:39:f2:4e:da:b5:7d:3b:
cf:20:8a:9c:20:08:c8:6f:c9:fa:c3:81:6f:58:ca:
56:c5:5d:46:6f:7c:38:2f:65:e7:13:04:27:07:f2:
c7:23:fe:ca:66:a0:52:b5:4d:f0:ab:08:2a:51:8f:
90:43:d8:d1:60:6b:b5:64:71:a9:05:86:b2:a4:b7:
15:35:6d:38:c9:f1:b8:c8:2c:4e:8d:59:f6:53:b8:
a2:c4:4c:9d:ff:7f:d4:04:32:30:c8:5e:7a:42:c8:
af:a5:be:59:4e:5e:83:8d:c1:a0:ec:81:cc:75:f3:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:15:35:CE:97:77:F9:E6:E7:A8:39:BC:F4:95:72:1F:3B:27:93
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ed:d8:7a:4b:18:3f:eb:b3:73:7d:47:ff:d1:14:bf:d8:0b:
34:d8:7c:fc:bc:52:fe:c6:ad:54:e1:dd:d7:42:8d:d6:fc:a8:
71:ef:18:f3:9b:52:c2:15:d1:1d:2d:eb:7c:40:30:50:23:cc:
d4:df:34:f7:a6:70:b5:b3:c4:ad:4e:4d:f5:d2:65:7f:7b:79:
6c:8d:4c:02:5f:b9:5d:3a:04:ed:97:32:39:be:2e:37:78:ef:
26:77:9e:8f:ee:8e:48:cd:a3:87:d3:c0:71:f4:32:bb:62:36:
f4:4b:52:cc:b3:a8:6d:e5:a0:c1:ad:d2:30:92:34:d2:99:f3:
b4:4a:eb:59:2c:be:62:7c:b6:c9:33:39:c6:0f:24:56:22:06:
93:be:ee:23:5f:66:03:42:23:98:0b:f1:68:6e:5d:ef:81:e0:
9d:51:4a:90:31:2f:7d:11:a2:60:23:70:52:a9:38:ee:a0:b8:
8f:44:18:08:78:21:62:5a:e9:d9:aa:5c:64:27:41:6c:b1:da:
93:6c:49:86:b3:2b:52:c4:90:cd:22:57:6d:cc:d0:8f:2b:f9:
9c:28:11:c0:d6:7f:71:b6:f2:c8:76:f1:60:73:f6:20:26:04:
d9:9e:3c:de:f8:df:99:eb:5e:2e:a6:77:68:f0:b5:db:02:4b:
da:b6:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client