Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: USMm56bKKJ1aBzygp+0X+ucqldjKUulG3pN+OX1nk+E=
Subject key identifier: 5A:A4:95:51:CC:99:14:10:BB:5C:E8:99:0D:2D:C4:5F:B4:65:6D:81
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0198537B402A78699D6A497666CAA3D472C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1612
Signing time: Tue 29 Jul 2025 00:00:42 +0000
Manifest this update: Tue 29 Jul 2025 00:00:42 +0000
Manifest next update: Wed 30 Jul 2025 00:00:42 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: Vx/uX+vSImUrkPVc/ZiA/ylSJK7+tKU7MHe+q0VQXk8=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:40:2a:78:69:9d:6a:49:76:66:ca:a3:d4:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jul 29 00:00:42 2025 GMT
Not After : Jul 30 00:00:42 2025 GMT
Subject: CN=5aa49551cc991410bb5ce8990d2dc45fb4656d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:06:a0:0c:fb:c9:9d:73:fe:bb:d8:45:bb:
b7:18:b3:3b:c4:67:08:cd:6f:fe:5a:b1:66:d1:b4:
e5:b4:75:1e:d4:00:2d:a9:10:df:b2:62:1e:24:ff:
f2:7c:c4:62:29:0b:4f:2e:d6:0f:32:b5:9e:ec:6a:
34:b8:3c:bc:da:42:64:e3:32:62:9b:17:9d:12:a7:
65:b2:85:a9:5e:49:3e:fe:55:17:a8:87:61:db:19:
b2:a9:e4:88:df:2b:54:ee:d6:f2:6a:de:d2:ba:4a:
0d:7e:aa:a2:2c:30:62:91:20:e7:a7:11:92:91:3f:
e2:20:f8:aa:f4:82:8c:f2:b2:9d:c2:97:97:a1:7a:
a3:d5:65:43:7d:2b:2f:1e:18:38:a1:db:5d:d9:13:
76:1b:55:a4:f2:3d:ef:0b:50:d1:78:64:c6:e0:4e:
51:24:ea:3e:a7:bd:a4:6f:24:26:27:81:87:35:25:
29:77:f5:44:25:31:7d:bf:4d:e1:80:d4:81:45:3d:
e9:88:1f:76:fc:82:62:c9:dc:e8:85:bf:1b:ef:35:
97:01:46:ad:bd:63:19:db:62:57:d8:f9:48:5c:49:
99:cd:a8:27:9c:dc:3f:76:a0:94:72:c3:5c:58:d9:
2e:ee:79:4a:b2:14:e9:fc:45:d5:ec:0b:0b:9c:3c:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:95:51:CC:99:14:10:BB:5C:E8:99:0D:2D:C4:5F:B4:65:6D:81
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:c1:96:15:c1:37:d4:87:11:a9:00:fa:d1:66:e7:07:d6:
1e:d3:f4:b5:ed:c3:c0:c9:fa:e1:48:b5:6a:b7:da:53:b4:83:
b4:d5:01:d8:be:6d:91:60:1a:bc:5b:f0:83:f7:87:f3:13:42:
67:59:d9:4d:43:8d:4a:3c:4b:7b:0b:5d:26:42:df:98:5b:5d:
ef:ca:12:bb:75:ac:48:af:82:3a:1e:67:4a:a9:88:62:cc:db:
f8:ef:71:c4:2a:55:4d:11:b9:fc:d2:c7:1e:6f:10:31:29:26:
6c:0c:19:9b:48:31:b3:aa:d0:31:3a:3f:f4:ad:a4:3d:cf:79:
68:42:08:a5:62:d5:21:c2:7a:84:c9:3a:5d:a9:75:7f:25:e9:
ff:5b:c6:21:b9:2a:d2:9e:51:f1:4d:27:7f:cb:fe:da:a4:7a:
0b:26:8b:24:d3:45:4f:a8:ad:bb:b5:79:37:35:d1:c1:3c:0f:
e5:0b:f1:51:b3:d2:dc:d1:7d:d2:de:ed:cd:0c:2a:dc:81:de:
3a:76:86:7a:b2:03:93:ed:5d:f9:9a:89:73:48:a9:2a:5a:04:
70:92:dd:5e:60:68:66:e1:90:e2:e6:a6:fb:89:c5:bd:1a:db:
e1:2d:11:7d:33:c6:ce:14:0b:2d:a0:c5:70:a0:4b:d8:eb:d5:
81:53:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:57 2025 by rpki-client