Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: jBHdaQf4xVZG7Yf1O4CTwNNDzUgeWuBQ0G6gxpCBhBs=
Subject key identifier: 05:5E:EB:04:D8:BC:84:35:EF:F9:14:15:F9:7C:59:02:9D:46:AE:93
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 0199FF22E5E6982F71BBEADDD28B0C7FE1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0FA7
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 91POWlpcXfA4lF9mJW/9f3auB1lefTvmKR3/+45q+fo=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e5:e6:98:2f:71:bb:ea:dd:d2:8b:0c:7f:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=055eeb04d8bc8435eff91415f97c59029d46ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:59:5d:ee:70:30:9f:35:42:0a:84:8b:61:
dd:aa:9f:9b:f2:9e:15:09:6d:45:51:fd:a9:52:8b:
f2:fb:2e:83:50:17:d8:f4:3c:db:27:09:09:e4:70:
10:2d:41:db:50:b2:92:4a:ef:08:7f:06:c2:9b:f7:
f6:31:ff:f8:fe:32:28:33:bc:2b:5d:75:91:ee:ae:
89:f4:92:54:07:c2:d8:7c:78:2c:77:ec:e4:cb:96:
01:22:94:cf:aa:6a:e7:4f:eb:76:65:e8:d1:3c:5d:
d3:92:7c:d2:a7:0d:1a:50:8c:9a:5e:db:8e:15:93:
b3:e3:15:80:f1:07:42:0e:cc:ad:4f:36:ea:ab:50:
47:a0:83:bb:27:d1:8e:22:45:fd:fc:4b:ed:25:ed:
c8:a8:08:a5:be:0e:c9:71:a1:65:ec:26:aa:4d:ed:
51:ea:18:80:80:4e:6a:41:7c:a2:a9:97:d5:f3:74:
12:11:4e:dd:e1:d3:fd:9e:de:1d:8c:b1:b7:33:fc:
7a:e4:12:51:09:f2:b5:54:3d:d4:b3:94:33:54:64:
cc:5f:13:c4:53:86:48:9c:5a:bd:42:33:99:0d:17:
75:71:b0:84:7c:9b:4f:2c:98:65:db:80:2d:56:7f:
04:c4:ca:6e:27:00:eb:f0:66:d6:de:83:5b:b5:f9:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5E:EB:04:D8:BC:84:35:EF:F9:14:15:F9:7C:59:02:9D:46:AE:93
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:4b:0f:5e:ae:58:39:15:5d:ee:24:ed:4d:10:66:ba:91:
93:12:59:d9:ec:9d:db:1c:d7:6f:9b:05:15:7c:8b:5f:99:86:
4e:8c:77:e7:c6:18:4d:ad:ed:86:31:e0:19:e5:44:ff:e2:15:
b6:99:b9:39:cf:bc:75:ca:48:81:a8:7b:5a:c8:98:ce:7c:98:
ad:e1:da:9b:23:c1:49:00:66:8d:71:36:57:37:e9:be:65:58:
87:ce:f0:c3:ca:2a:c5:bd:ed:a7:d5:ff:e8:54:20:55:0d:41:
a0:cf:5d:08:42:bc:45:6d:96:34:82:2d:ea:63:fa:17:4a:98:
00:40:83:a2:10:c2:c0:23:ec:3a:22:33:ad:e0:07:16:14:95:
2a:69:27:f2:9d:7d:3a:92:09:8d:6c:a1:c5:e3:af:dd:ae:75:
ca:e8:29:11:db:e6:a3:0d:63:90:75:79:d4:e4:22:57:1b:52:
b1:f8:e3:3a:4b:51:79:6e:f7:59:50:2b:cd:e4:29:12:8c:76:
a9:96:de:48:c7:54:cd:81:6c:ca:f5:a0:fc:f7:a0:13:9b:f5:
32:ad:cc:d7:0b:e7:18:7c:72:41:66:1a:10:d7:4b:c8:c8:21:
fe:89:cf:e3:3d:24:bd:9c:66:e1:59:6b:d8:3b:78:98:6f:cc:
e2:e0:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:25 2025 by rpki-client