Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: dg4OxIQdtOKHbcHgNwoTEy0JZBMqJWeVBDa5VMLGuz8=
Subject key identifier: 78:DA:46:D9:7F:A4:F0:C4:9C:23:5B:1A:5A:14:7A:4E:5B:C8:62:D8
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0199FC8F6B22A312896508A6EB30941CDA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 1031
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: l7SVVIagxzXfPsDSrdAckyLWePI2NM2wRwLEzHUmHgU=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6b:22:a3:12:89:65:08:a6:eb:30:94:1c:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=78da46d97fa4f0c49c235b1a5a147a4e5bc862d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:70:02:f1:48:9b:2c:01:0c:fb:8a:72:63:
38:0b:dc:a5:7d:4e:20:3c:24:3b:2c:06:a4:aa:0a:
fa:4e:c1:66:5a:3e:c2:a4:62:06:90:13:21:9f:8e:
3b:7f:c5:df:a5:08:15:df:ae:1b:50:29:51:7d:b5:
18:44:aa:98:1c:8a:4a:40:47:49:78:67:ee:cb:b5:
49:5e:f3:a4:e6:04:94:b8:81:7e:9a:04:40:9a:9c:
38:4d:be:73:90:42:59:03:ce:25:04:b5:74:84:67:
0c:07:eb:9d:14:c3:69:a4:27:3c:26:e6:7c:9a:9f:
51:93:7d:5a:c3:74:33:8a:25:d0:02:7f:d7:a4:17:
4c:58:88:f0:0a:57:23:cd:9d:bd:ea:a7:a8:24:1b:
44:34:8a:bf:27:9b:b6:07:c9:da:ed:e3:c7:59:86:
f4:a1:ed:66:68:69:73:e9:7f:d2:26:f0:1a:7f:44:
73:d9:60:b9:b4:31:98:1b:77:27:6a:65:e3:63:c8:
aa:26:a1:33:6c:7e:13:8d:bb:ef:52:85:86:37:49:
92:a5:b2:76:29:a5:b0:6a:85:ac:5c:cc:38:d1:9c:
4f:a0:54:1b:28:9e:e1:e0:e9:d6:fe:87:ce:1a:06:
33:81:08:85:fe:23:60:4f:6a:c9:47:d6:65:d8:1e:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:46:D9:7F:A4:F0:C4:9C:23:5B:1A:5A:14:7A:4E:5B:C8:62:D8
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:1b:91:8e:94:c6:86:ef:7b:09:0f:ef:9c:fb:1c:c0:70:
8a:c7:45:cf:48:bc:eb:75:d5:de:91:4f:f0:be:35:96:85:0b:
d6:72:6c:f3:e2:d0:66:dd:90:e6:4d:ce:26:d9:0d:e2:4c:b7:
e0:e3:03:2a:2a:3b:f4:f8:d5:40:6c:62:a5:68:b9:f1:06:5c:
76:c0:2f:bc:e9:06:03:c5:b2:14:84:b6:dc:47:ad:a2:48:81:
39:71:e1:46:18:d7:e0:04:9f:ce:a6:38:84:d9:70:b3:96:25:
8a:05:e6:68:09:aa:5c:4d:d9:98:19:23:d3:d8:40:e9:8f:0f:
de:77:75:18:26:c7:72:f2:92:6a:76:5f:db:ff:c0:86:de:1a:
8e:e2:7e:e0:fa:af:c9:4e:9b:a7:04:b9:79:17:25:16:66:ac:
83:4f:00:5f:e8:27:51:01:f1:70:82:37:00:58:54:99:dc:b6:
09:67:d9:0a:fe:92:57:ef:28:e5:ef:9a:6a:03:0a:07:00:48:
0d:9f:5d:92:a4:bd:23:f6:c4:27:ef:06:b5:49:07:0a:23:b5:
9f:cc:08:c3:49:84:0e:b2:a9:df:f4:1d:4f:37:45:24:a3:c5:
b3:3e:ec:51:79:99:c7:71:79:ec:43:ef:9e:0d:a2:24:6e:3f:
dc:af:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:31 2025 by rpki-client