Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: vdbSN84JJFTDzIBecYmIlo8zgYDpaXRJ0ZEHJe9OlEk=
Subject key identifier: F0:76:AD:48:30:8C:EC:4C:E7:FA:75:06:97:7A:6B:38:EB:88:82:6F
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019883C32CEB33ADA506C64E33AF7E4F701C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 09:01:02 +0000
Manifest this update: Thu 07 Aug 2025 09:01:02 +0000
Manifest next update: Fri 08 Aug 2025 09:01:02 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: WIV1chl3Az+EMPMtsy78VYB2iXY7f0nxcVlF7ie4KQA=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:2c:eb:33:ad:a5:06:c6:4e:33:af:7e:4f:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Aug 7 09:01:02 2025 GMT
Not After : Aug 8 09:01:02 2025 GMT
Subject: CN=f076ad48308cec4ce7fa7506977a6b38eb88826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:85:e5:0c:a1:d0:7c:af:5d:a9:8d:b2:d2:
ce:0d:6d:f2:2f:f4:04:de:31:1f:bb:81:8d:0a:3a:
a8:d2:ea:eb:0d:9c:16:1f:4f:93:07:4d:2e:7d:f4:
4c:2e:ce:3b:ab:b3:5b:12:da:44:a7:68:eb:eb:a8:
e7:44:bc:69:48:ba:fb:ba:f7:ad:8b:93:1f:38:de:
70:5a:d1:de:a0:f1:31:5f:a2:f1:97:71:83:60:ac:
0a:35:fc:46:fb:bf:95:f0:dd:d9:a6:2b:ef:f3:9e:
50:d0:ba:64:9b:82:da:97:5c:fa:0b:48:86:ae:08:
cd:9c:1f:52:04:8e:d7:8a:74:db:2c:4e:1e:73:e8:
97:bb:20:4b:4a:d4:82:a5:cc:06:8c:4f:1c:e4:0e:
8c:76:aa:fc:f4:fa:36:35:61:e5:ca:3e:ee:0c:e1:
11:f9:40:ac:b7:bf:83:5a:11:a0:f8:35:9d:3b:e6:
0e:d0:aa:71:c7:f8:60:d2:eb:bc:f1:e7:39:be:97:
14:3b:8d:a9:05:9d:4f:0a:bf:8b:e0:d9:57:04:99:
fd:dc:4f:1b:d0:03:c1:7a:90:ff:da:a3:04:64:bb:
54:67:58:cb:70:7e:2d:ab:16:14:09:ba:08:65:74:
94:29:77:44:39:d7:e5:23:cd:51:42:e3:40:f8:24:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:AD:48:30:8C:EC:4C:E7:FA:75:06:97:7A:6B:38:EB:88:82:6F
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:fa:a4:dd:d2:27:b4:20:95:5f:da:6d:5a:c8:62:b6:8e:
15:78:01:ab:e6:17:0e:87:9c:66:99:6d:71:f2:f5:9e:a9:20:
d1:22:60:0f:d0:4d:c5:3c:64:a3:7e:2a:64:81:fd:61:76:7f:
78:f2:18:86:2b:c0:88:84:40:75:9e:e7:6d:52:51:b8:ec:b9:
0b:e4:ac:14:71:2d:d7:fd:19:b2:5f:b9:49:90:62:49:ee:92:
dd:48:54:08:03:ed:ac:39:08:b8:34:77:17:d4:74:a3:fb:e7:
42:8f:9d:e1:c6:19:c8:58:1d:0f:10:62:c6:48:3a:78:a5:4d:
fa:47:c6:26:e1:d3:9c:65:95:46:d8:8d:0b:1a:e3:d9:43:39:
bc:54:8b:d9:6d:2e:6b:fd:68:ef:bc:ce:0a:26:ad:5a:a5:22:
68:28:f1:32:5a:92:c2:07:37:2c:e3:65:df:c3:63:f7:94:57:
11:f4:82:e8:3c:a5:1c:50:da:ad:c0:46:47:43:df:8f:43:95:
8e:86:4f:2a:23:b6:50:05:cd:57:31:66:b0:b6:4b:e4:16:4e:
97:75:e8:fa:a0:f6:37:5a:17:a2:68:da:9a:cc:1c:dd:62:d8:
94:e6:d6:5b:2c:1f:22:96:b4:91:37:02:91:fe:85:f7:b8:7d:
7f:8a:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:45 2025 by rpki-client