Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: JcvxKHR3IT6Kvb8ftxKIOAFbDt9/ncIWaXNHqlFJ+j4=
Subject key identifier: 6B:66:DC:D4:69:46:39:B0:45:AC:C1:66:A3:3B:65:B7:F8:5A:15:75
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 0199FDD9DBE50EE0B28FFC1283F41E83B206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 0991
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: gmw3rmxjJPskl2vc+kjoSX46JxHF35Z6LAGzZ3gKsQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:db:e5:0e:e0:b2:8f:fc:12:83:f4:1e:83:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=6b66dcd4694639b045acc166a33b65b7f85a1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:75:0a:0a:56:54:20:83:d3:4e:74:c8:50:
98:c7:f8:9b:df:ce:e7:a2:03:6e:ea:2c:58:89:57:
97:a1:bb:24:54:50:c1:f7:9f:eb:e4:6f:0b:81:b7:
89:8f:17:5d:5e:d0:9b:77:e5:dc:ac:6c:9a:b3:d9:
43:d3:c6:7c:89:e8:e5:0f:0c:d2:b4:4b:3c:10:79:
c3:08:5e:88:09:3f:66:32:ba:4e:85:bc:b4:34:31:
30:26:85:8e:7e:84:49:ef:ed:b2:05:6d:18:fd:68:
29:a5:9c:4e:c4:c4:29:a1:ea:bd:81:9f:11:01:8b:
e3:4d:c4:39:bb:71:f3:eb:1f:db:71:0e:96:39:fc:
fc:cf:85:25:e3:15:7a:83:79:43:65:43:a8:61:62:
d7:b0:84:8e:22:49:0b:ff:ea:bc:15:12:ba:00:3d:
18:28:ac:ae:35:a9:6b:72:74:18:a3:66:05:97:82:
10:5a:32:4f:a3:98:c6:e3:b0:9c:64:06:3a:1f:19:
7a:3f:11:bd:73:a4:75:c8:c6:d0:6f:01:72:f0:69:
cc:07:85:39:38:eb:79:8a:ea:13:48:1a:2e:ae:2d:
3c:b8:3a:ae:41:53:1d:db:be:b9:79:98:1b:92:28:
4f:3c:43:68:19:84:bf:67:5e:47:d8:64:2a:0c:c5:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:DC:D4:69:46:39:B0:45:AC:C1:66:A3:3B:65:B7:F8:5A:15:75
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:47:c3:14:e6:45:09:d4:bb:2c:d8:ff:57:bf:54:41:53:2c:
e6:88:2f:4b:69:7c:1b:ea:7e:60:b3:51:03:07:95:4b:6b:7e:
68:3e:98:10:f3:80:6b:6a:f5:c6:af:f1:1d:3e:0e:41:48:2c:
2d:65:f4:ea:3d:89:9c:db:6e:05:45:9d:b7:f9:0c:94:2a:e4:
0b:c1:70:36:4c:fb:ba:40:66:28:cd:68:f7:33:98:49:a6:4d:
00:c9:5b:64:a8:e6:d6:45:a2:9e:81:39:d8:d4:66:a7:b5:69:
0c:b7:d1:0a:de:44:e9:f5:ec:7b:41:38:68:f5:a8:40:75:cf:
08:46:4f:ad:f7:85:23:da:23:ac:51:19:33:f3:e9:88:80:a6:
8f:7e:c5:ad:f6:3e:b3:61:ca:50:16:2e:ea:73:2a:f3:dc:30:
b6:5b:16:c9:0d:49:96:6e:8e:2d:c6:aa:a2:c3:7e:50:88:7b:
9b:c5:48:59:0d:6e:75:c8:40:59:ba:be:14:46:9a:5e:41:ab:
78:54:bf:d8:b3:d6:fc:ad:fa:3c:c4:06:12:89:1e:de:62:e9:
d5:2d:e6:0b:90:d0:d2:9d:d1:76:bf:9c:6a:45:21:c0:b2:96:
d8:0b:4e:6e:8f:6d:bf:54:0f:cf:8f:f7:e3:39:31:c8:06:69:
c9:0e:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:44 2025 by rpki-client