
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: Tv3U05tAENRK6Vc4T7IOTLQPgvbmcqMN6HfJ1/EK0e8=
Subject key identifier: BE:DF:94:86:A6:60:C2:3D:3A:DE:10:54:7A:34:84:A0:D5:80:B1:87
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0199FE46BEA665DEE9126431F25FA80CD124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:13 +0000
Manifest this update: Sun 19 Oct 2025 21:01:13 +0000
Manifest next update: Mon 20 Oct 2025 21:01:13 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: WKso7td1qfMl6b2Z9DSvvhEw780V7STVm7H3H1I9GUE=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:be:a6:65:de:e9:12:64:31:f2:5f:a8:0c:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Oct 19 21:01:13 2025 GMT
Not After : Oct 20 21:01:13 2025 GMT
Subject: CN=bedf9486a660c23d3ade10547a3484a0d580b187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:46:7a:6c:10:71:34:ee:7e:fb:13:22:b3:
61:2f:ee:9c:ff:ee:f8:0b:4f:35:14:db:73:ea:48:
51:47:84:2f:f3:23:61:0a:d3:24:04:f6:67:bd:b0:
58:30:24:0e:71:1b:31:b5:c2:6a:dd:d0:55:dd:82:
7d:02:7d:19:1b:7d:12:e3:c7:ae:69:59:96:2c:55:
9c:93:42:c0:7d:58:f6:cc:02:aa:b4:90:24:c1:3a:
26:dc:98:40:c0:bb:b3:56:9b:f1:d4:0f:39:26:ff:
ae:4e:71:1e:b3:79:59:57:80:48:fe:87:3d:8e:4a:
b2:c5:2f:b8:3d:72:17:5a:69:0c:c3:b9:ff:84:2d:
5d:31:80:32:0a:88:21:d4:f0:40:b1:d0:4c:de:b8:
80:fb:de:02:07:78:d5:79:ac:bf:6c:ea:0e:e7:c0:
a2:6a:40:7c:94:5d:45:a9:58:27:6e:e1:fb:02:14:
57:4e:c1:03:c5:b7:41:be:d6:f1:12:90:0d:7d:73:
d1:4d:81:50:9b:9a:c3:15:d3:53:cb:76:9e:54:5b:
b9:aa:f0:eb:20:2f:53:3c:f0:35:37:51:cc:a2:e7:
7f:cc:6d:9c:29:5d:d6:38:6a:07:48:86:be:a5:78:
c8:27:5f:e3:6c:56:1e:37:bd:6c:dd:91:89:cd:c1:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:94:86:A6:60:C2:3D:3A:DE:10:54:7A:34:84:A0:D5:80:B1:87
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c8:69:1a:08:17:f7:c3:b5:fc:d6:c9:a5:72:c2:3e:47:1f:
a8:c3:d5:42:88:40:2c:f4:d0:17:c7:39:9f:af:5f:44:47:0c:
80:8f:e3:71:7d:ab:ff:d9:cd:c2:85:72:06:dd:0a:e1:e1:be:
67:c0:c1:54:33:7c:cb:d0:bf:e1:eb:4e:ed:57:bf:95:a7:8e:
b7:b0:eb:07:95:e7:4c:a1:ea:4d:a6:d0:14:11:b2:ff:aa:0f:
54:23:56:c5:35:27:6a:50:9b:48:d0:27:eb:b7:a9:f3:d5:7b:
3a:f7:09:fb:29:07:28:3a:43:6b:30:cf:41:55:81:9b:5b:08:
ee:a1:4e:55:5f:c1:af:0d:63:96:30:0b:04:54:4e:08:9a:0e:
d0:c5:a1:6f:06:3f:d5:88:26:2a:1d:8d:57:61:de:04:1c:f8:
e6:ed:4e:ca:ae:2d:00:81:fa:89:f4:ad:a2:d5:b8:4a:57:3d:
8d:e5:08:bc:4f:db:fd:f3:8c:50:62:85:29:dc:1c:42:bb:5f:
98:7d:3a:8c:a6:e2:32:2e:d9:2b:0b:ff:21:6e:ce:8c:15:3f:
49:cd:77:c8:fd:4b:e2:30:ba:fd:de:9a:0d:09:29:4f:d8:d7:
21:0d:d5:23:c9:52:0a:c9:ab:a4:93:5e:d7:b8:ea:a3:ed:44:
4b:6e:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:21 2025 by rpki-client