Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: UJ/uZ0ZHiGgLXz/Fuw8aRyCjQWndFytqXr3oIlZuHys=
Subject key identifier: 08:99:3D:79:66:98:CE:78:B4:B8:C4:63:8E:C9:8D:4D:A0:11:C4:9B
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 01984966E2254D07B2E3CCFB1F41C71B7BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:02:16 +0000
Manifest this update: Sun 27 Jul 2025 01:02:16 +0000
Manifest next update: Mon 28 Jul 2025 01:02:16 +0000
Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: 7XS6aBbiycSay+xsOddIj/ZpU7e6IrawkIzJfwdPtXk=)
2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e2:25:4d:07:b2:e3:cc:fb:1f:41:c7:1b:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Jul 27 01:02:16 2025 GMT
Not After : Jul 28 01:02:16 2025 GMT
Subject: CN=08993d796698ce78b4b8c4638ec98d4da011c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:17:f6:d9:bd:8e:de:b0:1b:56:c3:6d:2d:
f4:d3:9d:7b:c9:a0:34:21:aa:5f:f1:2d:7d:eb:00:
75:c2:21:1e:fb:0c:13:d3:62:13:b9:b7:38:80:b1:
72:29:4c:30:19:62:e1:08:9b:f4:a2:32:e0:2a:54:
0e:3f:52:55:b2:8c:1e:9a:04:5b:a7:b1:29:69:49:
e0:82:6b:26:16:a8:08:6a:9c:5b:f0:60:0b:dc:31:
31:85:70:db:5b:14:2b:ab:bf:22:fd:b4:8a:46:4c:
e4:e8:14:27:e3:82:08:df:95:69:a1:9e:64:fc:d6:
fa:94:ee:5f:a8:66:4e:57:5d:4a:1d:88:bb:5f:ce:
e2:b0:75:97:70:2e:90:54:ca:11:c7:ad:4b:2e:70:
2e:d0:5a:38:d3:46:01:7a:36:f3:d8:ae:b5:ee:5e:
1d:eb:a3:e0:2d:ad:b5:3f:88:ac:dd:21:71:12:dc:
34:76:41:e3:73:03:30:74:f7:10:02:37:5e:d6:cd:
92:5b:c4:ba:11:66:de:f7:b1:34:b9:1c:29:c4:7c:
f3:15:b8:fc:8d:a9:3f:ac:5c:a1:8b:06:73:31:dc:
10:2c:10:51:b2:16:45:f1:44:2a:17:34:7f:bd:cb:
58:df:9e:3d:7a:7d:59:75:21:06:ea:08:2a:99:17:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:99:3D:79:66:98:CE:78:B4:B8:C4:63:8E:C9:8D:4D:A0:11:C4:9B
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:41:6d:d2:22:c3:0f:25:d8:32:f1:4c:0f:4f:b7:cd:81:
63:c0:b9:19:f6:b1:7b:7b:d0:bd:ba:b8:d2:81:22:c4:a9:c1:
df:44:e5:3b:01:63:e9:9a:97:f2:f8:5e:ae:f8:77:69:1b:55:
2d:46:ed:99:98:01:e3:36:60:55:33:09:d2:e6:c9:9b:78:8b:
0b:b3:d2:17:0f:f1:ae:cf:fa:09:9d:ab:6c:bc:70:11:97:0c:
c1:3e:4d:35:73:55:7a:53:67:a4:b8:02:cf:4c:ea:da:95:9b:
5d:ee:42:fc:a8:84:0f:81:11:21:5f:69:0d:52:91:bf:2a:0b:
4c:29:0c:bf:fc:e5:8c:19:dd:7e:63:e8:4e:1c:13:7c:53:37:
b3:ac:e0:d0:d9:f7:bb:6e:1c:c5:cd:b0:10:b1:20:01:73:13:
43:07:7e:8c:3b:d4:e1:27:cf:66:f4:90:9d:17:c4:dc:d8:35:
f8:49:b3:fa:7b:3a:76:09:27:5d:2c:43:4c:98:ed:73:3b:98:
85:52:ae:45:ae:4d:d7:c2:a7:2c:2c:5c:35:84:c8:9c:43:e7:
8c:52:a1:76:e6:3a:a4:50:83:10:a3:fc:58:51:4f:c1:b0:54:
49:7d:a4:3a:8b:82:a8:51:b2:9b:49:13:99:40:00:ff:37:1b:
f5:11:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:23 2025 by rpki-client