Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: O+TxdVvNWYzK4H4ISuD/tlyFWT86A6ECUhrbLQqQOKM=
Subject key identifier: 37:CB:48:3C:B0:63:21:EA:EE:17:3B:3B:B6:A8:6C:42:BC:FE:42:ED
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01984AAEDDEB87945E6C73BD678E03E32734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1612
Signing time: Sun 27 Jul 2025 07:00:30 +0000
Manifest this update: Sun 27 Jul 2025 07:00:30 +0000
Manifest next update: Mon 28 Jul 2025 07:00:30 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: zXJBUs1SAITyz14ngiKavzQFCYEK92Snro4XX1RUpHM=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:dd:eb:87:94:5e:6c:73:bd:67:8e:03:e3:27:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jul 27 07:00:30 2025 GMT
Not After : Jul 28 07:00:30 2025 GMT
Subject: CN=37cb483cb06321eaee173b3bb6a86c42bcfe42ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:6b:5b:63:0d:90:b5:26:56:59:1f:b5:15:
55:fe:90:ac:4b:43:3b:41:ae:92:37:e9:be:99:31:
1d:a9:16:bd:ef:55:5b:23:14:61:d4:0d:e4:5b:1f:
fe:39:9c:b0:09:b0:1d:32:ea:4a:c2:1f:ac:df:84:
d0:97:9c:c8:dc:3c:4b:87:45:4f:de:46:8f:b7:31:
35:4e:5f:c4:92:cd:61:47:c6:67:ad:8b:0e:79:88:
cd:9c:d0:33:c4:51:fa:b9:a7:ac:8b:57:a6:f1:13:
00:6a:ee:f0:17:3f:55:c9:16:f3:09:f1:06:f8:c4:
25:d2:67:e7:69:46:63:cb:54:51:07:62:9a:3b:ac:
b7:4f:18:b8:9d:d1:93:ca:9b:07:2c:0c:9f:98:15:
6b:6c:d7:93:c0:df:5f:4f:a6:a9:8a:f2:cd:b7:cd:
8a:ea:d4:2a:21:0d:af:e3:f0:e6:e0:df:77:ad:0e:
63:7d:a0:59:20:f7:b1:e3:a3:13:72:e6:c7:26:eb:
97:c1:2d:4a:2c:0e:ec:fa:68:2c:1f:0b:af:29:4b:
e5:4a:87:9a:8e:44:88:04:87:04:b6:80:8e:bb:dd:
07:ba:6b:12:bd:e6:68:1e:09:89:c7:ae:ba:9d:d5:
6a:16:0e:68:b4:da:b4:03:7f:78:0b:0b:1a:6c:be:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:48:3C:B0:63:21:EA:EE:17:3B:3B:B6:A8:6C:42:BC:FE:42:ED
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:a1:d7:14:48:6a:8d:bd:cd:27:3a:3d:87:eb:7d:ad:93:
f7:68:d3:6a:a1:7a:34:2f:e6:41:94:dc:eb:f5:e5:98:36:ab:
01:90:f2:5b:16:0e:54:3d:28:28:d8:e0:f0:58:4f:ff:43:69:
2d:6f:6b:73:eb:3c:d0:e5:c0:13:0d:6a:84:d8:76:16:ff:9b:
a1:53:40:03:c4:42:7c:b9:79:d6:97:a5:40:22:f8:63:49:bf:
87:98:5c:8a:4d:9a:fb:c4:7e:f7:c4:4d:2b:e8:84:ae:24:b5:
52:20:45:d1:8b:de:9a:88:42:37:d1:18:13:46:f6:43:8f:05:
a3:92:dd:9d:3f:44:d1:cb:3f:54:15:3c:c2:d7:ec:b2:ed:b2:
90:e1:01:a4:21:23:de:20:8b:21:9f:88:e2:82:f9:2f:b9:d6:
7f:6d:82:b3:f7:a0:5b:b4:23:33:8f:93:5d:8c:6b:57:01:a3:
57:56:53:d6:d0:ae:80:ed:29:5d:bb:62:5c:e0:cc:df:be:17:
17:b6:6b:aa:f1:39:5f:a4:46:81:ab:d6:ab:56:42:d0:bc:6c:
ed:4b:e2:88:c0:a3:3c:c9:10:b5:8c:74:ad:54:fc:c6:c6:9b:
5f:03:d2:bd:f7:d3:a3:21:f4:10:2f:25:d0:d1:ee:44:6b:77:
ff:17:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:51 2025 by rpki-client