Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: z8tUMry9E4gJEI0DJKW3NNohqVP8EAPORN2Dg09p1uE=
Subject key identifier: 01:31:4F:3C:F4:E1:F2:51:E0:45:57:3D:91:0A:50:1A:5C:50:F9:3A
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 0199FE471C62CCD0FC228AFBF128D9087A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: v90bkvhnwtOL6q9RHTs2NmILuc8ki0/4CA+zUnnqM4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1c:62:cc:d0:fc:22:8a:fb:f1:28:d9:08:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=01314f3cf4e1f251e045573d910a501a5c50f93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:bc:90:7c:84:54:f2:a6:03:06:20:06:f6:
f5:d2:4b:a1:26:ee:1b:0c:06:d4:f3:54:c2:33:d9:
aa:dc:5d:fa:4a:55:83:1e:06:1c:e9:80:ea:7c:33:
3d:68:e8:b5:d8:3b:36:a4:2c:c8:d3:a9:16:29:0b:
42:a9:b2:8c:39:23:b1:2c:e3:0f:bb:5e:c6:a0:2f:
83:af:f1:74:c4:a5:a8:b5:a1:94:dd:df:07:51:f2:
ae:eb:aa:07:dc:f2:70:a8:4c:f6:12:e7:41:38:39:
b5:34:93:94:d7:7a:52:04:0c:16:b8:4b:71:78:0b:
57:06:61:08:ca:ea:c2:c4:92:62:47:75:25:b6:b9:
a6:36:d0:36:01:d8:f0:e7:41:c9:99:77:a0:2d:38:
23:60:8a:79:78:6c:d3:8d:75:48:8c:70:44:18:b5:
5d:43:f9:91:ac:bb:d6:27:4b:b0:90:40:d1:c2:83:
85:af:b4:63:5c:ab:0a:35:5a:0d:e5:f3:5b:5d:b8:
7c:2e:76:3c:2a:9c:6d:e4:df:f3:b6:40:6b:e9:27:
b9:56:d7:12:4f:8b:69:7a:63:dd:4d:e0:2b:c1:db:
5c:5d:e4:f9:31:f8:70:69:1e:03:4f:c2:ed:b3:ab:
78:95:5b:5c:34:59:40:eb:df:7a:4b:dd:9f:5b:66:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:4F:3C:F4:E1:F2:51:E0:45:57:3D:91:0A:50:1A:5C:50:F9:3A
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4e:21:f9:93:2e:7e:3c:69:95:3a:ca:11:b6:71:c6:43:90:
d8:e1:5d:b3:3b:08:15:26:50:ec:05:26:87:6c:7c:80:fa:e4:
3a:a2:ca:3c:53:d4:13:94:f7:d1:5c:43:76:23:74:4d:6f:a7:
ff:f3:92:1c:77:22:f6:1c:96:ac:3e:aa:49:b4:5b:a8:6e:c8:
d1:3c:f4:77:b1:92:92:e4:74:d5:ed:b0:3b:47:69:22:80:14:
eb:d8:62:f1:9b:f4:99:46:f2:af:b2:ba:b2:8b:f7:96:7f:79:
39:c8:2f:dc:19:60:88:77:d9:7a:7c:01:8a:dd:39:65:91:5e:
64:7c:c4:bd:23:3a:b3:95:17:bc:e6:44:d1:b1:c1:3d:2f:f3:
6b:cc:9f:23:7e:a1:b7:8e:e1:e1:e1:75:17:db:13:d2:ec:f6:
fd:71:ad:d3:65:76:69:50:7f:10:7f:26:d8:0e:4e:23:97:51:
33:57:63:68:87:0d:ef:62:3c:2e:cc:d0:df:64:33:8b:ef:91:
92:3d:7d:9a:48:2c:99:a0:83:c3:0e:10:41:d0:9f:b4:73:d4:
41:7c:f8:2a:be:1e:12:0b:7a:27:ed:c5:43:90:50:69:be:8d:
a0:14:99:b4:df:23:15:70:1c:4b:60:17:ab:df:d2:0b:37:9a:
0b:d4:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:29 2025 by rpki-client