Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: 6EWkB1LLdwxUIckGATLpDuyTbGwKr3A/viv4vWSLwqg=
Subject key identifier: 61:32:A6:E6:27:5D:6B:67:C5:40:50:1B:E4:E1:68:8C:17:CD:64:A8
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0199FB4587037FF504FEA4210A88B4C25C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 16F3
Signing time: Sun 19 Oct 2025 07:01:01 +0000
Manifest this update: Sun 19 Oct 2025 07:01:01 +0000
Manifest next update: Mon 20 Oct 2025 07:01:01 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: ctIdcbAxzlgE61iaJYeLZI-atK4.roa (hash: xe/X44jbVuhNTWtEZLlddMSK0Nf/sdgGvPMIEXHpN6g=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: BGrFppR1W2DvCuZ2/NceT7P18zZvnXNiRgKWAUuVvYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:87:03:7f:f5:04:fe:a4:21:0a:88:b4:c2:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Oct 19 07:01:01 2025 GMT
Not After : Oct 20 07:01:01 2025 GMT
Subject: CN=6132a6e6275d6b67c540501be4e1688c17cd64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:b2:c6:d9:fa:e8:fb:02:ec:9b:34:84:36:
aa:28:11:65:b1:24:81:ab:f0:fc:81:25:50:b1:ac:
37:53:c7:80:a6:7b:bf:db:12:20:43:61:d7:57:c5:
63:c8:e7:41:58:2e:03:e1:d6:6b:7e:14:84:f3:01:
0a:fb:1d:a1:5c:62:1f:fe:21:01:d8:8d:b3:53:e8:
68:4a:95:a6:2f:af:88:88:97:94:96:08:cf:3e:e8:
b0:46:20:73:b1:0b:89:c9:8e:de:6f:8e:0e:9f:77:
04:fa:69:0c:e9:f0:04:e7:35:87:a4:31:d1:7e:f1:
58:31:82:ff:ea:52:1b:74:73:f5:c3:e3:36:16:6f:
10:9f:7e:b9:22:da:42:c3:78:a7:f2:0a:d3:f9:de:
94:b3:b0:57:ff:10:bf:6b:6a:b1:c2:37:9f:48:4f:
60:e0:0f:d6:df:6e:d0:20:40:f9:55:e4:9c:6b:36:
89:74:2f:97:1f:0d:61:83:e4:48:37:0c:20:97:cc:
63:5f:fc:6f:94:aa:fa:14:b4:c1:9f:4d:c2:8c:c4:
cd:21:e9:69:ce:16:48:4a:5c:3d:71:63:b0:25:e5:
e5:8e:2f:b3:52:19:e6:5c:62:14:8a:6c:8c:23:10:
c1:f6:03:a2:de:88:a8:a5:90:5f:8c:e4:74:ad:c9:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:A6:E6:27:5D:6B:67:C5:40:50:1B:E4:E1:68:8C:17:CD:64:A8
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:b8:51:81:7e:65:ef:b7:87:16:7b:48:28:3f:da:34:51:
00:ee:a8:ce:b6:b4:8f:c5:3a:57:03:9c:f4:66:ab:5a:50:c9:
e2:fb:1a:72:59:21:fe:94:c5:f1:b3:57:5e:e7:8c:54:a0:f1:
88:e6:67:0c:b8:74:2c:70:8d:94:42:a0:4f:96:81:c7:51:3a:
bc:fb:36:e0:bb:a9:27:49:e6:f7:da:b0:38:3f:4c:19:8b:e3:
b1:d0:39:7f:19:cb:cf:e3:7b:35:41:ba:4e:41:8a:b8:3b:6b:
4f:5b:92:35:9a:f2:97:16:2b:7b:58:a1:a3:a5:97:76:86:a5:
94:f2:54:f6:dd:57:3b:60:d6:e5:e3:7d:03:71:86:f7:e8:a7:
e4:4a:1f:45:3e:98:83:45:c5:6a:84:52:68:b4:c0:b3:c2:91:
68:16:41:70:b2:a1:2c:8e:97:09:b7:d2:7e:27:2d:4b:49:e1:
6e:32:91:aa:a4:24:86:af:17:63:79:fe:d7:b1:d5:ae:36:4d:
08:21:ae:02:ca:7d:52:a0:6d:a8:ae:e6:b4:a3:96:7e:c0:b9:
43:00:d1:ad:61:92:22:67:8a:fe:06:31:4f:52:52:4b:f6:05:
59:00:06:a6:a5:8d:d5:59:3a:ae:94:6e:0e:ec:d2:88:87:3b:
33:b1:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client