Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: ys/cAjHXwnlMpGHM5mGNXei+IGVfhx196XtpyePL7k0=
Subject key identifier: 14:1B:03:B8:97:48:DF:C2:FB:C8:91:AE:02:DC:67:65:A0:CB:50:7D
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019A4D742331E853F2848FA3FA807D067A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: +Jf4G+/zkbWgBC1T+daZ9oS7AtMdk9xVxYVnI56qWao=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:23:31:e8:53:f2:84:8f:a3:fa:80:7d:06:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=141b03b89748dfc2fbc891ae02dc6765a0cb507d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:e6:de:51:0f:81:7d:05:4a:28:d8:87:2e:
3f:30:0d:e9:72:25:1c:eb:b5:bd:63:9b:33:c6:d4:
03:4e:4a:f1:71:bc:72:e2:10:19:9f:2c:ec:67:68:
47:ff:b5:3e:9c:28:a8:98:a9:28:a7:ff:1c:f2:2c:
4b:02:b1:0b:86:5e:29:5d:d7:3c:6a:1d:bc:4d:15:
a8:69:33:25:04:36:de:42:bc:b9:16:30:69:20:62:
39:05:be:b8:ff:25:6e:a0:98:03:71:08:f5:96:fd:
0b:50:19:c2:28:f1:59:e9:cc:09:58:f9:47:25:60:
7e:41:67:9b:b2:9d:f8:22:04:86:5c:65:98:df:aa:
b3:b8:42:7c:12:a9:48:d6:31:1d:10:81:bb:5c:04:
d5:03:61:00:3d:3a:d7:45:21:a0:18:de:2f:03:51:
16:42:ce:01:10:39:5e:62:c2:2b:37:3d:fc:9a:5d:
f9:ba:12:45:40:20:57:b4:9e:c0:b2:85:f9:68:c2:
d7:2d:4c:69:3a:af:bd:32:77:e8:e6:28:14:5d:81:
43:85:ff:43:bd:f9:bf:53:6b:c5:d1:69:06:e4:2a:
83:2f:de:af:86:71:52:25:85:81:a9:f7:62:21:35:
20:2b:47:12:48:a4:e0:65:16:93:08:f0:fa:53:a9:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:03:B8:97:48:DF:C2:FB:C8:91:AE:02:DC:67:65:A0:CB:50:7D
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a5:2a:c8:62:e4:50:a0:7e:9e:85:b0:83:ca:5d:af:90:00:
25:1b:65:ee:4a:da:b7:cf:1f:36:04:eb:48:f3:44:44:29:38:
ea:e6:17:83:02:a8:a0:63:56:03:6b:40:d1:76:be:90:a5:c1:
7e:cb:57:9c:29:ed:56:ba:1b:36:37:e2:89:ee:30:24:6c:5f:
20:4a:18:b2:3e:3b:47:3d:56:15:29:fa:ce:ff:be:7c:7e:25:
8f:f0:23:3e:8e:cf:b5:18:8e:f0:78:e9:b4:e6:15:48:b1:de:
1c:2f:66:c4:d3:7f:73:9b:6b:50:e8:c6:8c:c6:43:7b:70:ce:
84:98:02:99:e3:6a:01:9c:1f:88:c8:2b:f3:7b:9c:53:68:af:
ed:73:b7:98:63:77:f6:da:b9:c3:37:f1:7c:74:cf:65:18:ea:
ea:72:09:b6:fa:98:da:66:2a:25:c0:3e:60:c8:cb:3b:ea:c1:
85:0e:69:b8:9a:d3:e8:a0:0c:7f:16:7f:56:e3:4b:ca:42:3c:
68:49:5e:de:5f:86:9c:87:22:87:8e:a7:79:72:07:2b:b4:02:
29:ad:0e:d9:46:15:59:27:17:1e:bf:8d:22:0b:fc:af:a3:49:
52:b2:ee:d1:d2:99:bf:de:1c:6c:d5:48:01:8d:a6:2b:08:c4:
1e:31:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:53 2025 by rpki-client