Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: p+1jTXQI/ceNICcyFYOOedR+4U2yju2pxHYis1ZDbNQ=
Subject key identifier: A0:73:E5:E1:7A:4C:49:3E:C2:28:C7:AF:48:FD:8C:5A:A8:EE:D3:AB
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0196CB736BDBEFDF59D710254F4F1F5F69DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 21:01:00 +0000
Manifest this update: Tue 13 May 2025 21:01:00 +0000
Manifest next update: Wed 14 May 2025 21:01:00 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: aRniwwMaWYAdkScLjs8tL10NJt6e0BBxqAEUsv6hwoU=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:6b:db:ef:df:59:d7:10:25:4f:4f:1f:5f:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: May 13 21:01:00 2025 GMT
Not After : May 14 21:01:00 2025 GMT
Subject: CN=a073e5e17a4c493ec228c7af48fd8c5aa8eed3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:2c:ce:c0:99:36:36:c0:3d:ea:70:8e:bf:
4c:1d:1f:ff:ce:5f:6b:0f:5f:60:47:0b:fe:b6:f7:
f0:d1:e3:9b:5c:2c:44:ac:d5:0d:b9:d9:b6:a1:1c:
ad:65:52:a1:b5:74:ae:92:b2:4f:a9:5d:24:69:f7:
5e:15:15:cf:0a:e7:d4:4a:fe:03:0b:21:02:6f:00:
40:40:e2:ac:d7:2c:e7:93:83:d0:85:9b:6b:26:5d:
2c:d4:b6:6a:6b:be:f1:a1:8a:1b:51:75:f6:f8:61:
ae:26:98:90:cb:6e:4b:de:af:97:3e:8d:fa:32:59:
77:2c:e4:f1:38:3f:a5:3d:67:ef:16:75:a8:8c:e4:
c9:1f:46:2d:df:55:0b:76:e8:6b:74:01:35:8d:16:
9c:02:ac:5b:ec:6b:c4:a6:a5:69:0f:6c:fe:21:e1:
65:22:cb:38:f1:82:ad:ce:10:84:60:4c:d0:1f:f9:
68:ea:ff:25:d5:20:8f:5f:5d:1d:92:30:0d:17:4a:
bc:b2:b5:49:2b:82:2e:c4:12:04:75:fb:cc:a6:3e:
e8:c2:04:e6:1a:86:f4:20:09:3b:4d:13:8d:2c:25:
fe:0e:33:8f:ef:c8:7d:4d:e1:69:c0:3c:7d:d8:c4:
bf:f4:ba:87:59:9a:50:70:89:6b:26:52:96:df:33:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:E5:E1:7A:4C:49:3E:C2:28:C7:AF:48:FD:8C:5A:A8:EE:D3:AB
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:c0:20:7e:e0:b0:12:39:5f:3d:1c:f0:fb:a9:fa:be:13:
e5:78:56:15:8f:19:2a:88:ee:da:9a:7a:46:e5:a7:2e:ee:7e:
9d:5b:2d:2b:7a:43:a1:3b:0b:41:9d:1b:ac:7e:5e:b5:21:aa:
56:56:98:f9:80:ad:6f:08:8c:3b:3a:35:b5:1f:09:a8:f1:cc:
0f:4b:3b:5e:ff:ba:98:b5:47:6d:40:b1:50:1d:63:95:fe:bd:
de:8a:40:1c:1d:1e:a6:ff:68:37:ab:52:f5:74:a6:7d:04:f5:
4a:9b:b8:33:49:47:0b:10:05:8a:20:64:06:01:b0:69:86:0c:
75:45:86:75:d6:7d:5a:ed:90:89:92:2f:16:69:b2:15:00:f7:
4b:13:72:22:a1:22:d9:7d:cb:27:0f:cf:dc:52:02:e7:eb:50:
93:a2:2f:08:ff:80:a4:c8:c4:0f:66:16:0a:b5:32:da:61:5c:
3d:f8:76:d2:ff:81:26:0a:9f:03:9e:3c:ab:83:d6:97:4d:38:
0b:92:8f:38:5b:30:f1:28:f9:c6:ea:4d:da:db:3f:4c:aa:5d:
7f:e8:f5:ef:09:b5:a3:e7:fc:f4:89:cb:61:49:c5:e8:d7:32:
4a:a4:2b:e4:2e:6a:7b:3a:26:81:f3:01:a8:b3:66:98:0f:51:
9d:e2:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:54:01 2025 by rpki-client