Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: Xh0XN9Oa7l14Xw3PlzJqx4jRCNy0CKWFQ0DxhzWYHqE=
Subject key identifier: C1:31:AC:69:B3:C4:2B:43:2B:A3:FA:F0:29:FC:7C:A0:40:A6:01:C6
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 019A0222B2D1B33674E76E2513CDB5511DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 15:00:19 +0000
Manifest this update: Mon 20 Oct 2025 15:00:19 +0000
Manifest next update: Tue 21 Oct 2025 15:00:19 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: 0hGu841HpONFVYES4dTucDhdzHHN7xcS8/aFqbJMCuc=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:b2:d1:b3:36:74:e7:6e:25:13:cd:b5:51:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Oct 20 15:00:19 2025 GMT
Not After : Oct 21 15:00:19 2025 GMT
Subject: CN=c131ac69b3c42b432ba3faf029fc7ca040a601c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:6e:06:91:63:ad:7f:6a:aa:05:da:f0:27:
17:af:60:ef:ab:9a:49:85:ab:7b:75:eb:0a:f6:ce:
4f:7c:a3:ba:2b:35:f6:50:12:b9:0a:c0:1b:2c:f9:
8b:f8:d3:4a:85:3a:4c:6e:fa:a0:46:0a:33:1f:95:
96:3c:22:59:65:9f:20:c0:8c:3f:81:36:c9:4a:71:
cc:cf:d1:b6:fe:ec:5b:17:98:29:da:d0:69:f4:d5:
93:53:db:c0:f5:a6:54:fa:fc:d7:e2:74:c9:8c:c4:
f8:4d:fa:78:40:d7:b1:6d:41:09:42:7f:18:45:06:
40:c6:f8:39:7c:83:73:4a:83:21:e9:e7:de:d7:2a:
5d:a8:33:be:45:34:d7:ed:f8:0f:81:7a:ca:4d:e0:
83:5e:3d:f8:98:6c:6a:5c:95:84:24:73:98:7d:d5:
7a:33:56:12:de:e1:f6:93:c8:17:8d:4b:7e:12:37:
28:42:c8:50:15:ea:65:26:70:be:45:e8:0a:be:fe:
55:5c:90:0c:46:eb:fa:90:37:b2:fa:b2:cb:0a:2e:
59:b7:4f:aa:76:92:74:9a:c4:d5:36:4d:c2:de:0b:
4e:01:ba:38:a0:65:84:33:ce:be:42:42:2f:5b:49:
8b:df:5e:22:9f:6b:37:1e:7c:9c:cf:a2:b6:f2:e2:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:AC:69:B3:C4:2B:43:2B:A3:FA:F0:29:FC:7C:A0:40:A6:01:C6
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:76:ec:83:82:9f:b6:57:9b:e9:c2:74:a8:5c:f9:d8:2e:
34:31:2c:96:7e:5e:79:da:71:e6:b4:bd:85:76:68:24:05:30:
3a:9e:3d:17:dc:91:0c:70:63:7c:61:a1:5b:2b:14:ed:70:86:
91:79:45:69:bb:dd:b2:57:11:18:35:a8:a7:a1:62:3c:cd:d1:
8d:df:b2:5b:38:67:94:c3:34:6e:8f:fb:d1:ad:db:c3:79:08:
36:4c:3c:ce:a8:51:ee:9e:df:f6:01:d6:ec:68:c0:98:c7:53:
9d:06:6d:dc:be:0b:07:9b:aa:9b:0d:3e:a5:da:e9:37:7f:46:
d3:b0:64:fb:29:ba:31:ab:aa:7d:54:96:79:55:da:89:54:59:
ce:2e:a7:8d:8c:8d:12:8b:f6:fc:d0:dd:bd:c3:b0:23:f9:aa:
4a:b4:02:0a:d2:1e:88:d0:fe:14:3b:8c:c7:ae:cc:e8:42:15:
01:d6:a8:2e:b1:b5:a4:ab:61:77:f0:d1:48:50:47:53:3c:e9:
79:d9:bc:f7:e5:ac:ac:f5:fb:22:35:4d:ce:61:4c:57:8d:f2:
a6:b1:b3:97:9f:bb:1c:b8:87:d9:f9:37:27:34:7b:3d:03:c8:
22:5f:8a:6d:6a:a9:af:72:28:6a:a9:18:ae:2c:9d:da:84:99:
c5:84:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:44 2025 by rpki-client