Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: MQTkhrDZkrerVOpftRsw6IHVZJDXm83S184jD9kmEkY=
Subject key identifier: 64:B5:B3:13:FC:7D:02:DF:F2:34:5F:E6:C5:D8:00:1D:6E:61:EC:EF
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0199FE4739728181909C466324AB7A55BD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 21:01:44 +0000
Manifest this update: Sun 19 Oct 2025 21:01:44 +0000
Manifest next update: Mon 20 Oct 2025 21:01:44 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: s5tylRcIDwp83qDDbrNv/mCGw+aNQpEVoOerwrieasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:39:72:81:81:90:9c:46:63:24:ab:7a:55:bd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Oct 19 21:01:44 2025 GMT
Not After : Oct 20 21:01:44 2025 GMT
Subject: CN=64b5b313fc7d02dff2345fe6c5d8001d6e61ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:fd:9e:eb:b4:0c:aa:4e:82:58:55:26:0d:
a3:a9:e0:07:72:b3:b5:13:6c:fa:1d:48:ca:02:11:
e0:0b:e1:e6:04:5a:0f:af:51:4f:13:7d:9c:e4:98:
4a:d1:c3:c5:1a:ec:f9:a0:22:98:b9:94:ac:04:af:
e4:ab:6a:95:65:15:6d:31:12:5c:84:f9:41:fa:9a:
fb:66:32:92:aa:ca:5c:ae:62:36:5e:a1:24:df:03:
37:6e:03:33:7c:33:55:73:26:f2:2f:7f:e2:b2:83:
36:01:7a:26:a3:dd:ca:2e:c2:b6:f9:1e:b1:ec:8d:
b9:4d:0b:46:bd:5b:85:41:f6:7f:42:85:b8:93:12:
e9:97:62:dd:1d:7e:ff:fd:e2:9b:85:40:91:2b:aa:
9d:f6:2f:2d:d8:c1:ae:de:d6:92:1b:a3:f5:6a:ce:
16:22:54:36:4d:15:b6:4e:cd:f1:d4:de:9c:04:b7:
cc:03:0b:55:cd:df:7e:23:a7:b9:4d:d1:1a:31:e1:
41:b0:68:97:e1:2a:69:5d:96:a9:bf:ad:25:3b:c3:
a4:80:f4:71:18:7f:75:86:95:f6:58:8f:70:53:4c:
b5:86:41:6a:0e:13:bb:c3:f4:93:6d:e2:10:46:f9:
4d:a8:5d:ed:87:91:22:a8:44:ce:55:9e:d8:dc:66:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:B3:13:FC:7D:02:DF:F2:34:5F:E6:C5:D8:00:1D:6E:61:EC:EF
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:c9:80:da:35:ae:74:ce:61:d9:99:bc:d0:6f:15:43:c5:
b0:e5:dc:5a:4d:b9:76:15:28:33:6d:bc:82:6a:1a:3f:c6:c2:
c9:4a:56:13:56:72:d9:be:b7:c0:5e:b7:0c:a2:e5:91:52:a3:
1d:bd:ef:ec:95:62:a0:c6:1a:80:f5:22:76:3b:9c:70:03:0b:
9c:64:a3:b8:f8:b8:eb:ad:ee:86:97:40:62:fa:51:77:07:f4:
1d:93:47:23:d4:61:d8:4f:00:09:e9:be:0b:5d:de:c4:cb:a5:
72:91:27:0c:c9:c3:49:88:b4:0d:6f:f4:08:65:b0:71:14:62:
f5:15:7b:0d:47:c9:cd:00:3c:e9:ce:f9:3a:6a:b6:f7:7a:52:
4d:14:6f:a1:e2:5b:a5:b9:25:eb:f7:b9:a9:de:ed:7b:09:f8:
37:8a:bf:ec:e3:fc:dc:a0:3b:53:dd:f5:54:db:69:cc:be:a5:
6c:73:17:92:54:17:28:4a:d9:c7:51:f9:0a:88:32:b0:fb:93:
b3:1e:78:f5:99:5f:41:27:b0:e4:9b:ae:01:86:fe:d1:84:f6:
6e:c5:73:4e:74:5d:19:5f:8d:f7:b8:d4:ac:04:27:a1:52:fc:
ce:ab:63:35:1e:d7:8b:8a:6c:97:73:6f:e8:11:fa:95:cd:e9:
bb:4b:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:37 2025 by rpki-client