Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: 18XtH8hjHvDCBQy02llwvs6oBInYrfE5+250JWUnxtg=
Subject key identifier: BB:E0:9D:FD:84:4B:C0:C2:11:50:C2:D1:6D:AC:41:77:70:03:D6:FE
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 0198D6612DFBC8D603AF91D88D8064AB7306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0FC0
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: ONjU1xddvvkpH9Co683sJhvVMNVvA0+yTpIsG9S02MQ=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2d:fb:c8:d6:03:af:91:d8:8d:80:64:ab:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=bbe09dfd844bc0c21150c2d16dac41777003d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:2c:61:80:c6:04:5f:f3:5c:fb:96:9c:4b:
c0:41:a0:b8:31:00:6b:16:46:73:f4:48:b5:2f:97:
2b:c6:08:53:3b:88:b7:a1:31:6c:f4:14:05:ac:e3:
53:43:2f:75:61:f1:a2:e3:34:99:08:f3:8a:b7:c0:
34:cb:ad:40:b2:83:c2:02:ac:7e:6e:e4:46:01:df:
cf:f3:01:8c:2b:84:c4:48:e0:5d:90:67:08:af:78:
58:b0:e9:bc:92:ca:25:39:c6:c4:9a:8e:fd:5d:c3:
cd:fd:fa:29:03:ba:33:fa:fb:d6:81:4d:3d:a5:d9:
29:9b:94:65:ee:73:17:04:2a:3b:dd:b6:3f:8e:6f:
4c:ac:f9:dc:f3:0f:94:86:88:9c:60:dc:b6:a1:47:
98:c0:16:25:8b:da:d6:6e:ee:9e:5c:5e:b6:27:5b:
47:70:21:50:4c:14:b6:a1:1b:74:4f:a4:30:35:3c:
87:88:e3:28:6c:94:76:73:c3:63:01:8e:37:17:c8:
21:aa:e0:3c:68:84:db:c6:cc:9a:5f:08:91:45:35:
1a:a4:05:47:5f:eb:01:c8:f1:82:53:6d:2c:a1:56:
4f:1c:2d:4f:90:53:31:8a:bc:93:9d:3b:e7:67:26:
69:66:56:7a:5b:14:ec:d7:37:54:6a:ed:a1:06:e3:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:9D:FD:84:4B:C0:C2:11:50:C2:D1:6D:AC:41:77:70:03:D6:FE
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:d7:15:db:c6:58:5f:73:af:67:be:ef:2d:3a:3e:b9:16:
ed:3a:f2:4c:a0:07:b3:a0:48:42:c8:f2:cb:59:a5:d2:3d:ed:
ca:4d:a0:e2:d0:b5:31:b2:6d:d6:19:ab:d8:10:c3:0b:0a:25:
11:c1:e4:83:64:a0:40:ec:7b:f9:cb:06:e7:49:18:c4:a5:34:
52:12:08:f9:92:92:55:8c:80:d1:16:a4:3f:1c:c6:db:63:48:
a0:2f:2f:7d:fc:e3:b8:3a:8d:d5:15:1a:e1:bc:64:88:20:86:
f7:ed:24:e6:e7:f5:6b:ec:8c:13:8c:d0:45:54:b9:fb:82:87:
a1:ba:f9:f2:bb:4c:c1:0e:ef:de:ec:51:99:36:79:e5:ac:f7:
f3:0a:ac:3c:b7:bb:fa:ab:f7:26:9b:08:20:a9:3d:a8:16:f1:
95:38:7a:cd:db:5d:4c:14:c3:4b:5b:ef:a8:50:51:47:b0:cd:
ad:f9:78:db:3e:f8:e0:03:e8:b0:78:b4:f8:a3:06:d9:26:6c:
16:67:b1:c3:2c:15:59:d9:b9:38:fc:7a:5f:b9:4c:89:6b:47:
12:c6:94:22:28:9e:54:11:d5:ee:14:78:9a:80:56:67:24:a9:
b3:0d:8d:c6:cb:80:56:de:70:e7:ce:6e:01:90:cf:3c:d0:15:
58:12:b4:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS37yNYDr5HYjYBkq3MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjUwODIzMTAwMjI5WhcNMjUwODI0MTAwMjI5WjAzMTEwLwYDVQQD
EyhiYmUwOWRmZDg0NGJjMGMyMTE1MGMyZDE2ZGFjNDE3NzcwMDNkNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljQsYYDGBF/zXPuWnEvAQaC4MQBr
FkZz9Ei1L5crxghTO4i3oTFs9BQFrONTQy91YfGi4zSZCPOKt8A0y61AsoPCAqx+
buRGAd/P8wGMK4TESOBdkGcIr3hYsOm8ksolOcbEmo79XcPN/fopA7oz+vvWgU09
pdkpm5Rl7nMXBCo73bY/jm9MrPnc8w+UhoicYNy2oUeYwBYli9rWbu6eXF62J1tH
cCFQTBS2oRt0T6QwNTyHiOMobJR2c8NjAY43F8ghquA8aITbxsyaXwiRRTUapAVH
X+sByPGCU20soVZPHC1PkFMxiryTnTvnZyZpZlZ6WxTs1zdUau2hBuM2ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvgnf2ES8DCEVDC0W2sQXdwA9b+MB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1HXFdvG
WF9zr2e+7y06PrkW7TryTKAHs6BIQsjyy1ml0j3tyk2g4tC1MbJt1hmr2BDDCwol
EcHkg2SgQOx7+csG50kYxKU0UhII+ZKSVYyA0RakPxzG22NIoC8vffzjuDqN1RUa
4bxkiCCG9+0k5uf1a+yME4zQRVS5+4KHobr58rtMwQ7v3uxRmTZ55az38wqsPLe7
+qv3JpsIIKk9qBbxlTh6zdtdTBTDS1vvqFBRR7DNrfl42z744APosHi0+KMG2SZs
FmexwywVWdm5OPx6X7lMiWtHEsaUIiieVBHV7hR4moBWZySpsw2NxsuAVt5w585u
AZDPPNAVWBK0GA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:11 2025 by rpki-client