Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: QfbtioqRN2QCMLHPL7OUJ5YY/yUPTtZnBBV2zDU6RM0=
Subject key identifier: C9:AD:F1:8D:94:DC:0E:48:8D:44:D1:D0:A1:43:B7:FC:46:E5:D7:5E
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 0197B6A136C2A65D312113C7B679BE8DFA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0F2B
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: 1steZz3zFOqowZn5TgBB/alGQHsk85HR31pSmcFpXLY=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:36:c2:a6:5d:31:21:13:c7:b6:79:be:8d:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=c9adf18d94dc0e488d44d1d0a143b7fc46e5d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:b2:8d:df:cc:37:bc:b9:71:4b:35:66:db:
b4:dc:ff:6d:dd:d9:92:11:35:10:da:0f:95:8d:af:
96:14:8f:0b:3f:e1:d3:c0:96:5e:da:2b:a7:63:6f:
b0:95:de:87:44:4f:ad:64:ae:2f:e0:71:01:22:c4:
9f:88:e7:bb:9b:4f:42:ad:6b:a5:20:6d:b1:17:b8:
e5:6e:fb:8c:4c:90:ee:81:8d:ce:a1:d0:c5:46:02:
58:84:94:48:cb:dc:ae:98:02:17:59:5f:18:53:3d:
50:9e:3d:2c:47:15:e0:c3:99:76:c4:ef:ef:d0:e8:
ac:7d:05:c7:3a:b7:ad:de:dd:d6:bc:3b:c4:04:58:
0f:5e:3e:be:bc:14:24:7e:17:c5:fe:74:fe:f2:c3:
62:fa:a1:34:d6:29:40:80:b8:83:95:75:91:d8:ad:
bc:c3:87:9d:22:ec:bf:98:1a:2e:90:b7:08:6d:2f:
f9:56:13:03:aa:7a:d9:cc:5e:87:09:4a:d2:ea:62:
64:41:1b:30:c3:a6:f5:1d:f0:6a:e3:ba:74:a6:2d:
f3:6a:3b:c5:a4:9f:8b:1c:6a:8e:65:09:34:23:d0:
0d:29:8e:3e:f1:1a:cf:b4:fb:fe:76:a6:2b:0b:64:
c7:fd:a5:b6:95:02:03:25:cc:b0:7c:e5:18:63:d1:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AD:F1:8D:94:DC:0E:48:8D:44:D1:D0:A1:43:B7:FC:46:E5:D7:5E
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:ad:37:89:7a:9c:1a:10:32:6f:ef:f7:9a:70:6f:3e:20:
55:c3:12:1c:33:7c:ff:35:95:03:bb:70:d3:f9:d3:29:62:6b:
1d:1f:9e:9a:48:0c:bd:c7:cc:6d:ad:0c:05:12:a7:b8:9a:fa:
37:a3:12:6f:5d:1c:ab:55:90:c7:d0:f4:96:2e:3c:59:ee:fc:
43:8f:40:96:fb:ca:b5:6b:5b:72:cc:ec:03:40:02:3b:4d:63:
74:78:5b:29:a0:a7:cb:56:3e:1d:88:b3:17:22:9d:d6:11:65:
2d:89:85:92:70:aa:d2:fb:ed:e9:da:de:f1:09:5e:12:6f:11:
9e:5e:e9:8b:85:cb:e6:e0:14:56:7d:f9:54:db:b7:b9:a6:36:
37:b4:5c:76:8f:ce:bb:31:92:e2:3a:40:bb:ac:31:a4:46:c1:
d5:a2:44:d0:77:e0:fc:97:ac:af:00:cf:93:4c:d9:1d:7a:72:
52:57:f0:d0:05:73:04:74:8a:eb:bb:5b:3b:01:1b:56:4f:09:
4a:6b:b4:e2:96:a8:22:8d:60:5f:b1:87:65:01:86:a4:07:8c:
a6:c3:40:7d:e2:d8:85:b5:39:bc:5a:71:d0:4c:eb:1d:91:e5:
c3:8a:b1:df:67:70:1a:99:92:66:44:65:46:bb:a8:0c:f7:65:
67:9f:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client