Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: yq18OzARgSUB1YzYz03SLEhxKqb/NxCCDLNWp27QZqw=
Subject key identifier: 13:65:06:4B:24:AB:E6:9E:70:CC:FC:91:19:66:F5:27:78:86:70:F4
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019A2AE827EE934421462BF6769D83939942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 13:00:48 +0000
Manifest this update: Tue 28 Oct 2025 13:00:48 +0000
Manifest next update: Wed 29 Oct 2025 13:00:48 +0000
Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: kn3AhagQxs/E6t/Xisg8xK/THqQhpRsX13pe4mSebB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:27:ee:93:44:21:46:2b:f6:76:9d:83:93:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Oct 28 13:00:48 2025 GMT
Not After : Oct 29 13:00:48 2025 GMT
Subject: CN=1365064b24abe69e70ccfc911966f527788670f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:a3:4b:ec:55:f9:51:11:c9:3b:fb:2d:e3:
f8:58:39:ee:36:66:49:0a:51:83:bc:d6:99:3b:37:
ba:c7:6d:a5:41:a8:b6:9a:0c:85:e9:bc:d9:e7:f9:
dc:39:a6:f9:17:7f:96:b2:9e:2b:d3:14:bf:67:14:
76:86:25:22:9f:ad:4b:f7:b1:ea:63:0f:f3:93:96:
78:22:d3:38:04:34:c8:be:9f:80:10:a2:c1:38:04:
de:9e:73:32:1b:11:3e:68:15:b4:a7:5c:b7:1a:c9:
5a:6c:e9:b8:72:b9:c7:72:95:e0:cc:e7:21:ea:63:
41:a5:8c:11:51:32:ac:a1:11:07:5b:63:4e:99:c5:
4c:aa:c0:51:c0:c1:60:15:47:cf:f8:e4:3c:80:28:
bd:f7:11:94:87:3d:04:fb:a7:fe:bb:8e:bb:bf:30:
c3:aa:01:46:d8:52:ed:7b:3c:a2:e3:e7:a6:28:3f:
e3:02:aa:44:f8:5c:ef:91:d5:33:de:5b:5e:53:44:
d7:56:89:da:3d:54:41:7c:3d:68:68:cd:c4:d8:b5:
4f:f7:c7:ce:f3:f2:b6:ff:2c:5e:5b:73:42:b5:ff:
c3:b6:26:50:17:28:e7:8a:7d:f6:2a:d5:83:e1:a7:
b8:d4:a3:dd:5c:72:59:dd:a2:b9:ba:b6:e5:c3:ed:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:06:4B:24:AB:E6:9E:70:CC:FC:91:19:66:F5:27:78:86:70:F4
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:85:4d:aa:d2:68:7c:54:4a:bb:8e:4c:02:35:0c:ff:aa:
ac:18:fc:a2:76:78:f1:79:cc:92:31:30:a6:68:8f:eb:5c:cc:
ff:79:1d:7f:5b:0f:31:06:49:c2:ed:68:c8:d3:05:c9:b8:9f:
0e:48:11:2f:83:4a:4c:4c:e8:92:05:59:d3:d4:3b:dc:8b:3c:
00:87:56:8a:a4:78:f1:fc:63:e4:81:d7:0a:86:52:e2:51:b6:
d6:f0:6d:8f:e4:aa:ea:1d:1c:75:c9:e5:43:7e:8e:53:48:7b:
9e:41:a4:6c:12:48:be:22:03:e4:a0:6d:3f:58:11:b6:bc:15:
1a:bf:70:2c:e4:e4:36:4e:1f:a3:34:da:a6:c8:e3:b6:96:40:
f6:80:9d:92:e2:5d:1c:5a:4d:4b:e8:6b:2e:23:9f:03:e2:b7:
44:5b:c3:de:fe:65:4c:23:bf:89:32:1d:f5:df:3e:05:91:09:
73:ae:00:99:d4:b0:ee:94:e3:dd:9b:5e:18:50:c3:99:97:c2:
2d:c7:9c:93:9e:f4:68:fc:8c:1a:ee:55:38:12:94:5d:dc:a8:
56:1b:72:bb:6a:0d:0d:e9:2e:20:0d:39:fb:14:31:6f:09:e8:
df:5e:fe:91:22:80:db:e8:43:f1:15:62:bb:94:62:3c:61:65:
1a:f0:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:49:52 2025 by rpki-client