Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: 3HoHUPN8O3ZZartx4iy2qNDgFijFQD03kKtdIilJoEY=
Subject key identifier: AE:3D:DA:42:E8:1C:88:A6:70:48:EC:6B:3D:DB:2D:81:5F:F5:26:BA
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 0199FBEB2847B95A2CA1C4DE7E8754E5B5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0ED7
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: vP7nM1LVyoK8xYeo4YjixkZLdFXKLqGzhFakTJTJOjk=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:28:47:b9:5a:2c:a1:c4:de:7e:87:54:e5:b5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=ae3dda42e81c88a67048ec6b3ddb2d815ff526ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:a2:a0:be:6a:1f:d9:9b:d4:78:70:b3:33:
6a:b7:92:0b:66:98:e1:7a:76:8f:ff:6e:bd:7d:2d:
b1:3f:df:c5:d6:9e:42:66:aa:09:0c:93:e0:92:27:
6f:e5:c6:60:88:22:ae:2c:83:fe:b2:80:7b:6b:1f:
25:12:fc:57:dd:b3:6b:ec:d7:01:99:64:7d:e6:73:
72:d2:df:fb:e3:8b:bf:f7:51:a9:98:2b:85:3d:ad:
38:e9:bb:c1:fa:a1:50:98:43:fb:cf:32:42:89:70:
4d:80:65:cb:c7:01:eb:2c:67:6f:92:f9:3b:9f:d5:
98:07:8a:09:d7:5f:27:82:5a:ae:ee:a7:d1:33:5e:
8b:01:10:f2:41:56:71:04:9b:b8:5f:ab:d4:c5:e5:
35:5c:41:86:66:df:28:c8:92:4d:8c:65:f4:5d:54:
27:ac:5b:9a:98:82:ac:aa:69:73:d9:e7:dc:71:a5:
b8:e4:ad:d0:bb:6a:7a:94:9d:d8:b9:2c:18:ca:d8:
07:25:30:ec:36:ec:63:84:fe:ab:49:b1:ba:d8:81:
96:d4:4e:38:5f:b4:db:03:a3:cd:e9:aa:d2:c5:57:
9f:ae:51:aa:62:9e:ef:87:09:b8:de:5b:75:ad:34:
d9:35:32:31:5b:4a:5e:e7:a3:2d:8a:39:11:f2:89:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:DA:42:E8:1C:88:A6:70:48:EC:6B:3D:DB:2D:81:5F:F5:26:BA
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:0f:05:41:c6:19:6d:05:55:5a:94:db:c0:5a:41:c4:ab:
c4:4d:5d:05:94:5e:86:f2:69:93:83:66:fd:a1:4c:a2:f8:d0:
4f:e0:b9:a1:ef:5d:ed:7f:8e:58:eb:53:55:ff:eb:71:2e:0f:
33:81:ae:49:e8:c0:01:98:3f:d4:bc:2b:84:32:08:fa:c3:2c:
46:fa:e5:8a:3e:26:07:49:e2:15:2b:cc:41:1f:b7:32:5a:93:
fd:bb:12:54:52:66:9f:01:94:df:cb:24:87:75:b7:01:46:87:
da:89:36:88:62:cb:e4:90:43:44:6f:26:17:ab:05:1f:57:c7:
54:1d:58:96:5d:a9:ef:88:06:1e:14:61:6c:ab:5a:6a:a6:3d:
ef:b6:cc:51:71:a9:39:3d:9f:f9:60:cc:44:d9:c0:61:06:c8:
1e:e9:b6:65:7a:b2:78:b9:d8:10:2f:af:d0:50:22:62:93:d4:
b7:f6:a2:8a:88:c4:59:c1:d2:75:91:9c:bb:14:5c:70:dc:2d:
7f:b6:7c:e8:20:39:dc:54:22:cf:5c:6e:c5:ef:61:07:58:93:
1c:9c:55:90:20:79:09:67:f0:d5:ec:f9:26:1c:b8:d4:65:af:
be:f8:7a:7d:41:ac:a3:0b:0b:ea:87:37:1e:97:26:9e:5d:35:
2a:58:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:48 2025 by rpki-client