Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: DlsFKrhLs+VmrO4c1h5MMwEOKsawMPJTrrW632EtIUk=
Subject key identifier: 72:CE:DE:1F:D0:30:44:8D:96:21:26:BA:C8:DE:5E:43:18:ED:12:ED
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01964DEC2166AAD9E254535418A1DE10188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1506
Signing time: Sat 19 Apr 2025 12:00:42 +0000
Manifest this update: Sat 19 Apr 2025 12:00:42 +0000
Manifest next update: Sun 20 Apr 2025 12:00:42 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: dLPOxo1amOq8yRvFJ/qrzV/t/Ay8+BpqLj4voGSOaUA=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:21:66:aa:d9:e2:54:53:54:18:a1:de:10:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Apr 19 12:00:42 2025 GMT
Not After : Apr 20 12:00:42 2025 GMT
Subject: CN=72cede1fd030448d962126bac8de5e4318ed12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:8a:f1:be:bc:0f:27:7e:62:01:78:a4:08:
fc:20:96:8d:c6:87:7b:fa:0c:af:5e:77:c0:60:b0:
88:bd:80:64:e2:d6:f4:69:b1:77:70:b5:07:70:90:
3c:97:3c:b2:b2:87:da:95:2c:2e:0a:af:73:9f:70:
6a:c8:7b:49:d3:3a:8f:4d:40:cb:3a:e0:02:97:26:
f7:a8:30:bb:4d:34:10:d9:8e:fd:5b:d3:f4:d0:5a:
0c:66:44:fc:71:30:b3:cd:f6:0b:ee:86:57:5f:29:
72:de:78:28:f4:87:a3:8c:91:ea:1e:8a:dd:38:ae:
60:f9:4d:6c:e5:69:87:4e:76:0c:92:66:15:6e:51:
12:89:80:e4:dd:b3:ed:80:34:f3:3b:cc:56:6d:a4:
8b:e1:c9:97:0e:d0:d2:18:09:fc:5d:0f:db:d2:28:
3d:84:24:c2:c6:4b:ee:a8:6a:bc:f1:a0:19:09:24:
df:ce:ed:f7:85:b5:14:fb:ff:58:a1:fb:1c:09:b7:
3d:47:b1:ef:b6:87:46:7f:02:aa:7f:0b:76:8c:14:
19:aa:b8:a8:6f:88:e2:72:42:07:1b:5f:b8:40:84:
b1:f0:36:28:78:54:2c:bb:4d:bc:d0:ea:ee:ac:27:
a2:f0:5b:6a:bf:80:04:8b:46:d0:c2:0a:5b:aa:7b:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:DE:1F:D0:30:44:8D:96:21:26:BA:C8:DE:5E:43:18:ED:12:ED
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:c6:b5:4b:0d:bf:fb:bb:72:d8:34:e7:03:c1:81:4e:0f:
88:42:a3:00:e7:80:91:39:97:6b:3d:8b:db:ea:e0:87:ac:f1:
1b:71:95:bf:72:56:64:7d:67:16:23:ef:f7:d0:68:88:80:45:
94:49:71:cf:82:1e:99:36:19:dd:41:de:31:25:98:e9:6e:39:
94:cd:00:4b:cf:6d:03:ce:78:2f:e8:3b:e8:b0:e1:e1:e0:36:
8f:a5:ac:11:eb:7e:b0:85:78:31:da:79:88:0e:47:c0:d0:8e:
29:7c:4f:9c:2c:ab:c9:47:ae:84:b2:8b:6e:67:0c:3d:a6:8a:
ac:22:5f:62:a8:40:d6:0d:dc:e2:8b:1c:e2:7f:8d:bf:d9:03:
3f:e7:7f:3c:14:ba:de:7a:56:86:fa:f5:48:6a:3c:df:01:39:
ca:9b:7d:3c:f1:77:b8:af:15:8c:a8:f8:ec:69:22:21:a1:05:
b0:59:6f:54:f1:a2:2f:86:3c:c8:06:db:83:3f:c4:5e:40:7c:
bc:7e:17:c7:bb:68:62:e6:ff:2c:5f:9e:59:30:21:04:3c:e2:
e7:30:f2:cc:f7:ad:97:24:b8:fa:f5:48:ca:17:59:9a:5d:d0:
89:67:dd:f3:1a:99:94:84:fc:0b:b3:f3:43:98:0a:d4:8a:fe:
8d:97:7c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7CFmqtniVFNUGKHeEBiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw
NjcyMDgwHhcNMjUwNDE5MTIwMDQyWhcNMjUwNDIwMTIwMDQyWjAzMTEwLwYDVQQD
Eyg3MmNlZGUxZmQwMzA0NDhkOTYyMTI2YmFjOGRlNWU0MzE4ZWQxMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kuK8b68Dyd+YgF4pAj8IJaNxod7
+gyvXnfAYLCIvYBk4tb0abF3cLUHcJA8lzyysofalSwuCq9zn3BqyHtJ0zqPTUDL
OuAClyb3qDC7TTQQ2Y79W9P00FoMZkT8cTCzzfYL7oZXXyly3ngo9IejjJHqHord
OK5g+U1s5WmHTnYMkmYVblESiYDk3bPtgDTzO8xWbaSL4cmXDtDSGAn8XQ/b0ig9
hCTCxkvuqGq88aAZCSTfzu33hbUU+/9YofscCbc9R7HvtodGfwKqfwt2jBQZqrio
b4jickIHG1+4QISx8DYoeFQsu0280OrurCei8Ftqv4AEi0bQwgpbqns3bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLO3h/QMESNliEmusjeXkMY7RLtMB8GA1UdIwQY
MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt
YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw
LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih/GtUsN
v/u7ctg05wPBgU4PiEKjAOeAkTmXaz2L2+rgh6zxG3GVv3JWZH1nFiPv99BoiIBF
lElxz4IemTYZ3UHeMSWY6W45lM0AS89tA854L+g76LDh4eA2j6WsEet+sIV4Mdp5
iA5HwNCOKXxPnCyryUeuhLKLbmcMPaaKrCJfYqhA1g3c4osc4n+Nv9kDP+d/PBS6
3npWhvr1SGo83wE5ypt9PPF3uK8VjKj47GkiIaEFsFlvVPGiL4Y8yAbbgz/EXkB8
vH4Xx7toYub/LF+eWTAhBDzi5zDyzPetlyS4+vVIyhdZml3QiWfd8xqZlIT8C7Pz
Q5gK1Ir+jZd8bg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:41 2025 by rpki-client