Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: xfDXuvdW+PCHBFURrmUepO104NZkDXPMXr8/vzC3f2g=
Subject key identifier: 6E:4C:4F:E4:54:8C:A9:FB:0F:2F:EB:63:F9:D8:BB:85:4C:B1:8B:82
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0197B70F0491710D32434C60B2282FAA2AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: ux/xBWHIXw62J9IyRRSkPT2vAfxSb0BUiyuBd2kkajQ=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:04:91:71:0d:32:43:4c:60:b2:28:2f:aa:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=6e4c4fe4548ca9fb0f2feb63f9d8bb854cb18b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:7a:41:6a:06:2c:34:6c:03:c5:0f:4b:58:
e0:41:93:b4:ba:91:c6:ad:1d:5c:1b:1e:d3:b7:2d:
57:03:70:86:31:00:79:bc:d6:f3:19:cf:f9:31:fc:
eb:da:59:0a:7b:4d:a6:e1:4d:eb:a7:1d:51:d9:1c:
cb:14:4f:13:8a:04:65:32:c0:9b:77:bf:f3:e2:b9:
12:dc:fe:87:c7:d7:dd:46:6b:bc:03:d3:b8:c9:d6:
f3:fc:3a:fd:23:48:d2:48:4d:74:32:df:1f:33:bc:
fc:da:58:d1:d0:26:ec:61:0c:ef:84:c3:bb:8f:72:
a9:40:94:15:cb:1f:4f:70:a8:9c:c8:86:4c:bc:e4:
86:c2:09:3c:6d:1b:1b:cc:4a:46:0a:33:4d:ec:f3:
bc:4d:84:5a:85:d4:0a:f8:2f:5f:74:d3:55:e0:aa:
b3:91:95:91:49:f0:6e:2f:94:b6:27:40:8e:14:db:
d5:c8:66:eb:68:79:ec:f3:46:4c:45:5a:b1:0b:5a:
86:93:22:b9:06:b8:cf:38:6b:58:f5:ee:e3:34:f8:
7b:59:7b:55:e0:8d:6f:8c:48:aa:72:0b:83:8a:a5:
1b:81:08:25:0c:58:0e:59:bb:4c:ef:86:a7:99:f2:
e0:f9:d1:2d:c4:c4:ec:3e:03:87:03:83:4b:f7:e7:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4C:4F:E4:54:8C:A9:FB:0F:2F:EB:63:F9:D8:BB:85:4C:B1:8B:82
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:f7:7d:fd:6c:7c:13:b7:ac:e2:38:26:18:90:b4:5a:70:
2e:bd:9f:fa:33:d7:bd:c2:58:9a:47:00:e2:f2:00:d8:56:5f:
cd:99:8e:d1:13:c7:73:4e:33:c6:ff:18:4c:c2:c3:aa:89:59:
84:d7:dc:57:f5:24:a1:d0:18:4a:02:7a:0b:87:c3:f7:36:93:
92:10:b3:ca:95:08:bc:9f:5c:cc:52:82:e2:84:55:3c:4f:53:
4e:05:26:eb:81:42:a5:20:97:fa:9e:72:72:c7:9c:71:04:ca:
f3:78:e2:30:dc:39:05:23:82:5c:a2:4f:c9:4f:21:07:b5:4e:
bf:49:44:eb:5f:1f:05:5b:af:e7:4b:e6:6c:0a:b6:4a:bd:fc:
de:01:39:c0:0d:8f:7d:3c:f7:13:04:70:2b:72:7d:dd:ba:e6:
e7:a1:88:0b:24:35:21:f0:11:75:f3:98:a1:09:f7:7b:3d:75:
e4:15:66:72:a7:00:e4:25:d5:e2:dc:a3:e1:3e:96:37:20:0d:
73:25:aa:c7:b5:04:bf:b9:d5:da:7b:5f:55:26:e4:51:eb:5c:
24:05:59:14:7d:82:8a:04:eb:2c:62:3e:27:35:e6:cc:0e:24:
14:e6:6a:41:f1:df:ea:e9:56:d3:8f:43:87:92:58:ec:68:6f:
78:ba:24:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwSRcQ0yQ0xgsigvqirQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw
NjcyMDgwHhcNMjUwNjI4MTUwMTQ0WhcNMjUwNjI5MTUwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZTRjNGZlNDU0OGNhOWZiMGYyZmViNjNmOWQ4YmI4NTRjYjE4YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdt6QWoGLDRsA8UPS1jgQZO0upHG
rR1cGx7Tty1XA3CGMQB5vNbzGc/5Mfzr2lkKe02m4U3rpx1R2RzLFE8TigRlMsCb
d7/z4rkS3P6Hx9fdRmu8A9O4ydbz/Dr9I0jSSE10Mt8fM7z82ljR0CbsYQzvhMO7
j3KpQJQVyx9PcKicyIZMvOSGwgk8bRsbzEpGCjNN7PO8TYRahdQK+C9fdNNV4Kqz
kZWRSfBuL5S2J0COFNvVyGbraHns80ZMRVqxC1qGkyK5BrjPOGtY9e7jNPh7WXtV
4I1vjEiqcguDiqUbgQglDFgOWbtM74anmfLg+dEtxMTsPgOHA4NL9+c9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5MT+RUjKn7Dy/rY/nYu4VMsYuCMB8GA1UdIwQY
MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt
YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw
LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKv3ff1s
fBO3rOI4JhiQtFpwLr2f+jPXvcJYmkcA4vIA2FZfzZmO0RPHc04zxv8YTMLDqolZ
hNfcV/UkodAYSgJ6C4fD9zaTkhCzypUIvJ9czFKC4oRVPE9TTgUm64FCpSCX+p5y
cseccQTK83jiMNw5BSOCXKJPyU8hB7VOv0lE618fBVuv50vmbAq2Sr383gE5wA2P
fTz3EwRwK3J93brm56GICyQ1IfARdfOYoQn3ez115BVmcqcA5CXV4tyj4T6WNyAN
cyWqx7UEv7nV2ntfVSbkUetcJAVZFH2CigTrLGI+JzXmzA4kFOZqQfHf6ulW049D
h5JY7GhveLokmA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:15 2025 by rpki-client