Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: JVH3rDIPk+UDpuy8WC5MxxLsRnUe3XIBMCw7dpazZuw=
Subject key identifier: 6E:18:61:E5:7B:2D:50:03:60:1D:B7:5A:39:0E:03:14:8D:D5:11:01
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 0199FCC65613A775330170FEA60ACCEC73C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 023D
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: /uLLHST6UPPNoPFpVjW4OLGJce+KVuNUNBOYXCr110k=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:56:13:a7:75:33:01:70:fe:a6:0a:cc:ec:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=6e1861e57b2d5003601db75a390e03148dd51101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:7b:d0:40:ca:2d:bf:c7:d3:32:e6:7b:1a:
d3:6d:51:67:14:a6:79:cc:49:8f:ad:fa:26:09:05:
ac:af:86:72:29:bb:66:5c:ff:ec:fa:16:94:3c:6d:
cd:66:d1:51:75:ba:4b:e2:97:b4:be:46:a5:fa:d7:
48:b5:49:d2:d6:0d:cf:5e:fe:cd:42:c2:ce:90:0a:
49:6c:5f:49:07:d8:46:65:6b:37:a4:d1:e2:74:cf:
2d:d5:59:d8:f1:1c:fc:e2:6e:6e:6f:b2:5b:b5:25:
3b:34:18:c9:9e:bc:75:29:24:94:0d:58:97:1d:58:
6e:79:8a:ab:d4:df:a9:3b:9c:ee:92:37:26:54:29:
25:78:1f:45:e0:e8:ac:c7:77:ce:16:5e:00:10:d0:
22:9b:41:5b:6f:fb:51:af:ee:43:d6:91:82:81:db:
80:3c:57:42:37:a0:e6:c2:50:9e:fe:57:ca:cc:76:
53:57:9b:3a:c3:bb:e8:21:c5:a6:fd:1d:16:a3:a2:
58:1f:69:5d:c3:5b:36:f6:09:76:7c:f6:2d:e2:85:
78:15:18:e0:a9:23:ca:85:22:ef:8e:a5:68:02:71:
ef:f4:e8:5b:19:41:4f:a0:2e:dd:05:e4:e6:ff:b7:
67:b7:1c:ca:cf:30:c8:3f:57:2d:14:9e:da:6f:0c:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:61:E5:7B:2D:50:03:60:1D:B7:5A:39:0E:03:14:8D:D5:11:01
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c4:31:e3:4e:e3:17:7f:55:db:aa:40:3a:49:a3:87:41:19:
b4:2e:03:f3:ad:01:9a:bd:db:58:3e:2b:f1:52:5e:f8:12:0c:
cf:57:7d:01:36:2a:cb:52:c6:d4:de:03:6f:b0:64:b7:d8:e2:
b1:fa:a8:51:6d:50:ce:5e:33:9e:8e:4d:48:2f:9b:d0:3b:33:
44:79:b9:7b:4b:d1:f7:6d:1c:22:bd:fc:f0:ae:b0:79:8b:8c:
9a:e9:41:3f:67:fd:78:b1:01:d7:61:80:f2:65:3f:b0:f7:f0:
86:93:92:d9:32:c9:79:3d:d8:57:19:fc:5b:04:f0:1f:ab:90:
ad:24:af:25:62:88:db:40:8d:c5:29:00:d9:06:92:d2:e4:df:
79:1d:f0:2a:c5:45:9d:a2:c2:28:15:5f:dd:76:fe:22:28:4e:
6a:af:81:ac:19:9a:7b:70:09:49:10:20:b5:c9:2d:28:71:c4:
fe:39:24:a3:b2:f1:26:61:78:17:9b:ab:86:7b:51:28:2f:d7:
e0:8a:ab:7d:a1:e8:eb:10:1b:dd:ce:e8:0f:8a:c0:06:95:95:
91:9c:88:f9:74:aa:bc:f4:d6:1a:06:d1:85:ef:6f:ee:ed:48:
26:8a:86:ae:94:a8:8d:4e:58:78:80:78:fc:85:42:65:67:1d:
70:54:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client