Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: xe8tgwwmcxs997Yb7fhQQHnjB94Ivnh0c7FhRwD/fHg=
Subject key identifier: 4F:BF:45:31:7C:0F:31:E6:28:8E:C5:4B:C2:5D:5F:1E:80:7E:5C:44
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0199FDD9B68E7EDD8BA21E2B86C7F5A1ED43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 036F
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: u349YByISxqt+snlFj3O/ti+REDYXlZRq+1/g3bqapQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b6:8e:7e:dd:8b:a2:1e:2b:86:c7:f5:a1:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=4fbf45317c0f31e6288ec54bc25d5f1e807e5c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:ef:eb:f4:58:90:ec:6b:14:c3:aa:18:66:
e6:10:87:c0:83:a8:f1:fb:54:c9:87:2f:18:fa:ac:
63:02:91:36:fa:11:5e:86:68:83:15:8a:9c:ba:29:
ab:89:81:5d:5d:cd:da:ea:f3:7d:d7:bd:c9:80:1e:
e9:68:d9:7d:d5:9a:5d:2a:05:3a:cb:60:57:00:8a:
80:f1:bb:8c:ca:7b:57:19:4c:33:65:8f:16:8c:14:
61:77:5c:a9:24:ec:54:06:d6:b9:31:e3:5b:af:95:
5c:80:c9:42:1d:56:1e:3a:72:37:70:b0:b4:5f:09:
b2:2e:1d:37:09:cf:5e:82:a9:df:42:62:58:73:4b:
71:04:df:b8:b9:30:28:36:22:4c:46:f3:45:42:b4:
11:c5:13:5a:e2:a3:79:c1:3a:91:7f:e3:de:ea:98:
ea:d1:f6:b8:6d:75:a8:56:c6:57:67:e2:55:85:ab:
68:67:67:af:4a:53:13:76:eb:88:66:e0:e7:b8:ac:
62:50:b3:db:76:67:b7:3a:33:18:ec:05:b8:81:39:
fb:40:69:81:34:24:40:a6:9c:e8:26:3f:d5:e2:f0:
75:ce:09:02:9a:c5:bf:b8:3f:b4:2c:c5:21:22:4d:
59:4e:33:35:40:25:3e:86:d3:32:6d:1b:28:c9:12:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:45:31:7C:0F:31:E6:28:8E:C5:4B:C2:5D:5F:1E:80:7E:5C:44
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c0:5e:d7:47:7c:a3:8d:fe:d3:46:1a:20:ae:e5:91:49:43:
39:64:7e:74:d0:e1:6d:0b:0f:0e:d9:66:f9:2b:5a:a3:08:3b:
8a:4b:5f:69:38:18:bd:8f:69:51:79:3f:94:7a:64:de:43:07:
87:fa:0e:dc:f4:30:e4:35:bf:e1:60:a5:f7:1b:7b:ee:69:bd:
a8:14:44:e1:2b:e7:26:40:79:25:a2:23:22:dd:a6:0e:bf:6c:
dd:0e:9e:9b:65:b9:08:79:68:57:41:53:84:5a:a0:83:38:5b:
ae:d5:bd:86:87:0d:3d:33:82:12:d3:0a:71:97:58:98:87:eb:
4b:1e:a9:c8:59:88:52:cd:f2:b8:a3:2b:20:f8:33:a7:cf:52:
7f:90:ba:64:84:69:62:22:93:23:5b:5f:8f:d1:2b:25:cd:23:
bd:cf:3c:70:4a:c4:9e:48:7a:96:45:3e:c5:0b:73:d5:98:72:
58:f4:65:93:49:4c:8f:0b:ad:50:11:b2:c0:9a:a7:bc:08:12:
e3:02:0b:a0:d4:51:21:cb:a0:f6:e7:f8:ee:ee:a8:67:b1:52:
39:2c:ef:e8:de:e1:37:b4:d8:f2:9e:fc:c2:fd:bb:d6:d4:76:
c2:1f:30:8a:05:ff:24:4e:f1:f3:0c:b5:29:7e:c6:a0:7b:bc:
7d:08:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:39 2025 by rpki-client