
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: R1QNObnjZSR6xCSSXMANfc1PosVVFORb6UDlqHXiUsQ=
Subject key identifier: C6:5A:3A:F7:EE:48:F4:61:35:96:E9:A5:74:2B:61:3F:74:EF:40:5A
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 0199FC58A31D07799CBF4E0C8FA792D9DAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: KpZnuuiI+9G32zBB4AiBZ54eJIGWVTNrlr5MbasDHiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:1d:07:79:9c:bf:4e:0c:8f:a7:92:d9:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=c65a3af7ee48f4613596e9a5742b613f74ef405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:cf:11:c8:f6:fd:c5:78:1b:ef:47:98:a6:
74:cc:bc:42:5d:59:b2:21:17:fd:20:f6:fb:7d:b4:
6c:73:2b:77:02:60:cb:fe:94:45:72:67:02:08:65:
a5:d7:87:37:6c:44:59:2b:44:1f:fa:74:b9:c7:8d:
36:14:18:bb:0c:cd:a8:cc:4d:c7:14:53:4b:e3:8d:
ab:cb:a6:0c:1d:8a:ee:fb:ad:38:e8:f1:4e:6f:7d:
0e:34:88:d3:34:78:91:e6:68:93:2f:ce:7d:50:80:
15:70:c1:92:0c:76:69:6b:94:32:7c:ce:ab:a9:76:
c1:f2:5c:c3:b7:b3:e1:f6:ad:8c:50:06:fd:8f:81:
15:7b:80:80:de:cc:f6:b1:93:f3:df:b5:a8:f4:7c:
54:c2:27:40:7e:ee:90:00:80:58:22:a3:25:ee:51:
9d:15:62:64:9b:0c:85:e9:6c:be:38:a7:e2:b2:e0:
09:5a:e4:78:6e:df:e2:36:09:88:60:4e:c1:34:98:
90:3d:2f:30:46:da:7d:90:4d:97:b4:5c:9c:3c:cb:
21:d1:1f:64:8d:14:5d:76:f9:97:b5:55:1c:26:45:
10:5f:35:9b:96:c4:89:ed:89:a7:71:77:f0:4c:b1:
bb:ae:36:0f:ba:64:e4:e5:06:20:d5:15:0b:8a:d9:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:3A:F7:EE:48:F4:61:35:96:E9:A5:74:2B:61:3F:74:EF:40:5A
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d0:40:29:bf:e9:5f:0f:d2:88:5c:c2:90:2e:0f:4d:30:63:
15:c4:05:dc:99:e0:4f:46:fd:af:1c:33:76:79:42:3c:ea:e4:
a9:8a:48:e2:15:02:cb:79:47:19:77:97:5d:bd:df:dd:2a:66:
d5:52:e5:27:82:2c:a4:66:73:06:5f:74:f9:5a:d7:52:21:dc:
bf:b5:6c:03:3d:88:4b:24:f9:62:e5:80:f6:80:81:2e:c0:7b:
f4:a1:f8:22:0c:2f:91:74:41:97:5a:12:ab:ce:c8:ae:e5:a4:
b0:5f:ac:6f:da:d3:60:34:7b:17:e2:0c:eb:81:f0:5b:cf:d0:
67:7f:c5:61:78:a5:46:97:ba:53:c4:60:72:52:a7:3c:9e:e8:
10:5a:2a:30:22:fb:b0:5b:f4:f5:03:60:27:0f:d9:c5:ba:a0:
b3:64:1b:8b:75:e5:d3:fa:9c:71:89:8a:49:77:02:e6:f0:07:
2d:fc:15:a9:d6:8d:46:45:3b:2c:0a:1a:bd:29:c3:63:cd:39:
b4:9b:ce:6e:20:83:ae:f1:38:d8:7a:ab:37:95:bc:d7:79:e8:
ce:1a:58:61:ad:7d:2f:fc:17:53:eb:af:26:9c:1f:e3:13:50:
f5:a3:ff:86:fa:05:a9:b6:a3:5f:2f:c4:ba:5b:a9:39:b9:96:
79:05:b1:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKMdB3mcv04Mj6eS2drEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjUxMDE5MTIwMTMxWhcNMjUxMDIwMTIwMTMxWjAzMTEwLwYDVQQD
EyhjNjVhM2FmN2VlNDhmNDYxMzU5NmU5YTU3NDJiNjEzZjc0ZWY0MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIXPEcj2/cV4G+9HmKZ0zLxCXVmy
IRf9IPb7fbRscyt3AmDL/pRFcmcCCGWl14c3bERZK0Qf+nS5x402FBi7DM2ozE3H
FFNL442ry6YMHYru+6046PFOb30ONIjTNHiR5miTL859UIAVcMGSDHZpa5QyfM6r
qXbB8lzDt7Ph9q2MUAb9j4EVe4CA3sz2sZPz37Wo9HxUwidAfu6QAIBYIqMl7lGd
FWJkmwyF6Wy+OKfisuAJWuR4bt/iNgmIYE7BNJiQPS8wRtp9kE2XtFycPMsh0R9k
jRRddvmXtVUcJkUQXzWblsSJ7YmncXfwTLG7rjYPumTk5QYg1RULitkE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZaOvfuSPRhNZbppXQrYT9070BaMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9BAKb/p
Xw/SiFzCkC4PTTBjFcQF3JngT0b9rxwzdnlCPOrkqYpI4hUCy3lHGXeXXb3f3Spm
1VLlJ4IspGZzBl90+VrXUiHcv7VsAz2ISyT5YuWA9oCBLsB79KH4IgwvkXRBl1oS
q87IruWksF+sb9rTYDR7F+IM64HwW8/QZ3/FYXilRpe6U8RgclKnPJ7oEFoqMCL7
sFv09QNgJw/Zxbqgs2Qbi3Xl0/qccYmKSXcC5vAHLfwVqdaNRkU7LAoavSnDY805
tJvObiCDrvE42HqrN5W813nozhpYYa19L/wXU+uvJpwf4xNQ9aP/hvoFqbajXy/E
ulupObmWeQWxEA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:33 2025 by rpki-client