Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json)
Hash identifier: Wm7fIfyrBCu9eXl74Q4i28DOr4+9vO9IxeVBAmLFZAU=
Subject key identifier: FA:65:10:BE:6B:A1:63:42:18:8D:7E:19:7E:4F:8C:F9:A7:9F:A9:B4
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 0199FFC844F463B1B32B760EC160B7D8D974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
Manifest number: 1421
Signing time: Mon 20 Oct 2025 04:02:18 +0000
Manifest this update: Mon 20 Oct 2025 04:02:18 +0000
Manifest next update: Tue 21 Oct 2025 04:02:18 +0000
Files and hashes: 1: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: /bfdCnu5AmdPPgJ6A8sQM3T7tOgxRs6mnfB68SzvAi8=)
2: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (hash: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:44:f4:63:b1:b3:2b:76:0e:c1:60:b7:d8:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Oct 20 04:02:18 2025 GMT
Not After : Oct 21 04:02:18 2025 GMT
Subject: CN=fa6510be6ba16342188d7e197e4f8cf9a79fa9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:69:aa:55:d3:4e:7f:e3:f6:42:de:0f:52:
29:8b:4a:5b:36:b7:09:19:27:f9:ab:e2:03:f9:b0:
4b:35:cf:a5:52:b5:28:0e:85:db:44:ae:b0:ec:5d:
e0:3c:79:9f:b6:c9:fe:da:0f:a9:c6:6e:7d:af:ac:
99:0c:db:dd:83:b7:c3:35:19:ce:77:00:06:18:20:
03:25:66:86:e9:2d:8c:c3:73:1d:46:11:e7:ea:eb:
85:2d:b4:b7:23:02:cf:96:e9:e4:ae:da:e5:21:3c:
7b:61:7e:fb:03:64:ed:c4:e0:7c:17:76:99:96:18:
b0:67:d1:72:47:31:2b:26:21:d5:35:66:ec:52:b3:
84:8c:87:43:50:67:4b:1b:23:76:18:d5:e3:9d:10:
04:85:15:fb:1f:d8:97:5c:53:6e:ef:8a:bc:9f:65:
0c:56:f0:31:97:cf:b5:fb:87:d1:a7:1c:05:c5:a2:
4a:b5:ba:89:fe:6e:00:55:7c:54:58:e0:e5:1b:56:
b0:ac:84:11:0a:fa:0c:27:c9:99:b2:12:31:3a:a5:
4d:17:21:da:e4:cb:6e:60:55:76:65:7d:83:58:6f:
61:49:5e:ff:5c:6a:11:40:c2:58:d7:d1:ba:2d:d6:
e3:dd:44:ed:73:ee:b7:88:9e:8e:ad:e0:95:17:ad:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:10:BE:6B:A1:63:42:18:8D:7E:19:7E:4F:8C:F9:A7:9F:A9:B4
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d5:b2:4c:62:98:7f:73:f1:2d:36:fe:a3:ea:2a:9d:86:be:
99:53:a0:8a:b8:93:0d:32:55:18:ce:91:66:a6:73:44:48:ec:
b2:97:26:f9:27:68:cd:54:13:49:c1:a4:7c:23:46:9c:b1:7d:
4e:6a:60:60:c9:8e:6c:34:c7:cd:6c:c0:b6:36:c0:03:34:89:
1a:02:56:91:80:6c:a0:2e:76:d6:46:2e:16:86:c1:ad:9c:16:
32:a3:51:c7:fa:15:81:8d:cc:d9:8b:6b:5e:99:1f:c7:d1:86:
67:f7:cc:1e:ae:59:44:17:1f:be:ba:46:c4:8f:ad:f7:73:c5:
52:ad:70:a2:a7:8d:ef:14:18:36:f6:6d:f1:fd:f6:f5:5c:df:
0c:e6:93:51:66:77:b6:8b:18:73:d4:e3:fc:73:e9:12:25:4c:
a3:3a:06:fa:b4:ef:d0:3e:f2:6d:fa:c2:67:67:e1:9a:b3:5b:
29:5f:ee:5c:48:22:28:a8:68:b4:6e:fc:b4:35:29:fb:09:9f:
97:9a:3f:0d:b8:93:70:31:24:da:ee:88:f7:b6:d3:9c:0e:28:
9c:4c:90:73:1f:40:ee:d9:04:9a:6b:16:63:03:fa:6a:ea:10:
06:46:84:5d:e7:f9:7b:13:b9:ff:9c:13:c0:3c:33:af:29:36:
cb:17:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:15 2025 by rpki-client