Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: kDn8ERqVta7KPlJowgJVfd+yqhHpANUvnbYpNTofjWM=
Subject key identifier: E3:0B:35:EA:9F:EE:FF:DD:01:5B:C1:4B:90:83:D2:98:FB:54:A4:D7
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019872624E40AC00373245E065CAE51AD37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1622
Signing time: Mon 04 Aug 2025 00:01:41 +0000
Manifest this update: Mon 04 Aug 2025 00:01:41 +0000
Manifest next update: Tue 05 Aug 2025 00:01:41 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: T7bHQfyiv83vKqR1yaw8a0GRMJdhaPMHOWomWExqCJo=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:4e:40:ac:00:37:32:45:e0:65:ca:e5:1a:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Aug 4 00:01:41 2025 GMT
Not After : Aug 5 00:01:41 2025 GMT
Subject: CN=e30b35ea9feeffdd015bc14b9083d298fb54a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:90:06:d2:0c:b7:66:54:14:92:32:d9:b9:
ec:a5:ba:3f:0a:53:3c:1d:5d:88:b0:87:0c:59:2b:
c1:4d:8b:98:59:71:28:4e:45:87:97:77:fe:aa:ee:
d9:86:a0:c6:e7:7f:20:4e:e9:cf:5b:f0:e1:09:53:
65:ab:e9:db:c7:a5:46:83:11:0a:87:6e:63:e2:2b:
22:da:5c:94:ca:9c:fb:86:7d:94:ed:a9:43:39:d0:
8c:14:5e:75:2d:d8:09:db:c6:e1:4d:d9:ec:72:67:
b7:18:b5:23:1c:04:a8:7b:99:c7:e6:f9:c4:7b:49:
e6:3c:8f:8b:52:79:54:d9:84:ef:fc:e1:41:e2:88:
47:f7:ed:48:58:cf:48:d4:73:ea:cd:6e:b7:85:af:
e3:49:4f:f9:64:57:a8:22:7f:be:e0:1b:02:a9:34:
0b:af:51:81:5b:57:33:51:bf:a9:5f:5a:7a:0a:ae:
97:6d:92:f7:b8:1b:54:84:32:ea:75:a3:40:41:d4:
70:d9:d2:0a:59:cb:8b:3b:47:0c:d2:a8:c1:c8:c3:
fd:1d:cf:55:07:f8:14:bb:77:be:d4:bc:61:e0:54:
ec:1d:eb:60:e0:82:9a:f2:29:df:e9:ef:86:ae:a6:
db:79:bf:f2:2c:34:91:9c:d8:1d:cc:2f:be:fc:ce:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:35:EA:9F:EE:FF:DD:01:5B:C1:4B:90:83:D2:98:FB:54:A4:D7
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:20:eb:74:15:61:f4:2f:dc:81:3b:95:ac:22:f3:ca:63:
c4:aa:52:a5:f6:65:e0:e8:cb:fd:8b:c9:87:fb:5f:bd:09:60:
a0:9b:bc:c5:08:cb:e0:6f:d1:f8:21:81:01:cb:82:48:bf:04:
98:80:7e:72:c8:3d:03:69:65:41:fe:d2:9f:50:6e:e0:86:f9:
81:89:b8:9e:2d:4a:88:62:67:ba:5b:a7:2a:c9:dc:28:0c:54:
6d:80:2f:7d:52:07:bb:5a:ba:c8:e6:1b:26:a9:80:6e:ca:26:
d4:8d:06:04:ef:50:ea:a6:c4:82:63:27:47:4c:48:70:9b:60:
8a:14:11:d2:7c:3e:bf:78:07:16:09:e5:f1:31:80:59:e9:94:
f9:ba:b0:b9:54:b5:63:92:1c:e6:46:52:53:e4:07:40:24:eb:
00:21:99:be:e3:fe:79:02:6a:8f:f3:73:21:64:01:55:9e:ad:
42:d4:d4:37:39:f7:53:91:e2:fd:12:18:bf:0d:dd:11:5a:c3:
ad:ee:9b:3e:8b:03:8f:54:12:1e:84:58:f9:5f:e5:79:45:f0:
3b:18:29:d4:45:d4:c9:8a:a5:df:d1:7a:17:9f:76:e1:95:18:
a3:fe:2d:31:6b:f2:bc:7e:4c:87:4e:4a:09:b0:fb:67:25:66:
21:27:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:23 2025 by rpki-client