Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: Z9yZiz+7SfGnPclDlNUffzPrte18CJgZo0vyWYs8/Rk=
Subject key identifier: 8D:60:85:49:EC:2A:3B:19:F5:CD:C8:6B:17:C4:49:16:44:2D:BD:33
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 0199FB7C7B7968EC160CC39DD6CFE9D60BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: PH+eoSWug54AqhJY1SIglnjKx1F7U0gOQC6kpP4yOtE=)
2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7b:79:68:ec:16:0c:c3:9d:d6:cf:e9:d6:0b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=8d608549ec2a3b19f5cdc86b17c44916442dbd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:40:c5:e7:57:12:88:d0:a7:cc:35:64:a0:
75:5b:a8:2d:fa:36:9b:06:1f:10:11:c4:aa:9b:da:
d3:74:1f:44:ec:01:a3:4a:97:0d:3e:de:b7:b7:8b:
fb:c4:7d:71:f7:0e:d7:93:c3:7e:9b:24:9a:2b:e3:
c6:3c:1d:f8:e7:b3:ad:d4:1f:99:fb:32:94:40:c0:
ab:dc:6c:12:ba:5f:d2:d6:0a:e3:12:e4:f5:21:7e:
00:70:9a:e7:f7:84:92:1e:bd:5a:1c:b6:c9:ff:0e:
7e:c1:fa:3b:b2:d2:ae:a3:5d:ac:02:a9:6b:38:b0:
26:a0:58:d8:e4:4f:3c:bf:92:a8:75:b0:1e:d4:0c:
68:53:14:54:76:46:22:73:16:a8:4e:ba:db:d8:c5:
05:36:c0:d0:21:20:59:35:01:70:f1:c7:24:58:6e:
69:41:aa:f9:e9:54:d0:88:36:39:aa:25:3e:d2:12:
1d:c4:e9:47:e1:50:3b:07:ec:b7:62:41:d9:04:1c:
7e:38:f3:7e:2d:34:c1:42:b0:cc:1d:3b:ca:94:30:
48:ed:c9:d5:18:d5:da:6c:b8:a6:2b:c5:12:92:74:
45:4a:db:c5:a0:7a:98:b0:e3:01:b3:46:d1:8f:90:
4a:26:4a:d8:37:a8:1a:76:ed:b7:b4:b7:f4:c3:a7:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:60:85:49:EC:2A:3B:19:F5:CD:C8:6B:17:C4:49:16:44:2D:BD:33
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:23:be:64:80:30:23:d9:cc:c0:47:90:5d:ce:59:f3:f2:
f4:46:2e:28:89:b1:1b:81:40:84:cb:fb:7b:31:4e:10:06:ea:
4b:8f:6e:c2:01:cd:91:1f:c2:f9:95:99:21:fb:b9:46:b6:92:
63:91:2e:1f:f9:58:94:38:9d:af:82:3f:17:0a:09:db:24:93:
7c:ff:16:ec:3c:17:36:0c:d8:61:d6:d9:af:6e:10:f2:ef:87:
48:a5:81:a5:39:be:86:22:44:34:c7:eb:7d:6a:16:82:60:33:
6c:86:e7:18:da:51:91:1e:f6:a2:3f:43:c1:af:a7:7b:19:92:
4a:c9:0b:d1:fe:8d:47:d6:85:ba:2e:70:dd:72:d7:79:2f:18:
6c:80:0a:c3:b6:8d:49:f3:bb:44:6c:b1:7c:c9:0d:22:31:57:
5d:d2:73:61:c8:66:f3:3c:80:ac:89:69:7d:e3:0d:f3:9e:10:
2f:60:30:ea:9c:5b:cf:39:40:b5:c0:ad:17:61:1a:86:76:09:
c5:c2:b2:ee:7b:91:6d:34:d8:71:44:e6:7b:f7:7c:d3:ca:83:
a4:b5:31:4f:c4:5c:49:a1:c3:bd:93:4c:f9:69:8b:4b:6e:10:
00:ce:4e:05:c3:e9:d9:e4:90:59:c6:81:b6:98:40:a8:3e:dd:
77:74:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:51 2025 by rpki-client