
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: ii86ikkPOH9w0y1OUvydB4JQ24w06fPPWrV2SH91+KQ=
Subject key identifier: 30:4C:D2:89:B2:A2:E3:43:4A:66:CA:1A:7F:8B:2A:65:F2:34:DC:38
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 01984B549926CF0F8EC8E3F6540EBEB420A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0F06
Signing time: Sun 27 Jul 2025 10:01:32 +0000
Manifest this update: Sun 27 Jul 2025 10:01:32 +0000
Manifest next update: Mon 28 Jul 2025 10:01:32 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: cT8wAMXxITsU52u/dR/As3ClOWTZHJqv9yBilytMnoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:99:26:cf:0f:8e:c8:e3:f6:54:0e:be:b4:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Jul 27 10:01:32 2025 GMT
Not After : Jul 28 10:01:32 2025 GMT
Subject: CN=304cd289b2a2e3434a66ca1a7f8b2a65f234dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:8a:40:04:ae:3d:3c:c2:7a:31:7b:c6:fe:
f9:79:a4:5f:f7:4b:14:5e:75:94:87:4a:48:c1:ff:
18:21:8b:43:dc:a2:44:31:2d:cd:50:eb:46:0b:c5:
9e:5f:6d:a5:ef:7f:b3:b2:df:de:b3:7b:3c:a9:4e:
8e:2e:f9:cc:6a:cf:18:fe:fe:1d:6a:73:05:89:97:
7c:c6:9a:0f:4a:da:a5:1f:98:64:02:db:86:47:00:
ac:6e:a0:2a:32:3b:44:36:e3:5b:b7:d8:34:e3:c5:
4f:fd:50:93:37:a3:4b:1f:c8:44:84:3f:46:c0:cd:
d1:db:24:92:f3:8a:b4:b7:0f:83:98:15:49:bc:59:
d9:ec:ee:dd:32:10:2f:3f:f8:4a:aa:b7:bf:1a:e2:
44:ad:7b:4e:93:2b:7b:0e:d8:6c:24:e9:55:59:70:
94:ff:06:b6:f4:9c:59:2e:47:d4:85:be:8f:5c:c0:
32:62:0e:d3:b4:6b:09:e8:43:3a:b3:45:07:00:e0:
3b:37:12:51:9e:94:ee:1c:5b:ba:6f:9e:00:08:1f:
a3:15:01:89:59:db:e6:b5:3a:73:ed:48:ca:5e:9b:
62:8b:bd:27:28:57:3d:25:a3:d0:b9:a6:b8:20:5f:
3b:23:98:ae:f1:2a:78:26:3b:22:58:de:6b:c5:74:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:D2:89:B2:A2:E3:43:4A:66:CA:1A:7F:8B:2A:65:F2:34:DC:38
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:87:0b:a5:7a:18:11:3d:cd:dc:74:d7:8b:ac:cc:bf:01:49:
99:3e:ea:15:19:be:82:74:c4:73:92:63:9b:2f:e2:90:42:f4:
44:75:96:d7:f5:60:aa:1a:6c:0f:5b:1a:c8:cb:00:9f:74:aa:
b1:30:68:c7:6f:41:1e:32:0a:1a:45:dd:2c:ca:c0:a0:1f:bc:
a0:c9:a6:4a:b5:e9:3f:e8:4a:db:69:4a:a4:b2:e0:f2:33:e2:
25:3b:8d:8e:cd:1f:b5:2f:ba:0f:3f:e5:94:4e:15:0a:27:22:
58:e3:08:31:4e:8d:39:9c:3e:09:8e:a9:2f:43:4f:54:04:34:
94:0f:09:bb:95:07:ec:7f:e3:ab:55:3c:62:ec:27:f2:14:3e:
11:36:e2:84:85:2e:5f:fc:e0:92:c1:b0:fd:29:ba:03:5e:cd:
d7:9c:09:a1:3b:f2:d5:4f:c5:8a:86:96:73:b2:e2:20:72:9b:
c7:c7:c5:24:e0:44:c5:5b:40:16:56:e4:44:f7:7f:12:95:5d:
69:18:13:b5:a7:7e:9a:f1:79:c6:0c:3f:0c:5b:90:df:db:6d:
34:48:31:99:79:a6:17:98:7a:a9:6e:d6:ed:04:c9:1b:22:88:
c4:0d:07:7f:e6:6f:b9:c1:6e:ff:c0:f9:2e:a6:0c:e5:bf:fe:
a4:2e:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:45:23 2025 by rpki-client