Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: 7A9aQl6cbgHvNy9pbdA8ZBFsiI0gtTWOvcINIopoipY=
Subject key identifier: 18:FF:47:20:5F:2E:29:A0:5A:D1:DC:15:A8:06:EE:54:5E:58:92:7B
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019A4F620A099F5395F0A435AF8B9D52C15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: L8fPujIKsBi6jtF3wpi92LaR5sM.roa (hash: meNehvqkmBkNG6v4QZ+r0ymGAotj7DbJNLEAKS/pf5I=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: FpDCtE2F/NBSwKbBGkhlg9LLwjVGY/3KJrdPWaxS/iE=)
3: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0a:09:9f:53:95:f0:a4:35:af:8b:9d:52:c1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=18ff47205f2e29a05ad1dc15a806ee545e58927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:c6:f0:50:c7:78:60:95:a5:ad:96:82:9a:
e2:da:57:dc:6e:3c:84:ff:1b:e5:5c:f4:ec:0e:c9:
ac:fb:13:34:5d:af:6f:7c:d4:ec:9f:b0:16:23:cc:
41:bb:a9:83:5f:ba:87:31:0e:23:0f:b2:35:3c:ec:
23:28:41:3e:d5:7a:e5:66:bc:4a:6b:fa:e5:a7:a4:
60:06:4f:b6:ee:7c:34:82:ab:95:d9:d3:00:1c:74:
7e:1a:af:e3:fd:c7:76:43:4e:d3:96:ae:e2:c7:01:
e4:1b:51:36:40:f4:1c:21:d4:39:6a:c2:ba:56:f3:
ed:0c:f9:4e:b3:d9:77:84:c7:2f:8d:e3:69:e4:21:
e7:7d:65:22:4e:8c:f9:6c:51:ea:eb:4b:2b:03:b0:
b5:26:d1:5d:96:e8:b3:5f:f6:84:3c:a5:ad:79:3b:
3f:7c:bf:86:87:ef:f8:dd:d3:96:8a:90:f6:80:ab:
a6:77:52:0a:23:08:ee:0b:25:4d:66:07:92:70:ab:
66:e0:da:f2:73:4c:02:2b:6c:8b:c3:73:5b:3e:3b:
a4:7d:a8:f0:b7:2b:df:13:8e:ea:75:8c:0a:3f:29:
39:b3:3c:c7:ef:77:0c:da:84:f9:a0:64:36:fe:d0:
e0:40:fb:ac:f1:a6:48:c8:9e:8b:6c:2d:b5:c8:d1:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:47:20:5F:2E:29:A0:5A:D1:DC:15:A8:06:EE:54:5E:58:92:7B
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3e:84:a4:35:fa:6b:0d:c6:e3:b2:a3:d7:5d:3e:8d:ee:d3:
1e:1a:0a:65:9c:f5:fc:5f:ce:79:32:e7:c6:c4:ed:54:6b:45:
63:f6:2a:28:7e:7c:98:9c:d6:0e:f5:b7:17:9a:f5:06:34:e4:
f5:c8:e5:76:c2:5a:9f:e1:19:91:f1:9a:7b:bb:d2:e3:51:f0:
b1:a3:a0:94:d0:0a:39:89:31:5c:7c:07:8f:1d:32:63:f6:a4:
62:bf:bc:d2:7c:74:c6:3a:ff:36:fe:77:31:6c:98:58:9e:ee:
6e:6d:87:87:5e:d7:54:e5:9b:f4:23:e9:31:f1:8f:fd:b3:63:
97:99:23:1f:0d:a8:01:54:6d:61:5a:e2:29:4f:a1:0b:a4:49:
b7:c7:6f:b8:9d:5e:79:9c:eb:34:38:0e:92:ff:62:a2:b3:97:
6b:86:b4:de:4f:65:e2:0a:0b:c0:d8:45:f2:df:72:34:41:cc:
b2:2e:c3:a0:38:ab:53:d5:6c:13:cc:73:a7:bc:37:b1:88:9c:
20:9a:f9:83:b5:2b:4e:ca:53:36:2a:78:9f:2d:c8:b0:ca:7c:
84:94:7c:31:1f:8d:b1:6e:50:e0:71:f4:8c:ce:4c:81:9d:0c:
6b:ca:b3:62:30:31:de:f1:3f:29:f2:ea:23:5a:35:53:e4:0a:
d0:b9:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:47 2025 by rpki-client