Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier: K3RhfBJ2WTJKegOkrk7KMlB+8desMwR1BUSaCt9RmNA=
Subject key identifier: A7:D5:DE:87:C5:6D:4B:91:56:38:31:3F:EB:B6:02:78:05:44:40:A5
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial: 0197B890259BDE571F6E7C46448866DFD37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number: 07F8
Signing time: Sat 28 Jun 2025 22:02:23 +0000
Manifest this update: Sat 28 Jun 2025 22:02:23 +0000
Manifest next update: Sun 29 Jun 2025 22:02:23 +0000
Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=)
2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: Vb2kflRuCZ8UnAbax7KCrsotRhTucrJJj5x74RT20wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:25:9b:de:57:1f:6e:7c:46:44:88:66:df:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Validity
Not Before: Jun 28 22:02:23 2025 GMT
Not After : Jun 29 22:02:23 2025 GMT
Subject: CN=a7d5de87c56d4b915638313febb60278054440a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:f2:e0:f4:3a:e7:91:ab:be:c9:9a:11:ac:
9d:aa:de:71:5a:c8:30:42:97:d7:0d:39:bd:bf:d6:
12:4a:0c:54:f1:01:bf:bd:06:40:5a:fa:a0:ee:7c:
f7:24:5f:8b:b0:7e:1d:9e:fa:87:71:9c:0e:f0:03:
7e:f7:4f:34:a1:fb:5b:e6:ed:9b:cc:38:ba:7a:db:
9d:75:c0:4e:d2:e0:63:73:ba:d4:47:9e:98:a1:fc:
36:c4:9c:97:82:b0:70:7a:9c:0b:d3:25:3e:3f:09:
17:05:f4:ce:c5:d9:df:32:19:36:71:46:87:2e:9c:
91:cb:92:3e:af:51:6b:dd:c7:60:e5:2c:cf:c9:8d:
b0:03:2d:66:60:f2:e4:5c:89:cd:a5:46:79:e2:3b:
c1:c8:cd:8c:58:31:96:e8:db:1c:d5:e8:98:b7:d9:
13:b2:b8:dc:3b:e4:d3:d4:8c:3d:fc:99:1f:4d:c4:
f3:d5:98:d4:d1:cc:3a:98:f4:9a:e6:fd:73:07:92:
6c:67:93:b5:f3:d0:98:91:f3:d6:c7:23:12:39:73:
19:0f:b9:2c:3e:38:f3:03:19:c0:9e:90:c6:81:00:
77:10:65:e1:5d:1e:af:5a:ea:d3:c5:da:34:22:1a:
3e:77:5c:54:2c:7d:67:a9:b9:28:dc:f0:d3:27:8c:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:DE:87:C5:6D:4B:91:56:38:31:3F:EB:B6:02:78:05:44:40:A5
X509v3 Authority Key Identifier:
keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6e:ab:20:f6:d9:5a:26:aa:d1:41:bb:cd:07:10:40:e2:1a:
8c:0d:a3:8b:14:cf:ef:6d:ba:78:3a:0e:ae:19:8b:34:51:f9:
d4:09:57:a4:19:08:ec:47:26:46:77:40:56:a7:e2:ad:ec:86:
77:47:b8:b8:34:bd:fc:dc:f3:2f:97:5f:e9:6a:cd:da:26:da:
95:3c:c4:9a:7d:fe:13:22:26:00:ed:f8:9a:87:13:64:8a:d7:
6f:1a:02:89:69:b6:6b:b9:6b:5b:a4:8a:7d:85:2e:59:0b:80:
e5:21:9d:99:97:e9:3a:21:ec:e9:61:51:f9:ea:b3:2b:95:82:
e3:76:f5:d8:f2:2a:9b:5f:c1:84:c5:d2:b0:2b:f7:4f:7b:d9:
dc:f4:3c:e8:54:05:30:71:e8:f1:d8:0c:10:91:24:06:d8:87:
db:62:3a:f1:65:40:c6:ef:6f:ea:9a:68:49:fc:67:b9:53:99:
f1:b5:ce:0a:4f:1a:b7:c2:87:bb:1a:86:dd:dc:3d:64:77:3d:
aa:2f:28:15:40:1a:af:7c:50:ef:fa:13:97:ce:53:52:6b:fd:
3e:3d:eb:1c:94:c4:64:a3:1a:d2:b0:ee:44:93:33:78:33:13:
a0:56:d3:f8:9a:34:93:97:6e:d2:0d:f8:14:b8:67:64:d2:7b:
5a:f0:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:24 2025 by rpki-client