Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: WetrUZwXMWMIwz/OmHCR1hjeffILrxUJGxa4RWYLowQ=
Subject key identifier: 90:FF:45:A5:5D:C5:9D:21:3A:FD:7C:A2:EF:29:70:C0:87:73:7E:2B
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019748FA181C816BB1933CEE5B01A70EC696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1588
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: gbIZGN7TZVX1ZCWit7t1h4IhuWclRe2qfrBg/BZJJec=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:18:1c:81:6b:b1:93:3c:ee:5b:01:a7:0e:c6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=90ff45a55dc59d213afd7ca2ef2970c087737e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:f4:a8:66:28:0e:82:5a:96:84:a8:5c:2f:
88:eb:99:1b:b5:3d:f5:6a:88:e3:07:a1:6c:67:79:
84:10:10:d8:5e:24:80:08:45:c8:ae:11:66:8c:4b:
60:b8:57:1f:43:76:30:85:c0:51:19:09:e0:ac:01:
5b:09:fa:24:84:0a:4c:17:db:da:84:c5:43:f8:44:
31:32:b4:cb:ea:d6:27:4f:6b:72:0f:30:65:d2:1b:
2d:b5:de:4a:f0:8f:9f:f8:94:88:63:7c:5e:2a:25:
59:9e:9b:db:ea:39:57:71:13:9a:21:b9:c2:07:4c:
9e:18:c6:37:2a:7b:7f:e8:85:01:5e:7b:4c:af:1f:
3a:d2:b5:33:0a:0e:61:ed:a0:fd:53:a7:1a:ab:10:
e0:5d:6a:f3:f0:11:f6:f1:8f:95:23:c1:6b:0f:6b:
05:f1:06:ef:8a:cf:b3:d9:0d:20:f2:d3:12:01:40:
2d:44:af:6d:fa:a9:ec:dc:62:56:46:f4:b1:ca:8c:
02:10:2d:1b:f2:97:c4:94:dc:df:ce:0c:02:f0:70:
0f:d7:f0:f2:70:0f:1f:c7:58:a8:fc:44:de:1c:a6:
cc:13:ee:2f:84:2f:79:17:2b:65:7e:79:95:d8:46:
e7:fa:83:e5:a0:13:76:dd:15:7b:f6:b3:33:3e:99:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:45:A5:5D:C5:9D:21:3A:FD:7C:A2:EF:29:70:C0:87:73:7E:2B
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:cc:b9:06:e9:0a:1c:bd:b2:d6:ff:ad:b1:4a:9d:42:2f:
7e:b9:32:de:5e:3c:d6:29:cb:65:21:3e:dd:17:81:9d:b5:bb:
41:c3:66:7a:44:dc:91:bc:07:28:61:de:ac:9c:17:99:5a:30:
0f:b9:9f:e3:ae:19:6d:71:9e:47:13:06:a8:de:fa:d2:33:ae:
d2:91:25:3a:2c:a7:d2:92:6d:cc:f9:0f:3b:33:02:8d:5a:e7:
a6:72:75:ba:6a:e6:7a:a4:f8:e2:42:a0:01:38:63:8c:c0:4e:
95:e8:19:7d:e3:5f:1a:53:9b:e0:4b:1c:3e:a0:37:97:1e:64:
bf:94:54:b3:6e:73:de:de:52:34:82:7d:65:a3:e4:f3:49:7c:
48:b0:f1:57:f6:59:22:9b:1e:ce:f2:43:fb:ae:79:14:ed:fc:
94:e5:35:57:e2:2b:4c:07:93:cd:42:83:13:4c:78:a0:92:9e:
ed:3f:ab:bb:c1:f3:8b:d6:d6:cb:97:8f:dd:c7:a4:eb:df:0e:
f5:c1:9a:aa:06:72:cd:29:b6:be:aa:ae:b5:21:03:61:c7:5e:
3d:7a:98:59:40:2f:99:07:e5:01:bd:0b:aa:71:b6:68:5a:3a:
9b:f0:73:eb:7c:d4:a8:5c:94:cd:90:45:78:27:52:2d:14:fb:
28:cd:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:28:57 2025 by rpki-client