Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: rzwDwYaSk3LsN2Crum4Z+MytqEormfQXdXWjDnmvWWc=
Subject key identifier: 0F:8E:A6:03:68:FE:F3:FC:78:97:B8:C2:21:1D:C5:A3:97:91:6B:3F
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019A1D2CAC700DA7C46485179BF4BAAE5031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 16FB
Signing time: Sat 25 Oct 2025 21:00:58 +0000
Manifest this update: Sat 25 Oct 2025 21:00:58 +0000
Manifest next update: Sun 26 Oct 2025 21:00:58 +0000
Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: qLgjvFFR0ujFtON8nGWdgfFNrxRmgdFVih5lc6vArfM=)
7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:ac:70:0d:a7:c4:64:85:17:9b:f4:ba:ae:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Oct 25 21:00:58 2025 GMT
Not After : Oct 26 21:00:58 2025 GMT
Subject: CN=0f8ea60368fef3fc7897b8c2211dc5a397916b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:24:17:3e:26:6f:00:f4:26:40:30:3b:fb:
4d:7d:40:b7:b8:48:21:c0:3d:21:3e:cc:67:e6:ba:
6f:e2:d0:ba:08:45:49:21:4e:2c:49:e9:22:9b:a2:
ae:90:42:3d:ec:76:c5:66:66:c9:41:55:27:dc:85:
ed:5b:07:6c:7e:87:72:a0:56:85:62:77:a0:3a:52:
3b:5b:8f:ac:b5:d2:e1:46:fc:93:75:10:f6:ef:cc:
60:b9:ea:01:70:18:34:f8:59:72:b3:e3:8d:93:80:
d6:46:dd:76:7b:f3:3d:5e:d0:06:1b:11:d9:56:f0:
2d:03:c4:d1:cf:4d:2f:4a:32:88:29:e7:ef:37:b9:
91:f4:2b:0e:e6:b0:ab:bf:2e:c0:cb:77:54:24:60:
31:4f:9f:5f:90:d1:0c:8b:44:d3:d8:cb:89:c8:be:
1e:23:eb:e0:41:61:46:6e:75:d0:f6:ab:2e:76:fa:
a6:27:33:cc:cc:f2:a3:5f:a8:46:9c:d5:78:47:87:
04:76:5e:68:0f:37:15:d9:60:d3:e9:be:74:85:14:
36:09:b5:48:5c:6c:b5:b3:2b:8f:d1:a0:1a:8f:6f:
9d:e5:38:85:00:7b:38:6e:d9:c1:33:2b:86:b2:0d:
1d:39:9f:fa:25:eb:90:8f:a3:c4:10:41:e9:7c:ae:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:A6:03:68:FE:F3:FC:78:97:B8:C2:21:1D:C5:A3:97:91:6B:3F
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fc:c3:44:64:ff:60:6f:72:6a:88:39:44:ef:c3:6b:46:a2:
fe:23:07:d5:2c:45:86:4f:ca:84:7f:4a:cf:52:f3:f5:42:67:
ed:4d:32:40:b5:58:c2:13:7e:1f:d0:48:e9:5d:0d:ee:90:49:
7e:0f:20:ea:11:3d:6a:81:6c:8c:59:a2:e3:7d:87:ea:25:8e:
c8:6b:78:30:ed:66:9d:35:d2:17:26:a2:d4:f2:ac:97:08:06:
99:d6:11:54:e3:64:dd:3f:5e:d4:a4:46:45:c1:a6:c7:1a:ab:
71:c0:78:de:c2:d2:b0:59:22:a7:80:db:06:d7:05:f2:6e:05:
ca:94:e0:46:25:03:e3:20:5c:1d:22:b0:d3:57:5c:29:a6:e6:
13:59:e4:5b:8a:e8:c5:98:88:53:03:27:20:80:a5:e4:9d:49:
b7:b3:bc:23:4d:d9:85:35:0b:0d:bb:72:eb:b9:46:ca:0e:9d:
d9:08:b5:67:10:67:18:ab:f3:d0:44:70:2c:ef:4c:0a:d7:10:
d5:47:5f:a5:3a:81:16:48:70:47:db:b7:b5:96:d4:ff:ad:ca:
2e:9b:73:b5:23:1a:2a:fc:4f:61:e0:45:38:54:7c:b4:c2:b9:
73:28:75:2f:dd:0f:bc:c8:6a:41:09:a8:c9:f3:b5:81:f0:70:
b9:15:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:43:34 2025 by rpki-client