Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: /l9VORfUJ0TS7u/HMBOJU9F2mGRdt47FBDLqTJpWmIQ=
Subject key identifier: 58:27:9E:8F:22:8C:42:8A:3B:5B:47:61:8B:F2:4C:5E:CB:08:09:FE
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 0199FDD8F393E956049CC84E8344F484A1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0FE7
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: 1nqpg92t+VFPtyrrfWH+0NNjdXwQB65aPUe4qagriL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f3:93:e9:56:04:9c:c8:4e:83:44:f4:84:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=58279e8f228c428a3b5b47618bf24c5ecb0809fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:c8:e8:4a:94:61:ec:bb:37:ad:c9:a8:1f:
bd:31:02:88:b8:77:f8:ca:89:a9:91:b4:41:8d:70:
c9:24:0c:99:13:c3:ec:e7:37:1a:bf:20:ea:a7:e7:
9a:92:ab:9f:45:0a:08:08:d1:5d:8a:1c:3c:b3:31:
96:79:ca:e2:2d:0f:2f:f9:4d:42:00:7c:e8:fc:19:
df:df:c2:9f:c6:a9:ea:97:96:19:19:e1:07:fc:ff:
d3:ee:52:ea:eb:dc:fa:e0:b5:de:40:21:67:91:e8:
e1:9b:4d:a8:17:c5:92:a6:63:83:2a:a6:71:c0:d6:
fa:e5:97:8e:13:44:40:be:4c:d8:c0:6a:14:52:d4:
a8:81:03:e5:57:1b:86:b5:77:f0:88:5a:a6:52:57:
e7:01:dd:92:1b:36:0b:1d:0c:0b:92:37:e9:c6:0e:
f8:4e:89:f3:f8:2d:ab:75:a6:02:7e:c5:e8:5c:5c:
4d:2b:ee:89:6f:2e:9e:80:8e:14:af:d8:a2:d8:35:
20:4f:ad:e0:b7:91:df:f9:39:d7:2b:8d:c1:67:a4:
f0:de:12:79:94:8b:a1:bd:be:99:4b:36:05:ea:30:
dd:ce:ae:b0:a1:95:5a:83:5d:3a:64:2e:3e:87:48:
bf:51:e4:82:af:cd:55:a6:c3:c6:26:98:76:48:13:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:9E:8F:22:8C:42:8A:3B:5B:47:61:8B:F2:4C:5E:CB:08:09:FE
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:62:3b:7f:27:98:99:ee:4d:bf:35:64:c3:e4:71:1e:c7:
6a:0d:0e:d5:44:64:bf:f8:ad:49:be:fc:23:bc:54:5a:0d:f0:
5e:d6:71:26:12:25:48:de:71:36:0f:ab:cb:56:24:6e:6f:57:
0f:9c:1f:a3:9c:22:d7:65:a1:28:68:62:a3:67:95:fe:b1:f5:
38:db:20:6d:57:48:e8:d8:3a:70:72:e3:02:3f:eb:a4:5f:aa:
91:14:bf:c6:22:67:4c:cc:69:b0:ff:3c:d4:5c:9a:8f:7b:0e:
90:13:ee:ec:c1:70:dc:f6:13:45:c9:d3:2b:70:d6:33:02:6e:
cd:db:c6:90:50:89:29:b6:80:42:ea:52:2f:25:46:7a:b7:34:
c7:c1:57:8e:39:65:82:fc:39:a0:ee:2f:1d:fc:7a:73:b3:46:
6d:fa:b2:39:f8:55:46:93:ee:0e:2d:90:4c:b3:28:ae:50:7f:
e5:32:19:93:4c:27:7e:da:31:ec:56:e4:d1:69:27:43:f3:7a:
a0:0f:11:e9:d4:7b:45:17:1b:06:8b:fe:5f:66:3b:93:64:2d:
aa:e5:6a:0e:cd:76:8d:8d:75:a6:cd:a2:ec:7b:e8:f9:78:87:
cf:6b:7e:9d:c2:1e:2f:96:ee:09:cf:57:8e:65:be:90:47:e9:
ac:d0:f8:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92POT6VYEnMhOg0T0hKHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTc4Mjc3NDgwY2YyZGFkNmM5ZWIwYTUyYmU0OGRmN2Fi
NjY3NWEwHhcNMjUxMDE5MTkwMTE3WhcNMjUxMDIwMTkwMTE3WjAzMTEwLwYDVQQD
Eyg1ODI3OWU4ZjIyOGM0MjhhM2I1YjQ3NjE4YmYyNGM1ZWNiMDgwOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdXI6EqUYey7N63JqB+9MQKIuHf4
yompkbRBjXDJJAyZE8Ps5zcavyDqp+eakqufRQoICNFdihw8szGWecriLQ8v+U1C
AHzo/Bnf38Kfxqnql5YZGeEH/P/T7lLq69z64LXeQCFnkejhm02oF8WSpmODKqZx
wNb65ZeOE0RAvkzYwGoUUtSogQPlVxuGtXfwiFqmUlfnAd2SGzYLHQwLkjfpxg74
Tonz+C2rdaYCfsXoXFxNK+6Jby6egI4Ur9ii2DUgT63gt5Hf+TnXK43BZ6Tw3hJ5
lIuhvb6ZSzYF6jDdzq6woZVag106ZC4+h0i/UeSCr81VpsPGJph2SBMr7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgnno8ijEKKO1tHYYvyTF7LCAn+MB8GA1UdIwQY
MBaAFJ6ngndIDPLa1snrClK+SN96tmdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmIt
MWE5MmZiMGRjMWM3LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmItMWE5MmZiMGRjMWM3
LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjNiO38n
mJnuTb81ZMPkcR7Hag0O1URkv/itSb78I7xUWg3wXtZxJhIlSN5xNg+ry1Ykbm9X
D5wfo5wi12WhKGhio2eV/rH1ONsgbVdI6Ng6cHLjAj/rpF+qkRS/xiJnTMxpsP88
1Fyaj3sOkBPu7MFw3PYTRcnTK3DWMwJuzdvGkFCJKbaAQupSLyVGerc0x8FXjjll
gvw5oO4vHfx6c7NGbfqyOfhVRpPuDi2QTLMorlB/5TIZk0wnftox7Fbk0WknQ/N6
oA8R6dR7RRcbBov+X2Y7k2QtquVqDs12jY11ps2i7Hvo+XiHz2t+ncIeL5buCc9X
jmW+kEfprND4EA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:26 2025 by rpki-client