Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: iu116JKViOmbGfT1XE94nWL2OC5jTLtuy6bICl7f5a4=
Subject key identifier: 93:F7:E2:C1:6C:49:FD:27:65:B6:66:8F:69:5C:CC:56:6E:D1:78:35
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 0199FBEBC794C51240709DED5F699300DCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 15AA
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: 4lr9GQBgyvd+d0vYSVKpINDC8qgHkdI4fJVUTC5NIG0=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:94:c5:12:40:70:9d:ed:5f:69:93:00:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=93f7e2c16c49fd2765b6668f695ccc566ed17835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:b0:84:22:e0:62:16:66:6c:96:d9:2b:18:
82:7d:95:37:11:74:37:f7:49:00:d3:5c:c8:99:56:
a8:60:ec:6d:63:c8:57:03:d9:fd:b6:b2:ff:4a:e0:
3c:61:44:69:76:24:13:7b:06:36:32:60:96:70:ba:
30:32:30:4e:17:b7:2e:4c:61:0a:67:72:a9:85:1b:
27:76:18:5a:81:ed:c7:9c:1a:2c:b5:2a:e7:c0:37:
25:8d:01:11:ac:7c:63:c4:05:b3:dd:a7:38:17:7b:
54:fe:1b:56:2d:17:e2:53:1c:6c:28:6a:2f:87:31:
2e:85:dc:ca:a7:70:40:3d:7a:58:db:9e:0c:e0:61:
26:e8:8d:d3:ae:9f:8f:46:78:4c:4d:fc:08:c1:73:
c4:9c:a8:88:15:68:f5:a4:56:70:ec:13:51:1b:73:
de:d5:45:83:53:90:08:d7:ee:1f:b9:49:01:97:0d:
d7:8c:12:d9:3a:9d:24:34:4f:60:bf:9f:52:7c:50:
d8:7e:50:73:07:45:d9:c7:41:36:ce:54:3e:60:91:
2a:bc:4a:cf:a7:f3:9f:33:f2:04:c2:60:94:07:5f:
b0:30:1c:9f:fb:9a:fb:ad:14:93:1a:cb:4a:50:ca:
d4:72:2a:d9:b6:53:e0:2e:69:7a:06:76:2e:21:ea:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:E2:C1:6C:49:FD:27:65:B6:66:8F:69:5C:CC:56:6E:D1:78:35
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:61:bd:06:17:86:7d:56:9f:73:11:4b:2f:c4:fd:92:0e:
8a:77:1b:c5:cf:cf:e3:d3:0c:d5:73:62:3c:3c:b7:e3:a7:8f:
b0:4e:61:58:52:82:c6:df:f5:f8:4c:50:52:d8:b8:27:5a:b8:
48:90:9d:01:14:30:c1:54:5f:f7:55:df:02:89:37:6a:17:6f:
60:e2:ff:c2:0c:1e:6e:7d:85:eb:d9:6a:f4:79:50:86:45:ad:
a4:ce:ba:7f:fa:7c:0d:19:29:8c:2d:9f:7a:22:99:11:2b:17:
fc:7f:da:2e:fa:6d:b8:69:ee:46:f5:5a:a3:76:f4:5f:b0:4f:
d0:99:97:18:67:ad:4a:9b:5d:4f:3d:9c:0a:a0:80:21:78:9c:
f9:dc:b7:9e:84:5a:33:b9:77:33:30:63:03:67:5c:f8:17:ee:
c8:5d:29:7d:52:31:19:85:6c:99:30:4d:a9:9b:96:b3:70:8e:
c8:06:df:cd:69:33:1b:9a:3a:dd:cd:6d:c1:32:60:49:58:bd:
48:54:f2:88:30:9d:e1:ee:64:77:0d:c7:6b:38:57:22:29:0c:
9d:0d:33:0a:d6:ed:00:0c:7c:d0:7f:7c:e1:ff:57:f5:5d:64:
d2:47:ac:76:93:f3:48:ed:d7:63:d3:e0:bc:8d:c8:16:70:e8:
15:54:75:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768eUxRJAcJ3tX2mTANzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx
OWRlNTUwHhcNMjUxMDE5MTAwMjM3WhcNMjUxMDIwMTAwMjM3WjAzMTEwLwYDVQQD
Eyg5M2Y3ZTJjMTZjNDlmZDI3NjViNjY2OGY2OTVjY2M1NjZlZDE3ODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dGwhCLgYhZmbJbZKxiCfZU3EXQ3
90kA01zImVaoYOxtY8hXA9n9trL/SuA8YURpdiQTewY2MmCWcLowMjBOF7cuTGEK
Z3KphRsndhhage3HnBostSrnwDcljQERrHxjxAWz3ac4F3tU/htWLRfiUxxsKGov
hzEuhdzKp3BAPXpY254M4GEm6I3Trp+PRnhMTfwIwXPEnKiIFWj1pFZw7BNRG3Pe
1UWDU5AI1+4fuUkBlw3XjBLZOp0kNE9gv59SfFDYflBzB0XZx0E2zlQ+YJEqvErP
p/OfM/IEwmCUB1+wMByf+5r7rRSTGstKUMrUcirZtlPgLml6BnYuIeph3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP34sFsSf0nZbZmj2lczFZu0Xg1MB8GA1UdIwQY
MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt
NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2
LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZBhvQYX
hn1Wn3MRSy/E/ZIOincbxc/P49MM1XNiPDy346ePsE5hWFKCxt/1+ExQUti4J1q4
SJCdARQwwVRf91XfAok3ahdvYOL/wgwebn2F69lq9HlQhkWtpM66f/p8DRkpjC2f
eiKZESsX/H/aLvptuGnuRvVao3b0X7BP0JmXGGetSptdTz2cCqCAIXic+dy3noRa
M7l3MzBjA2dc+BfuyF0pfVIxGYVsmTBNqZuWs3COyAbfzWkzG5o63c1twTJgSVi9
SFTyiDCd4e5kdw3HazhXIikMnQ0zCtbtAAx80H984f9X9V1k0kesdpPzSO3XY9Pg
vI3IFnDoFVR1aw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:53 2025 by rpki-client