Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: oqI9U3wEtjxTiwgjMoG5T+cCHGgbnM1llZ/Q4bpD3cs=
Subject key identifier: 71:ED:E8:E3:1A:1A:F2:A3:EE:D2:30:58:19:05:66:FF:99:88:31:C2
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 0199350133F5F6DD2403D52A4FA158C93FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 1543
Signing time: Wed 10 Sep 2025 19:01:35 +0000
Manifest this update: Wed 10 Sep 2025 19:01:35 +0000
Manifest next update: Thu 11 Sep 2025 19:01:35 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: E+f6+4o7tWZ2Qm6yHRezRpaipUrLxl6tArnyVZG4cr4=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:33:f5:f6:dd:24:03:d5:2a:4f:a1:58:c9:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Sep 10 19:01:35 2025 GMT
Not After : Sep 11 19:01:35 2025 GMT
Subject: CN=71ede8e31a1af2a3eed23058190566ff998831c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:ff:da:57:a7:2c:ab:44:93:1d:d2:32:a4:
c5:fb:04:bf:c2:b4:7b:c7:aa:99:ff:83:44:1d:b1:
17:b8:0d:a7:76:c8:f1:5f:47:51:a8:73:bd:22:ac:
be:ed:3c:6e:3d:c1:11:c4:73:0f:a7:5f:4c:84:59:
a2:7a:77:0e:55:dc:33:64:b3:75:0c:0d:c1:cc:08:
1f:fe:6d:a2:c4:39:d2:9b:90:fb:d1:f7:fb:c3:a3:
a8:bd:9d:75:e4:f1:d5:9b:3c:57:ce:56:a8:b9:8b:
d4:25:ce:58:73:6e:67:f4:99:a6:25:9c:7e:61:97:
88:03:91:8f:9d:1a:73:8e:e7:19:15:8f:f2:e5:d1:
32:4e:84:cb:ea:b4:12:68:e5:4f:46:ce:40:26:42:
44:a5:4b:e9:b5:ba:e4:bd:b0:5b:41:6b:fd:a9:1e:
e5:3b:af:8c:bd:09:fb:59:ec:e7:e1:75:fc:2a:ab:
c2:f0:b4:71:87:f0:7f:15:9b:1f:2e:60:d0:7d:a2:
dd:62:ca:df:bf:38:27:4d:73:9d:87:4c:89:ae:95:
87:9f:a7:ba:20:99:82:c4:64:58:a1:f3:f1:86:61:
a1:95:1a:50:7d:29:6d:4b:4e:b8:cd:e3:62:c1:f2:
a7:7f:35:6a:6b:b4:34:a5:b9:32:26:05:5b:30:70:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:ED:E8:E3:1A:1A:F2:A3:EE:D2:30:58:19:05:66:FF:99:88:31:C2
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fa:85:d0:7c:b2:d8:38:9c:1b:b1:68:b5:ce:f3:e9:e3:20:
48:8a:ba:61:45:2d:b0:11:b8:4d:65:d8:cf:4e:5e:6b:38:5d:
7f:97:11:52:0f:cc:71:70:a3:36:c1:59:ab:33:6e:75:90:27:
72:65:2f:96:78:87:46:51:4b:bd:c3:c4:9b:7d:79:5f:5c:e8:
f4:cf:86:b4:65:14:d7:f3:d1:14:4b:0a:80:58:6d:0c:a5:ac:
54:9b:0e:0a:bb:d6:93:39:fa:cf:ed:83:13:1d:c3:fa:e4:8e:
52:90:9f:77:6b:cc:a2:7c:db:10:a4:4f:45:38:8e:97:af:0c:
c6:27:a9:ee:ba:82:48:62:eb:36:06:c3:73:dd:fc:f4:eb:2e:
9d:29:6c:04:f3:66:a8:9f:da:80:5e:6a:85:6b:5e:59:76:99:
9d:03:ef:d3:24:83:b2:5a:3e:60:98:5e:22:a8:21:1c:ec:ce:
32:49:ea:8e:52:6c:c2:6f:ec:4c:30:5e:9b:6b:a9:14:d0:50:
1b:33:20:6b:7b:54:b3:f9:82:ed:48:93:46:27:59:b7:12:9c:
1d:81:44:5f:cd:b1:5c:a8:36:8c:5a:29:c7:19:f9:4e:2d:13:
2a:24:4e:f0:ca:41:a7:be:3a:1a:f3:9e:29:e8:1a:1d:4c:bf:
ba:d4:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:59 2025 by rpki-client