Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: 4eerPwno8rCCjZwgAZjd+x8EnzxQtt7culRVcM26q6c=
Subject key identifier: C8:DA:34:48:06:90:08:52:A9:F2:BD:EB:55:5C:F5:AA:B4:8F:C3:F0
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019A72266DFD133C636A33B06DD7EB8521D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: 2fQekGxEBy7+SUDklA+2RpxCejWubx4u5i2PAaplDK4=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6d:fd:13:3c:63:6a:33:b0:6d:d7:eb:85:21:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=c8da344806900852a9f2bdeb555cf5aab48fc3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:c1:ae:70:94:1d:09:43:bf:6d:0a:82:30:
ba:ce:33:de:71:4f:cd:4c:99:ea:dd:95:71:22:8b:
f8:38:bd:b1:dc:0a:d7:f7:1c:2d:ca:0c:88:d0:65:
76:7e:2a:0d:08:8f:94:be:98:0e:00:1d:01:8f:19:
3c:1e:1d:a4:4e:a0:b7:53:d0:6c:71:3d:6d:8c:7c:
b4:64:a4:ee:d1:21:b4:be:22:36:20:a5:1d:a7:bf:
ca:b7:10:04:b7:9b:09:da:4e:ad:11:3e:cc:a6:5b:
86:0f:6a:22:be:d8:46:81:ae:6b:92:39:ee:b3:54:
ed:8f:40:d2:1d:b8:b4:48:3d:ca:d6:56:f7:ea:e0:
63:34:fa:4b:a5:7c:26:d7:23:f0:43:91:c1:98:7e:
dc:c8:41:2a:f2:73:b5:49:e8:33:c6:83:79:f7:3e:
93:83:4a:03:51:e1:fd:fc:53:d3:66:5e:50:69:a6:
c9:f6:93:89:4e:02:2c:2e:02:38:54:57:76:92:14:
6a:3e:ec:88:04:72:68:1b:d4:1e:21:ab:1c:d3:43:
15:de:66:18:92:5c:20:1f:06:8a:41:6d:d2:58:2b:
e6:a0:99:0b:8b:65:16:27:6d:0c:ae:0b:22:85:79:
f7:48:1a:b0:ba:dd:ab:ea:0a:76:24:3d:7c:02:ed:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:34:48:06:90:08:52:A9:F2:BD:EB:55:5C:F5:AA:B4:8F:C3:F0
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:63:e0:8a:5f:ff:5e:f4:2a:e3:67:2a:b9:1d:18:52:e9:
11:66:6c:c6:e4:58:68:9f:57:ee:52:73:03:3e:0e:7e:5a:30:
f9:7c:2e:f8:5c:27:4c:52:d8:f0:55:75:d7:5e:83:ef:0c:a0:
bb:69:9a:dc:48:fb:70:45:33:b1:28:ef:e5:7c:a8:31:8e:99:
8a:ac:db:cf:e9:d6:06:8f:9f:d8:f0:f0:33:f1:17:8a:30:e2:
bf:18:fb:79:a8:9d:26:f4:6d:5b:c6:cb:7b:47:17:17:f8:3e:
8d:ab:6b:af:f2:6c:86:b3:a0:23:64:2e:32:ac:ae:96:9f:56:
c1:41:af:f7:aa:77:e5:9b:b4:70:ae:f1:6b:f4:61:41:1a:96:
70:b5:44:74:77:7e:2d:9b:ee:19:76:1c:40:87:d9:c3:fe:87:
14:e3:97:b6:df:73:bb:92:81:de:57:aa:b0:04:8a:84:2b:f8:
9d:31:15:38:73:b8:89:db:5a:f6:c8:bd:9a:0b:a1:15:fd:4d:
63:34:ae:2c:da:36:fa:f9:8c:4d:d8:49:a3:e0:46:77:79:3f:
34:44:cf:38:0c:be:95:3d:8d:17:ad:a4:a2:90:cf:1e:18:89:
8b:a3:61:3c:30:a1:31:c4:ad:4c:23:3d:fe:7c:ee:f6:e2:e4:
05:e4:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:02 2025 by rpki-client