Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
File: NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json)
Hash identifier: U9BIUtP2tlydyCi/x9YqsQ5l4h1NSeexTFbAsfVXFIM=
Subject key identifier: 6C:62:3F:46:7B:11:32:FE:C7:09:FF:B9:6D:C2:4E:B0:3C:61:29:FE
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial: 0199FC8F3EDC05E1EEA71DCBCB756A647B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
Manifest number: 091E
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: I4q92VajZXPlw9QYtmNI4uQ6GtM.roa (hash: 1MIUh7t1a8Oi5v6mo6yeYyqi8+Xbxa0dw1T/gUvyI5M=)
2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: eXHDoZFZVhr+TV4bBIaBrBCUzJ6txu7Z8OpgeEi3Gyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3e:dc:05:e1:ee:a7:1d:cb:cb:75:6a:64:7b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=6c623f467b1132fec709ffb96dc24eb03c6129fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:c9:f3:d7:4c:a6:b8:3f:5d:3c:08:fe:e6:
2b:ac:b3:9e:46:aa:ff:9f:e5:40:f0:2a:4d:89:66:
b5:c0:a2:97:99:83:23:a7:6d:52:44:cd:bf:e2:6e:
5a:f7:d2:34:da:43:0a:4b:ac:b6:bb:cb:5e:1d:bd:
77:7d:05:78:23:02:4b:96:c0:f1:d0:9e:d2:58:0b:
96:8b:c2:27:8f:46:95:15:89:77:76:f6:27:15:78:
c1:b2:8d:b2:db:82:1b:52:0e:66:94:31:83:f7:73:
ed:21:55:4f:e6:4b:80:bf:6e:e6:26:78:1a:ab:4d:
d0:be:60:ad:d8:f0:43:96:55:16:bb:9f:ba:33:7c:
5d:2c:e3:4d:ad:8e:b0:16:39:7f:de:1d:a9:df:74:
cb:57:28:50:6d:e8:e0:e0:1f:c4:1b:9d:b1:00:c2:
55:5c:f5:e2:09:ab:af:83:07:0e:0a:6a:a5:3e:2c:
b8:39:a3:8e:39:55:53:23:4c:b9:49:6d:4b:95:a7:
3f:cb:40:7b:b4:41:a8:e0:73:68:c3:24:fc:86:70:
f7:1d:f4:17:4b:be:7d:ae:c8:07:5d:1a:cb:fa:03:
84:28:88:33:35:04:e0:38:09:fd:86:ec:c8:e0:e6:
35:4d:df:77:29:b6:eb:6b:91:d1:c6:62:61:38:85:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:3F:46:7B:11:32:FE:C7:09:FF:B9:6D:C2:4E:B0:3C:61:29:FE
X509v3 Authority Key Identifier:
keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:17:4b:4c:df:d2:df:ac:5a:60:61:1f:b4:fa:06:f0:d4:
6f:e3:45:51:dd:0b:bd:8d:95:b2:79:3d:86:57:34:4a:d3:8f:
bb:bb:32:c0:36:81:89:0c:2c:66:ca:8e:af:f3:b9:0c:83:6d:
d0:6d:64:fb:bf:dd:38:47:ab:93:42:2a:6b:dc:0f:f6:d3:77:
6e:22:94:28:0e:c6:81:76:05:07:bc:ef:12:0b:cd:92:a0:86:
af:bb:3e:02:4c:5c:26:e7:31:ae:28:5d:3e:15:60:ac:30:ad:
05:f7:65:4a:9f:19:82:76:e2:fd:9f:56:56:cf:2a:82:be:f6:
db:cd:14:11:34:27:15:f4:73:42:33:6b:2a:76:c5:15:39:07:
40:bc:70:2b:42:51:be:f5:27:65:39:02:10:de:42:e3:1b:99:
b2:3c:ce:bf:99:b1:af:b5:af:42:07:a9:15:40:ec:5d:4b:cf:
42:88:2c:1e:29:af:00:76:6d:33:22:a4:d6:fc:6f:51:83:82:
90:fa:26:8b:d8:5d:88:4d:b1:9f:62:44:51:46:1b:37:2c:f5:
2f:05:aa:35:c5:38:29:8b:79:44:94:5f:f1:ef:d1:0e:80:4d:
c1:97:89:5d:86:32:64:a9:a9:43:02:d8:32:1a:c6:96:2f:75:
cb:57:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:20 2025 by rpki-client