Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: rfmw+K9sHl4adbpkuyIks1GTtWGmd5UUc+mqu1qZPno=
Subject key identifier: 6C:E5:FD:C8:F5:DF:67:AF:C3:B2:9C:E2:4E:75:2E:75:3E:24:13:7F
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 0198D4A7BD9905615180C827D27838369C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0E3E
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: VoN6YvKUB7qPA2BYAiHPP2oqCnNV5+3cqVaIwhI5+zE=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bd:99:05:61:51:80:c8:27:d2:78:38:36:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=6ce5fdc8f5df67afc3b29ce24e752e753e24137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:8b:00:ff:e5:51:f3:f0:4e:ad:95:3a:30:
cc:90:2a:ba:72:cc:a0:5a:35:37:12:a4:4b:40:97:
12:78:3c:4a:5d:1b:66:f6:83:46:68:2a:d1:e2:97:
99:ad:6d:8a:01:52:eb:c8:25:0b:fe:17:da:98:90:
69:e1:9f:e3:12:79:8e:ca:b3:98:37:9e:64:68:74:
3d:e4:84:36:2b:16:21:04:26:53:a4:55:ca:0d:f1:
0c:63:bb:ba:77:27:78:24:67:8e:6d:e9:43:d5:1e:
06:c4:ee:21:e2:81:25:63:67:14:dc:40:b5:bf:53:
d4:a6:6d:4d:c5:92:f7:1b:5e:de:fc:0a:2c:4e:8f:
70:5d:81:87:18:c9:89:c4:4f:90:64:5d:10:8e:b9:
15:ee:2e:e0:46:5b:09:66:45:72:d2:74:86:6a:49:
74:d4:64:b1:8c:69:24:83:a3:99:4c:a4:12:8f:4a:
9f:dd:bf:e0:c3:36:3f:62:ff:8a:0e:78:50:91:8a:
7f:d6:1c:bd:8d:fe:57:71:88:9e:01:5e:fc:63:a4:
2b:77:58:7b:e8:5d:3a:7c:5b:ff:12:0c:56:22:47:
eb:9a:be:f2:80:b5:a1:da:c9:40:3b:47:09:b4:cc:
3a:e7:00:38:77:8a:83:54:ad:ea:1e:e5:7f:0f:00:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:FD:C8:F5:DF:67:AF:C3:B2:9C:E2:4E:75:2E:75:3E:24:13:7F
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:48:05:7a:22:ce:c3:2e:9c:2d:b7:be:73:fd:75:7a:7f:ce:
31:8c:00:db:f8:29:e5:d3:91:44:7a:da:0e:18:55:b4:73:81:
da:1c:81:06:dc:c3:2b:ba:45:f9:5d:14:71:45:69:18:cb:2f:
c1:95:a2:1c:82:e7:17:8d:16:92:f7:e4:a5:1a:73:f1:e3:65:
b4:33:78:28:20:12:92:ed:bd:46:47:67:79:a8:97:dd:6e:8e:
44:ca:81:bc:3e:a2:2c:70:81:5a:a9:30:00:e8:85:db:28:c5:
6b:05:13:27:3e:13:7c:45:84:8f:31:d3:50:64:bd:3a:26:26:
07:47:5e:c5:f9:d3:14:51:5a:64:8f:85:ef:ee:15:9c:3b:bb:
a3:9f:56:64:68:16:8f:44:fb:2a:12:56:14:14:2e:f6:73:d1:
61:d3:a8:42:37:d4:9a:f3:3d:1b:5f:97:56:7c:3b:ca:a5:de:
09:f5:d4:d8:5b:e9:3b:bd:6f:dd:ef:70:0d:04:98:03:56:30:
b3:16:f3:3d:6c:c5:d4:0b:33:53:06:1f:c7:43:28:c0:0b:8c:
ac:02:83:1e:80:8a:a6:41:a7:98:86:14:6f:e2:d1:ec:c9:d4:
3e:7c:0c:89:d3:61:49:bc:9f:8d:c6:e8:b5:f5:e2:9e:72:64:
6e:4b:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:43 2025 by rpki-client