Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: XM+Bnp52FBPzDYl2popElNLds3w45y3dd4dtRlSztE8=
Subject key identifier: 24:14:E9:BC:2F:43:E8:CE:18:7C:57:1B:16:71:7D:7C:32:30:D9:5A
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 01984B545542BBE7F6D35DE6CA8A63627CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0F78
Signing time: Sun 27 Jul 2025 10:01:14 +0000
Manifest this update: Sun 27 Jul 2025 10:01:14 +0000
Manifest next update: Mon 28 Jul 2025 10:01:14 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: 97i4BWXC+1CThNN8tFTyyPzLQdEe26tHvzNIRDs0WWQ=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:55:42:bb:e7:f6:d3:5d:e6:ca:8a:63:62:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jul 27 10:01:14 2025 GMT
Not After : Jul 28 10:01:14 2025 GMT
Subject: CN=2414e9bc2f43e8ce187c571b16717d7c3230d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:04:1c:a2:ab:fb:ce:be:e0:9b:b1:8f:0c:
91:e9:9c:1f:82:22:2f:31:93:7e:a2:41:c9:5a:93:
b4:2f:ee:0c:cb:fa:05:23:eb:8a:f8:da:8e:e1:72:
72:0d:bc:36:47:88:b2:d6:3e:f2:a3:6d:3b:a7:87:
0e:23:9c:22:8b:91:15:5e:ea:0b:98:c6:28:1b:cc:
48:52:7c:79:98:ae:9c:1e:9c:fb:e7:5b:9c:e0:a3:
6b:79:d3:38:99:fe:0e:49:bf:bf:2d:93:2f:6a:fb:
4b:40:46:d0:48:1c:17:65:54:7a:69:49:62:22:53:
98:64:4a:59:9c:45:17:b0:a5:1c:c6:75:00:6b:4f:
7e:ea:32:39:81:5f:97:b1:c7:55:0e:89:51:77:8e:
65:20:bd:03:b6:76:ca:0b:8d:c9:e8:1b:27:69:4f:
13:dc:42:05:74:1f:77:08:bf:c1:b0:cc:06:66:09:
07:58:f7:63:f1:5e:ff:6f:51:6b:9e:40:ff:f7:87:
47:db:e4:a7:a5:4e:3c:84:e9:42:7e:66:71:8c:6c:
e4:2b:b4:2e:7a:58:93:c1:c4:87:23:2c:6b:63:aa:
7c:31:05:09:25:c4:0f:8b:22:04:b7:64:5d:6e:a7:
bb:c1:41:c4:04:21:6b:0a:b1:0e:8d:02:5a:8b:c4:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:E9:BC:2F:43:E8:CE:18:7C:57:1B:16:71:7D:7C:32:30:D9:5A
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:a5:a3:13:dc:fd:1c:0e:f3:18:9d:0a:ab:91:90:80:bd:
3f:d8:65:fa:32:89:b8:e6:a3:14:72:3f:11:16:e2:3b:5e:ea:
cf:7b:0d:32:dc:b6:c5:7f:f4:0b:8b:1f:95:77:bf:fe:b7:95:
f0:45:f8:0b:59:a7:5a:84:9c:9c:a2:6b:2f:48:cc:aa:44:2c:
23:86:94:70:29:f3:a5:9c:eb:25:68:c4:f0:47:6f:a9:03:8c:
a5:6f:6a:b8:74:29:ec:80:c5:4a:9e:82:7b:8f:6b:31:50:74:
60:85:1b:dc:b6:50:d9:86:f7:f3:6f:82:ad:b4:6f:c4:a8:9e:
52:b0:82:c4:ec:da:d8:8a:e3:97:68:3a:64:06:0d:f5:56:12:
55:b6:5c:a0:54:cd:ef:ca:71:32:17:46:32:31:28:d1:90:3d:
68:17:6e:14:9c:c6:25:8c:4e:bc:c3:87:11:9f:b2:72:12:b8:
7a:d9:3a:89:17:59:33:0f:f2:6f:d9:b7:1f:5d:b3:de:a2:54:
d8:4d:97:04:33:8d:0b:1a:3f:69:a0:c4:61:f3:fb:19:2d:67:
d9:1f:ec:83:40:b2:00:35:9a:92:1c:eb:0d:93:a5:67:bd:e2:
c4:65:cc:a3:14:08:52:ae:4b:2d:69:d8:25:fa:ad:b1:52:e0:
8f:33:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:27:19 2025 by rpki-client