Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: oFh1L3CGbt6z/6MyPM9zjPYWNa7jIq/Rhgn0oHYgY48=
Subject key identifier: CD:5A:09:34:4D:42:25:1A:83:C5:65:77:0C:08:8F:F4:0A:ED:BE:CB
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0198D6CDB851FDD392DD509F1F30A7B9D648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 12:01:02 +0000
Manifest this update: Sat 23 Aug 2025 12:01:02 +0000
Manifest next update: Sun 24 Aug 2025 12:01:02 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: 5BFE5y7cC8BMdpNzE9vh841PvkLEll4c6ztfi6lCYHY=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b8:51:fd:d3:92:dd:50:9f:1f:30:a7:b9:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Aug 23 12:01:02 2025 GMT
Not After : Aug 24 12:01:02 2025 GMT
Subject: CN=cd5a09344d42251a83c565770c088ff40aedbecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:f6:13:d9:dd:d1:08:a0:09:5e:4a:de:2b:
c6:04:ed:6e:0c:7c:7e:97:6e:77:c5:d7:35:dc:46:
e3:d1:dc:c5:18:78:44:0c:2b:f4:6b:20:5c:b0:c6:
82:e9:f0:91:30:c6:35:67:20:4c:84:ad:3a:8f:55:
bd:a5:41:49:ce:8c:1d:60:70:88:a5:a4:b8:12:db:
cb:fb:1e:a9:7b:83:31:f2:47:5d:45:f8:ca:2f:9a:
99:81:ed:3a:fb:1f:09:52:5d:c6:7d:5f:88:10:c0:
9b:89:7c:5d:7e:fd:08:87:94:ed:82:06:4f:62:a3:
34:2b:32:7b:8b:2d:be:8e:38:37:e6:67:3b:eb:db:
f1:89:38:c1:ff:a4:fe:8d:f0:ce:ff:46:40:e7:66:
e4:a2:5b:f1:4a:4a:aa:16:19:53:78:67:bb:13:1d:
c7:81:38:cc:5e:bb:6a:c7:a5:ae:3e:47:39:9f:d4:
db:3d:7e:84:86:0e:b7:71:34:7e:ca:82:28:a9:bd:
1d:0c:93:0a:b5:48:a3:52:8f:8e:13:c9:fd:3c:f6:
6d:d6:90:e4:a0:e4:0b:7c:94:27:4b:c7:61:c8:8d:
c3:f4:09:9e:ae:ac:2f:d6:98:d2:84:63:c4:f0:94:
1d:28:b1:c4:0f:05:66:92:6f:79:61:0d:ec:37:aa:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:09:34:4D:42:25:1A:83:C5:65:77:0C:08:8F:F4:0A:ED:BE:CB
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c0:9c:1c:6e:7f:26:b3:89:59:6e:f3:55:31:23:42:ef:81:
d6:99:18:0f:63:95:4f:a4:c0:66:2d:a5:1e:81:d5:66:02:66:
62:3c:23:d6:f2:ab:7a:5d:d8:10:2b:de:b4:4d:6d:d9:e2:ec:
bf:90:75:e6:cb:a3:ad:56:cd:f6:a2:1d:eb:82:60:b7:46:d5:
dd:69:18:dc:7d:98:49:1a:05:4e:1f:85:ab:e5:58:40:59:fd:
d7:5f:84:0a:f1:46:2f:3c:ee:c5:cb:3b:42:ac:db:94:58:1b:
87:8e:96:f2:5f:74:19:d1:f1:5e:11:e7:6f:cf:57:16:dc:f6:
2a:7e:30:42:22:40:55:90:49:41:88:b9:e3:25:c1:54:bc:33:
d2:b6:98:ec:fc:35:0b:3f:56:3e:e3:6e:a6:25:ca:40:bf:23:
5b:7e:0e:c0:51:64:e8:f2:fe:60:94:4b:e7:98:14:b1:78:9d:
2b:0d:d8:18:92:8b:d1:d8:5e:27:d4:90:5c:40:36:6f:ac:1e:
6e:22:79:a6:9d:ce:e7:a6:fb:cb:cc:a2:37:1d:0a:33:bf:1e:
0b:b7:a3:65:8b:38:be:f0:c4:f3:db:c8:c2:bb:4e:9a:c4:db:
0e:03:24:a4:1f:d9:d4:39:ce:aa:39:93:d1:c2:ce:1b:4e:9f:
ed:2d:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:47 2025 by rpki-client