
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: F0ZpqfTsYYysuEFZer7Gq3tTryHiBMt0jQxOwEF+QoA=
Subject key identifier: F6:84:E0:E1:8E:E0:C3:B0:DF:62:6E:6A:5D:A9:F7:49:00:39:84:9A
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0199FC58C8C13820BCDA97A710241EE8C322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: ZXAY8+UQM/LJ2fxmxedpUG0A/YQR1idKv/vgKpxD7Zw=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:c1:38:20:bc:da:97:a7:10:24:1e:e8:c3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=f684e0e18ee0c3b0df626e6a5da9f7490039849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:63:fa:30:6b:56:70:39:a5:b5:3d:85:91:
48:a0:dd:9d:11:fc:fe:1e:8e:5a:bb:d9:7b:ac:92:
fc:25:f3:45:77:e3:b5:3c:e7:7a:49:d0:c8:09:66:
f7:e9:d3:98:56:7b:b5:e0:47:0f:40:4d:e0:22:e5:
bd:ef:cd:ab:04:91:e8:42:eb:2a:06:63:f0:6a:6f:
c0:69:f5:7e:53:f1:b6:0e:34:c0:02:e2:67:56:09:
46:b2:ae:70:93:6d:c5:15:c2:7b:dc:f6:fd:db:ab:
e8:7a:ed:ca:2a:bb:e8:89:70:f6:33:ef:1c:cf:4f:
42:21:b4:42:c7:cb:95:d0:84:a1:5a:1f:21:f1:83:
34:d6:a9:ca:de:29:d9:7c:6c:c1:ca:c4:30:d0:36:
1f:79:c2:0b:aa:3c:52:36:61:cf:ad:7b:64:ad:7c:
d4:d4:92:88:f1:c3:90:8b:0f:0b:d0:73:97:96:a6:
77:e7:d2:67:23:47:22:72:21:ed:2e:fa:ed:16:ea:
b4:83:1d:b5:a2:48:56:ad:0c:d2:14:35:7a:c2:1f:
30:64:29:c5:9b:f1:9d:a9:a4:3c:2a:78:a2:25:71:
d4:db:5c:86:91:a4:d1:39:53:84:20:be:e9:2d:50:
a7:17:40:db:14:12:85:47:7b:e9:6d:ae:8c:c7:8b:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:E0:E1:8E:E0:C3:B0:DF:62:6E:6A:5D:A9:F7:49:00:39:84:9A
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:0b:48:c9:fd:cf:f4:70:c0:df:b0:2e:5f:b5:0b:fb:63:
7f:6d:c5:a4:8b:c3:33:80:67:0c:18:56:0f:e0:88:68:bd:77:
0d:1c:0e:e2:1d:1f:e3:5b:56:dc:7a:e2:f9:a3:6c:05:1e:0e:
12:1a:45:de:d0:45:a3:c8:5e:b3:40:19:d6:7e:ab:21:b2:ce:
5f:f6:bb:36:b8:8d:e6:d8:d4:2f:ea:9a:dd:92:45:02:c3:f9:
b9:8f:6d:49:79:84:c2:0b:00:d5:9e:63:bd:39:a4:2c:7e:ab:
f7:57:15:4e:9d:79:52:af:67:60:0a:c2:8a:19:32:90:98:cb:
6f:cd:12:7c:84:c1:68:8e:03:4a:d7:76:97:77:9d:e2:c7:8c:
17:39:06:cb:69:5a:66:26:5f:d3:0f:e2:a7:fe:81:0f:60:f7:
97:26:45:0f:23:82:bd:2e:b2:aa:b2:01:8e:6b:fd:59:93:b5:
5c:b5:b7:6c:f5:72:9e:e6:83:9f:6f:64:37:d9:11:79:e0:14:
35:38:0e:4b:f1:a5:16:90:6a:3d:ba:b8:1b:63:5e:2f:47:c5:
f2:90:25:f1:bc:4a:1d:c2:b9:69:d0:8e:90:86:d7:4b:dc:70:
e7:94:5a:19:d3:20:7c:41:54:60:6b:a5:8f:22:93:c2:a0:dc:
e7:7f:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:04 2025 by rpki-client