Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: 8BPZjG36AFXWyGLTXTOh7BijtiHMdSSGGb0oIOkY1Gw=
Subject key identifier: B5:6B:87:09:94:58:65:91:57:F5:B8:D9:40:EB:6E:D1:03:EC:39:69
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0198499C172CCB5A83B7CFA9CA79F7279E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 02:00:22 +0000
Manifest this update: Sun 27 Jul 2025 02:00:22 +0000
Manifest next update: Mon 28 Jul 2025 02:00:22 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: /EeZKAZpB1DBrtY23i2avpEBC8Fcz/yCW09NvDBsSUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:17:2c:cb:5a:83:b7:cf:a9:ca:79:f7:27:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jul 27 02:00:22 2025 GMT
Not After : Jul 28 02:00:22 2025 GMT
Subject: CN=b56b87099458659157f5b8d940eb6ed103ec3969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:ad:88:c4:4c:cf:c4:75:e8:c5:a9:a9:fd:
07:a1:e9:18:eb:f1:d3:e0:f9:48:a2:56:25:c2:78:
ff:9a:68:15:ba:c2:26:79:fb:00:c4:20:a7:d3:db:
9c:3f:df:67:63:8d:6d:a6:42:6d:87:49:93:b5:44:
b6:39:5a:04:22:dc:50:3a:ae:96:84:2c:7d:41:a6:
b4:b0:a0:be:c5:fa:9e:f5:de:46:29:5b:c0:8a:6e:
ab:a0:90:06:9b:77:41:a6:67:b4:78:c4:ec:15:97:
60:84:3a:db:db:c8:06:d9:a9:80:3b:28:50:94:62:
e7:c2:60:94:3e:af:39:cd:e6:81:2b:44:b9:73:70:
d4:87:25:ce:2b:89:64:62:65:b2:4c:88:b5:59:79:
a5:d2:0c:cc:3c:e8:dd:1d:bd:8e:14:6d:47:58:b4:
ae:32:6f:a5:65:ba:3e:c2:c6:b3:88:f9:d4:d9:6a:
1f:ea:ce:4e:7d:1d:8f:d4:d3:c9:b8:ed:96:c9:5a:
e0:9f:d9:21:04:07:00:3b:8e:1a:58:eb:07:a9:ad:
49:a3:9d:34:d6:60:60:91:86:7b:3f:4e:ed:2d:66:
4f:7a:71:0a:e2:62:68:aa:99:0f:ea:48:c5:d4:bd:
6b:d3:c2:12:82:34:4e:ce:a9:2d:87:57:bd:49:2e:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:87:09:94:58:65:91:57:F5:B8:D9:40:EB:6E:D1:03:EC:39:69
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:98:be:fc:05:0d:3a:ad:d5:a3:fb:94:b5:4f:19:c4:ce:6b:
4e:6f:78:92:cd:e1:87:d7:93:10:be:46:90:06:e6:43:be:d0:
2d:c8:1a:54:46:08:ef:9a:b3:07:e9:7e:ad:bd:12:8e:6f:5f:
1d:74:d6:b3:69:47:a2:5e:30:7c:05:83:2a:af:29:ff:a2:06:
4f:c3:ce:11:6d:39:48:89:21:3e:26:60:70:ea:c8:d1:35:9d:
60:d5:1b:96:77:74:b0:93:e4:cb:6d:eb:18:23:c2:78:8d:24:
0c:89:f3:9b:ef:e0:4f:7e:25:ed:63:03:8f:d8:c4:51:02:48:
3e:b4:87:10:56:25:e9:c1:0e:c4:09:b5:f1:f2:a7:89:81:0d:
06:42:5d:44:52:54:b8:1a:61:c5:61:d2:1d:ae:05:f7:8d:01:
3d:c9:c8:2a:de:9a:9d:02:ff:74:60:2e:8f:67:f0:07:50:73:
57:5a:d4:68:3b:4f:3f:4b:72:59:b3:51:0d:4e:93:8b:be:0f:
1d:fa:16:75:97:0e:d0:b1:41:d6:79:68:20:c5:b6:60:f2:8a:
a8:ba:f4:c8:b5:6a:5c:45:92:8f:b9:79:5f:08:ae:5d:b2:62:
e1:0e:f6:9d:6b:09:bf:64:c2:eb:2a:7b:c6:0f:63:ff:c0:b8:
c2:92:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:04 2025 by rpki-client