Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: aeNN5Qh0fMOi7ORLtg4kGNMxy+nsnqkAYKiJKbR6T/8=
Subject key identifier: D0:73:A8:6A:7A:52:C5:69:C5:A5:D3:BE:09:96:A5:4F:6C:A8:17:5C
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019A0F3947392DEAA9B631CE30968DCB3881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0EE1
Signing time: Thu 23 Oct 2025 04:00:03 +0000
Manifest this update: Thu 23 Oct 2025 04:00:03 +0000
Manifest next update: Fri 24 Oct 2025 04:00:03 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: LtyQ8D3b4+2d1yw2Vu/6cyuxBaa/ADDpwNqyTJRAbQo=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:47:39:2d:ea:a9:b6:31:ce:30:96:8d:cb:38:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Oct 23 04:00:03 2025 GMT
Not After : Oct 24 04:00:03 2025 GMT
Subject: CN=d073a86a7a52c569c5a5d3be0996a54f6ca8175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:06:2a:e9:10:4a:9c:c2:85:26:f2:77:f5:
cb:c9:77:5c:c2:e8:e6:be:c2:50:8c:8a:15:03:42:
c3:ed:a9:38:45:96:ff:0c:f9:36:c3:7e:1f:16:6f:
e3:fa:17:ec:27:3c:92:98:15:f7:ac:b1:8a:f5:98:
6d:bd:b7:c6:01:63:02:a4:f6:26:21:dc:cd:5b:a7:
97:68:b5:fe:ee:f6:7a:a4:ff:7f:17:81:0f:09:60:
1b:06:69:97:d1:b1:dc:ac:7e:ef:1c:05:d0:55:6d:
2b:2e:61:29:78:4b:55:ff:98:34:fd:0d:c3:d6:c8:
41:42:41:2c:54:6e:88:c8:e8:fc:e5:dc:fd:50:92:
42:98:81:af:a1:f8:2f:7e:fc:e7:c8:d8:43:c7:1c:
db:dc:ed:19:a6:a8:bd:e0:3e:3f:f6:cd:c8:fa:54:
57:89:58:4f:20:58:73:41:f5:65:88:5b:1c:df:54:
dc:15:2c:52:a6:23:8d:4c:0d:91:51:3e:3a:41:73:
38:5b:81:41:27:4c:d5:25:54:cc:18:b0:b6:4a:8c:
80:4a:f2:be:f4:a1:73:86:13:b2:17:34:7b:f3:94:
d9:e0:08:be:d3:fc:13:ae:6f:5b:66:0e:07:1c:ab:
a7:0c:2f:26:c9:c6:68:ad:5f:8f:b3:75:c7:63:ee:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:73:A8:6A:7A:52:C5:69:C5:A5:D3:BE:09:96:A5:4F:6C:A8:17:5C
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b0:42:1d:9e:fc:46:fe:35:d2:90:5a:10:8e:f7:af:d0:ca:
41:b4:90:db:74:c0:46:1d:b2:22:19:63:6d:24:a1:f5:77:43:
0a:78:23:45:4e:08:52:82:ea:85:dd:bf:11:28:a6:d0:20:95:
34:9b:bd:98:4c:96:78:70:e2:f7:3b:a3:8e:ef:44:79:2c:a0:
e9:b3:76:f6:b9:d3:59:78:7e:fa:a4:49:d9:e5:0b:30:fe:60:
1e:50:6e:af:46:53:6b:04:94:ce:a9:35:ea:cb:16:3a:ba:b8:
b9:b9:29:a3:ca:78:dd:21:41:bf:de:0a:ca:ea:65:34:79:33:
4d:33:6a:40:c7:bc:3c:4f:62:e7:3e:9b:52:42:c2:a8:b7:e7:
de:f2:b5:21:96:e5:e7:2e:af:5a:44:32:63:58:71:5a:a8:d4:
6a:a0:ac:c4:79:e6:7f:c3:35:48:28:26:ec:3f:9b:06:f4:e5:
71:dc:a5:29:7f:9d:19:51:ef:2d:c5:a3:06:68:60:af:d8:79:
fb:ad:d1:ff:bd:39:5f:c0:08:7c:66:9a:d4:be:e1:65:22:12:
f9:a7:bf:69:22:3b:ec:ab:32:fa:6e:6f:c5:95:11:38:b5:2c:
ea:a9:39:a4:7d:96:06:0c:f2:15:fd:9a:1c:a3:2c:eb:0b:2b:
b5:b0:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:26:32 2025 by rpki-client