Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: PEPqd1z/pRQXtuTNwCjWehR/tFPLZuk5+0M/JF2RiXs=
Subject key identifier: 74:6E:71:D8:03:BC:6D:FF:DB:68:3F:D9:E7:E7:7C:A0:1D:85:4E:EC
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0199FB7CDBE04FD6443474B4BA0F0ECD295A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 03FB
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: j35ilFx6VfGjCdqEh/NycWz5LAretS8HAdjn4+tfQ3A=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:db:e0:4f:d6:44:34:74:b4:ba:0f:0e:cd:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=746e71d803bc6dffdb683fd9e7e77ca01d854eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:17:69:fa:df:0c:db:57:ae:b7:5e:f9:73:af:
6b:9e:f4:1e:85:0e:4e:12:08:83:da:4c:32:30:ec:
aa:df:86:4d:22:93:ed:b9:0c:90:be:6e:fc:15:f0:
c2:1a:56:1f:94:d8:a7:b8:bb:07:81:05:30:74:0d:
ea:f5:87:5b:8a:27:71:b5:6b:95:ee:23:c2:3c:32:
57:3e:97:49:e3:25:00:50:4e:5c:0c:3d:f6:b3:45:
a7:44:5a:b8:7d:2e:ac:3a:b5:33:5d:5c:cc:d0:ea:
51:8e:1c:7a:39:80:51:3c:d7:cb:5a:76:07:88:e9:
5c:32:08:02:4c:73:76:d6:9a:59:31:7e:ee:d9:45:
88:d8:71:ac:71:1c:b2:0b:f9:8b:14:50:1f:24:f9:
e8:d2:43:cb:8f:93:61:04:9c:24:cf:5e:76:25:f4:
e0:7a:55:61:2d:22:65:3f:f8:ff:ac:28:b0:00:cc:
e1:08:62:c4:f1:7f:fc:d1:e8:63:5d:d9:21:a8:5b:
86:59:2c:c4:bb:f4:22:7f:77:74:ae:5e:9e:eb:53:
da:1b:28:44:dc:8a:c2:58:64:40:e9:8c:8d:dc:ad:
d5:31:26:9c:f0:f4:15:51:52:f6:02:fe:5b:d5:a2:
60:5c:2c:05:2c:5d:e4:ff:76:7d:15:47:1f:bf:75:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:71:D8:03:BC:6D:FF:DB:68:3F:D9:E7:E7:7C:A0:1D:85:4E:EC
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:62:0b:c8:ce:39:87:d7:d5:a6:0d:12:3b:d5:8f:cb:c9:
55:43:8c:d0:fc:e5:f5:b0:a2:6a:52:fa:7d:ef:1a:a7:4e:67:
eb:87:9c:7b:15:5c:77:46:aa:e5:07:30:76:c5:22:87:28:7e:
42:96:b4:ba:d2:3a:c1:c7:20:90:fb:fe:c4:25:c6:c4:df:b9:
7c:3d:1f:87:27:d7:c9:69:68:19:22:fa:b2:28:61:93:25:ac:
44:75:a9:6c:60:82:be:8d:81:c1:b5:4a:a8:35:92:20:fe:c9:
26:b8:a1:8c:8d:f6:8f:70:3a:4c:7c:ca:04:c6:5d:18:1b:10:
7e:aa:f2:ed:ad:21:9d:13:8f:bc:74:18:88:1c:21:f4:2d:95:
50:15:92:be:98:ec:f7:30:8c:22:46:52:36:61:d4:7a:f2:83:
5f:01:c7:d0:00:e6:6a:84:9b:68:7c:6a:8c:e5:2e:ef:c4:19:
d8:42:2f:e6:06:17:08:51:23:14:9b:b6:88:64:42:7c:d8:93:
bd:4d:53:76:b4:18:85:02:47:0a:62:aa:24:e5:c5:87:ae:77:
f1:1c:c3:63:e2:c6:e3:ac:06:5c:ec:12:46:7b:e2:e5:05:6a:
b7:ef:0d:e4:39:92:67:29:04:25:07:b2:e5:3e:c8:24:90:04:
2f:41:39:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNvgT9ZENHS0ug8OzSlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTFkYWVjZTFjNmU4Nzg1NDZkYmQxMzMzZGEwOWZlYjhi
ZmYwMTgwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg3NDZlNzFkODAzYmM2ZGZmZGI2ODNmZDllN2U3N2NhMDFkODU0ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xdp+t8M21eut175c69rnvQehQ5O
EgiD2kwyMOyq34ZNIpPtuQyQvm78FfDCGlYflNinuLsHgQUwdA3q9YdbiidxtWuV
7iPCPDJXPpdJ4yUAUE5cDD32s0WnRFq4fS6sOrUzXVzM0OpRjhx6OYBRPNfLWnYH
iOlcMggCTHN21ppZMX7u2UWI2HGscRyyC/mLFFAfJPno0kPLj5NhBJwkz152JfTg
elVhLSJlP/j/rCiwAMzhCGLE8X/80ehjXdkhqFuGWSzEu/Qif3d0rl6e61PaGyhE
3IrCWGRA6YyN3K3VMSac8PQVUVL2Av5b1aJgXCwFLF3k/3Z9FUcfv3X4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRucdgDvG3/22g/2efnfKAdhU7sMB8GA1UdIwQY
MBaAFDah2uzhxuh4VG29EzPaCf64v/AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgt
YjMwYjBlNTI2NWE4LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgtYjMwYjBlNTI2NWE4
LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFRiC8jO
OYfX1aYNEjvVj8vJVUOM0Pzl9bCialL6fe8ap05n64ecexVcd0aq5QcwdsUihyh+
Qpa0utI6wccgkPv+xCXGxN+5fD0fhyfXyWloGSL6sihhkyWsRHWpbGCCvo2BwbVK
qDWSIP7JJrihjI32j3A6THzKBMZdGBsQfqry7a0hnROPvHQYiBwh9C2VUBWSvpjs
9zCMIkZSNmHUevKDXwHH0ADmaoSbaHxqjOUu78QZ2EIv5gYXCFEjFJu2iGRCfNiT
vU1TdrQYhQJHCmKqJOXFh6538RzDY+LG46wGXOwSRnvi5QVqt+8N5DmSZykEJQey
5T7IJJAEL0E57g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:28 2025 by rpki-client