Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: +9+ZMtSU9Pj6QNANsll/2H0HuhwNnnyttYzLIkFyNz8=
Subject key identifier: AC:B0:2A:DB:14:B1:CA:12:77:30:00:AB:BB:E2:56:67:A2:3B:75:3B
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01984A09AEEEFD53EE2343EE0F5D84EC6B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 04:00:05 +0000
Manifest this update: Sun 27 Jul 2025 04:00:05 +0000
Manifest next update: Mon 28 Jul 2025 04:00:05 +0000
Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: OaYbBcvSr7w/IOm92Cfl9z/5Y7WEr8RBQeI8c256GT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ae:ee:fd:53:ee:23:43:ee:0f:5d:84:ec:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jul 27 04:00:05 2025 GMT
Not After : Jul 28 04:00:05 2025 GMT
Subject: CN=acb02adb14b1ca12773000abbbe25667a23b753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:57:62:fc:c1:83:87:0c:1a:a6:41:c9:d7:
ae:07:99:bb:9e:67:77:df:5a:6c:ad:26:3c:5f:92:
b4:59:6f:d0:65:33:02:35:1c:08:7e:e9:c8:2f:05:
14:51:90:1f:36:6a:58:45:d8:a7:2f:48:26:25:e8:
ec:2f:9e:de:8d:a5:da:93:0a:1a:83:61:c2:e7:05:
3c:98:cf:d8:cc:0d:f5:20:d9:0d:0a:17:d8:05:bf:
80:33:67:46:0e:8c:88:2d:d2:67:82:68:ef:f3:f6:
f6:5a:29:d9:6b:f2:62:b0:31:5f:f6:12:59:71:67:
93:aa:29:61:d9:26:72:40:cf:71:cc:8c:88:04:66:
92:67:38:c9:7d:7b:9d:fa:8a:2d:e1:9f:60:93:05:
1d:15:15:fa:6b:64:24:d8:5f:c6:00:56:e1:7e:82:
6e:53:02:f5:37:17:0a:21:04:d1:d5:a8:0f:44:6f:
b8:de:8a:c4:1f:4a:ea:05:47:b6:3a:51:8a:7f:84:
7f:01:7d:6c:8e:5d:aa:f6:58:7f:f0:0a:c8:24:02:
58:62:f8:2c:03:f3:31:0f:25:90:6d:99:70:fd:f8:
69:71:08:78:08:6e:b8:8a:90:d2:48:fa:90:7a:6b:
d8:87:00:4f:23:27:91:f0:23:f1:79:2f:6e:0c:49:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:2A:DB:14:B1:CA:12:77:30:00:AB:BB:E2:56:67:A2:3B:75:3B
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:b8:7d:f5:02:db:eb:03:59:21:af:67:f5:67:b8:b6:53:
44:ea:b3:0a:51:8b:5b:c9:28:18:08:ff:65:4b:23:6a:3e:34:
8a:74:4e:3c:a9:f5:f2:e4:58:69:f9:1e:a2:a6:d9:38:42:1a:
ee:1c:0e:be:48:4c:a8:aa:d2:ae:db:8a:3e:e8:59:b3:c5:b8:
10:4f:52:8c:25:7a:35:54:c4:29:07:57:cd:a7:20:84:56:b8:
e4:09:24:40:f3:34:17:3e:a2:4b:55:6c:79:82:24:6f:ea:0c:
6c:2e:d6:80:95:80:b5:47:6e:31:2b:07:b8:d3:8c:c0:c2:32:
94:78:bd:7d:cf:77:ab:0b:56:e0:fa:c2:05:5f:00:6f:db:d8:
76:3e:5f:7b:12:c4:77:97:6b:a9:02:99:5c:fc:e5:64:2d:22:
4e:a1:a7:6f:b1:56:1d:58:b3:0e:6f:71:bb:0f:f8:0d:c2:73:
25:1f:a0:94:77:d8:4a:dd:cd:f7:7d:7e:73:92:86:f8:35:8c:
25:33:61:db:61:e7:f6:2e:ca:bd:a9:dc:3b:d9:7a:b4:e1:ea:
26:a9:ca:97:2c:74:12:48:44:40:30:40:2e:8a:65:d2:7e:08:
1f:37:b4:30:80:ef:b4:86:95:73:fe:b5:1a:45:d7:3a:98:c2:
96:a3:bf:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCa7u/VPuI0PuD12E7GsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjUwNzI3MDQwMDA1WhcNMjUwNzI4MDQwMDA1WjAzMTEwLwYDVQQD
EyhhY2IwMmFkYjE0YjFjYTEyNzczMDAwYWJiYmUyNTY2N2EyM2I3NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowxXYvzBg4cMGqZBydeuB5m7nmd3
31psrSY8X5K0WW/QZTMCNRwIfunILwUUUZAfNmpYRdinL0gmJejsL57ejaXakwoa
g2HC5wU8mM/YzA31INkNChfYBb+AM2dGDoyILdJngmjv8/b2WinZa/JisDFf9hJZ
cWeTqilh2SZyQM9xzIyIBGaSZzjJfXud+oot4Z9gkwUdFRX6a2Qk2F/GAFbhfoJu
UwL1NxcKIQTR1agPRG+43orEH0rqBUe2OlGKf4R/AX1sjl2q9lh/8ArIJAJYYvgs
A/MxDyWQbZlw/fhpcQh4CG64ipDSSPqQemvYhwBPIyeR8CPxeS9uDEmI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKywKtsUscoSdzAAq7viVmeiO3U7MB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYO4ffUC
2+sDWSGvZ/VnuLZTROqzClGLW8koGAj/ZUsjaj40inROPKn18uRYafkeoqbZOEIa
7hwOvkhMqKrSrtuKPuhZs8W4EE9SjCV6NVTEKQdXzacghFa45AkkQPM0Fz6iS1Vs
eYIkb+oMbC7WgJWAtUduMSsHuNOMwMIylHi9fc93qwtW4PrCBV8Ab9vYdj5fexLE
d5drqQKZXPzlZC0iTqGnb7FWHVizDm9xuw/4DcJzJR+glHfYSt3N931+c5KG+DWM
JTNh22Hn9i7KvancO9l6tOHqJqnKlyx0EkhEQDBALopl0n4IHze0MIDvtIaVc/61
GkXXOpjClqO/yw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:53 2025 by rpki-client