Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: QifvYrOt/rg5CrLxrXywl8GLtuuS6MmvP0ORKhn8t2U=
Subject key identifier: 5F:D8:7C:6C:8D:2A:DD:7F:B3:91:CC:B4:43:0A:9C:7E:75:84:B9:61
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 0199FD344269E81C8FD084BCDC7917938EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 059A
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: pW5KkAq4xwqw0/Bl2Q964Mm9OcfgvxarsK9LAlyWH2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:42:69:e8:1c:8f:d0:84:bc:dc:79:17:93:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=5fd87c6c8d2add7fb391ccb4430a9c7e7584b961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:4f:45:84:be:65:17:a7:f3:07:b5:28:03:
ba:a0:93:91:5c:57:68:4a:38:95:93:25:fb:7f:59:
a7:7f:fe:64:24:33:78:d7:11:b0:1d:89:12:2f:31:
e6:f4:87:9a:80:45:c0:1a:9e:95:93:17:35:6c:a6:
99:20:fa:83:86:68:37:d4:45:ff:ae:fe:e6:ff:ba:
e1:e6:84:40:42:44:9a:44:65:bb:1e:eb:9b:cc:80:
05:cf:d4:03:65:ab:4b:61:79:c8:2f:9d:3d:66:39:
ec:72:e0:63:33:09:0a:6f:65:bc:5e:e5:0b:83:f2:
ae:03:48:06:6d:6b:37:74:cd:f3:cb:7b:df:f6:69:
e3:eb:bc:0e:59:c6:20:04:d3:8d:c2:af:9b:86:9e:
11:99:25:6a:d1:1c:05:dd:bd:b3:f3:68:10:ed:9d:
26:04:d9:6d:35:5a:b4:ff:ff:7d:52:4c:a1:c2:5e:
65:b2:b3:62:b9:2d:4e:13:30:dc:98:d5:12:98:c7:
2c:ca:33:94:7f:4f:eb:d8:95:bf:46:7b:a8:40:2c:
97:c1:02:97:6a:c1:19:33:34:f7:b3:f3:78:b8:31:
83:48:2a:24:d2:50:60:78:00:94:3b:18:c2:44:61:
d5:b7:7d:39:4d:82:10:62:8f:a3:21:ee:94:2a:c3:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:7C:6C:8D:2A:DD:7F:B3:91:CC:B4:43:0A:9C:7E:75:84:B9:61
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:5a:b0:54:22:92:66:32:45:1c:e8:41:1d:87:26:a2:df:
1c:61:15:49:d5:37:d9:e7:f1:54:b3:20:6a:9e:59:a3:58:ce:
b1:32:bc:62:4e:32:27:11:5a:a7:ec:e4:1a:bb:7e:33:ae:a4:
e4:49:29:9c:a3:f5:ff:95:41:7d:59:38:9d:e1:81:2a:cf:0e:
a4:1b:9f:bc:7f:f3:3b:9d:e0:7c:e7:45:cc:9b:94:92:37:e8:
f5:3b:4f:7d:5d:a6:11:b1:ba:40:94:dc:c4:8c:82:dc:99:f0:
28:41:f8:b8:00:89:b7:00:eb:ba:3c:62:26:cd:d7:17:18:3a:
13:10:16:23:ba:75:48:9d:39:26:9a:94:b9:a8:8e:74:72:60:
0b:d2:9a:fd:c4:42:e8:af:7c:fa:5e:89:f4:35:3b:3e:a2:76:
51:74:68:82:cf:2f:da:5f:22:52:02:3b:26:3d:ad:30:2c:6c:
5d:98:7a:25:18:07:60:2e:f8:42:45:0a:f7:6e:95:38:0f:d2:
4f:8b:ce:98:17:ad:e1:44:63:ca:c7:b3:f8:e3:9e:dd:84:2b:
20:96:f7:ae:be:2c:25:d3:51:8b:78:a3:55:b7:d9:b2:f3:79:
15:eb:2f:31:92:e1:a1:ce:0c:8d:ea:1f:1f:85:e0:54:54:9f:
a9:df:71:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEJp6ByP0IS83HkXk46wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3
NWZmOTMwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
Eyg1ZmQ4N2M2YzhkMmFkZDdmYjM5MWNjYjQ0MzBhOWM3ZTc1ODRiOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/hPRYS+ZRen8we1KAO6oJORXFdo
SjiVkyX7f1mnf/5kJDN41xGwHYkSLzHm9IeagEXAGp6Vkxc1bKaZIPqDhmg31EX/
rv7m/7rh5oRAQkSaRGW7HuubzIAFz9QDZatLYXnIL509ZjnscuBjMwkKb2W8XuUL
g/KuA0gGbWs3dM3zy3vf9mnj67wOWcYgBNONwq+bhp4RmSVq0RwF3b2z82gQ7Z0m
BNltNVq0//99Ukyhwl5lsrNiuS1OEzDcmNUSmMcsyjOUf0/r2JW/RnuoQCyXwQKX
asEZMzT3s/N4uDGDSCok0lBgeACUOxjCRGHVt305TYIQYo+jIe6UKsMMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/YfGyNKt1/s5HMtEMKnH51hLlhMB8GA1UdIwQY
MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt
ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4
LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYNasFQi
kmYyRRzoQR2HJqLfHGEVSdU32efxVLMgap5Zo1jOsTK8Yk4yJxFap+zkGrt+M66k
5EkpnKP1/5VBfVk4neGBKs8OpBufvH/zO53gfOdFzJuUkjfo9TtPfV2mEbG6QJTc
xIyC3JnwKEH4uACJtwDrujxiJs3XFxg6ExAWI7p1SJ05JpqUuaiOdHJgC9Ka/cRC
6K98+l6J9DU7PqJ2UXRogs8v2l8iUgI7Jj2tMCxsXZh6JRgHYC74QkUK926VOA/S
T4vOmBet4URjysez+OOe3YQrIJb3rr4sJdNRi3ijVbfZsvN5FesvMZLhoc4Mjeof
H4XgVFSfqd9xRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:52 2025 by rpki-client