Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: jnv0GMeqICnNBTjAkocHqoaSw2ksy3Lpz8FMUpxgHaU=
Subject key identifier: E6:07:8B:66:D3:5F:F5:BC:39:B3:FF:CE:5F:B8:64:BF:58:9C:8E:81
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0197B70EB194C859F1019E6DFBD32887AFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: vhsV4UhF8gE8QlbRb//2i0So4TPa9+JtTy1tv0uKXsQ=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b1:94:c8:59:f1:01:9e:6d:fb:d3:28:87:af:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=e6078b66d35ff5bc39b3ffce5fb864bf589c8e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:3b:22:eb:fb:63:54:5d:64:7a:b9:d3:30:
00:7d:1c:7c:88:88:36:52:58:02:81:f5:98:88:2b:
65:82:58:53:c9:86:eb:66:55:83:17:4f:5b:29:fd:
dc:0f:cf:34:2c:86:81:0b:8b:f8:30:51:3d:e0:01:
e3:b7:30:72:ed:cb:65:bb:10:80:a1:2f:9a:85:33:
52:c3:20:c7:9c:1b:2b:c8:e3:2f:21:cc:c4:ce:a6:
28:9c:79:39:24:1c:f1:9e:3e:f6:42:f7:b7:59:ae:
72:cc:97:75:6b:5b:1a:3c:cc:f0:3c:20:6b:48:73:
02:44:ca:83:01:a3:5c:a7:36:f8:98:91:59:05:66:
69:ef:4c:39:9e:61:51:1c:bd:4e:a5:a1:69:87:f6:
ce:ea:fb:25:1d:d6:48:60:c1:6e:ea:a4:8a:d2:11:
ff:e7:b7:01:36:b9:bb:43:c4:8a:cd:0d:5d:49:9c:
9b:52:3e:4c:f4:f3:ae:8c:b9:5b:92:98:9b:b4:0f:
f0:e5:f0:f3:08:ac:13:cb:72:a6:9d:39:f6:f0:41:
2e:57:7f:ae:87:0f:01:53:b4:0d:e8:d2:13:15:c0:
90:36:0f:6f:54:bb:63:f6:7b:65:d8:f7:31:74:52:
12:7d:76:22:19:ae:fe:a5:84:e0:4d:68:47:d4:1e:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:07:8B:66:D3:5F:F5:BC:39:B3:FF:CE:5F:B8:64:BF:58:9C:8E:81
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:27:00:18:01:7d:9f:51:32:d5:48:21:7a:38:bd:c6:fd:c4:
9e:1c:9f:3b:b4:aa:ce:15:ac:cd:d0:98:08:03:2f:af:2a:a6:
07:97:00:fa:11:53:44:d3:c2:04:5f:24:4b:e3:fc:7e:2e:af:
65:1a:14:a6:b4:89:67:c3:2c:61:cb:bc:49:ba:27:0a:fb:9f:
6f:00:d8:66:62:73:4e:29:86:6a:80:c2:24:16:0e:77:b2:2f:
76:c3:b8:7d:50:85:5e:a0:7d:29:d0:2b:a8:02:63:dc:ad:87:
64:c8:95:6d:ff:84:64:3b:46:51:5f:85:e7:eb:b0:f2:a2:1b:
04:e6:f6:88:08:0d:07:4b:bf:9d:83:b4:a9:c4:fa:94:10:07:
f0:ae:d8:59:e3:85:e0:cc:5f:cd:2e:d3:e1:7b:6d:8b:4f:e9:
3e:21:24:c1:9b:dd:fe:55:b3:44:94:17:7a:7d:fe:4a:d5:80:
88:be:e6:d6:50:24:69:85:d7:8b:a8:d3:45:fd:00:9b:55:25:
fe:86:e7:db:94:5e:9f:1c:5e:e7:98:3e:20:48:97:e1:20:c2:
5b:f5:fc:62:d4:6c:2e:45:c5:f2:d8:df:c5:20:4d:b2:3b:69:
1f:03:bd:cb:89:57:56:75:2e:fa:75:2f:5e:d3:92:85:e1:7c:
83:83:db:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrGUyFnxAZ5t+9Moh6/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjUwNjI4MTUwMTIyWhcNMjUwNjI5MTUwMTIyWjAzMTEwLwYDVQQD
EyhlNjA3OGI2NmQzNWZmNWJjMzliM2ZmY2U1ZmI4NjRiZjU4OWM4ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz87Iuv7Y1RdZHq50zAAfRx8iIg2
UlgCgfWYiCtlglhTyYbrZlWDF09bKf3cD880LIaBC4v4MFE94AHjtzBy7ctluxCA
oS+ahTNSwyDHnBsryOMvIczEzqYonHk5JBzxnj72Qve3Wa5yzJd1a1saPMzwPCBr
SHMCRMqDAaNcpzb4mJFZBWZp70w5nmFRHL1OpaFph/bO6vslHdZIYMFu6qSK0hH/
57cBNrm7Q8SKzQ1dSZybUj5M9POujLlbkpibtA/w5fDzCKwTy3KmnTn28EEuV3+u
hw8BU7QN6NITFcCQNg9vVLtj9ntl2PcxdFISfXYiGa7+pYTgTWhH1B5gjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYHi2bTX/W8ObP/zl+4ZL9YnI6BMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAScAGAF9
n1Ey1Ugheji9xv3EnhyfO7SqzhWszdCYCAMvryqmB5cA+hFTRNPCBF8kS+P8fi6v
ZRoUprSJZ8MsYcu8SbonCvufbwDYZmJzTimGaoDCJBYOd7IvdsO4fVCFXqB9KdAr
qAJj3K2HZMiVbf+EZDtGUV+F5+uw8qIbBOb2iAgNB0u/nYO0qcT6lBAH8K7YWeOF
4MxfzS7T4Xtti0/pPiEkwZvd/lWzRJQXen3+StWAiL7m1lAkaYXXi6jTRf0Am1Ul
/obn25Renxxe55g+IEiX4SDCW/X8YtRsLkXF8tjfxSBNsjtpHwO9y4lXVnUu+nUv
XtOSheF8g4PbMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client