Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: Yp6zwbum+OWA/QHo6MeftQC9d+Mg9ifoeoPAom3NQsE=
Subject key identifier: 7B:22:3C:DC:E3:20:3E:3C:64:B0:23:B1:7A:AB:5B:15:56:63:1C:75
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019A5D1E02A5BC23C58D68AFEF7CC21ECB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 1063
Signing time: Fri 07 Nov 2025 07:00:39 +0000
Manifest this update: Fri 07 Nov 2025 07:00:39 +0000
Manifest next update: Sat 08 Nov 2025 07:00:39 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: U0eNbXleRSCccMTNT+auZzcZ0O5+LI9uw/tlbDkPS7s=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:1e:02:a5:bc:23:c5:8d:68:af:ef:7c:c2:1e:cb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Nov 7 07:00:39 2025 GMT
Not After : Nov 8 07:00:39 2025 GMT
Subject: CN=7b223cdce3203e3c64b023b17aab5b1556631c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:e4:39:1e:76:1c:f1:36:94:59:b6:cb:a4:
f6:54:8f:8f:78:60:ef:ec:fa:80:2e:49:e3:28:10:
04:71:53:5f:21:72:18:23:c0:ed:b7:4e:77:c8:2a:
79:65:b3:f7:1b:87:8c:a8:97:d4:f0:ba:0e:25:05:
37:1f:17:3d:e1:dd:41:58:f5:f6:5b:2e:31:3f:e2:
ba:c6:ba:79:29:3c:1b:a9:12:e4:c9:6e:50:0a:2b:
77:cc:c8:dd:0f:45:05:7a:68:8e:e1:31:9f:59:bb:
62:07:50:78:4e:9e:ec:21:1a:fd:aa:e8:c8:98:86:
dd:7b:38:ba:0b:cf:da:1d:09:70:42:8a:53:b4:c8:
bd:7a:9c:10:1b:f2:df:d9:4b:eb:00:c9:69:ae:64:
07:a4:5e:62:fe:7f:04:ae:f5:03:0b:d9:55:89:e6:
7a:50:13:d5:b4:a7:5e:ae:51:ef:72:34:e8:26:98:
0b:c1:99:32:d2:09:28:eb:6f:0a:03:1d:66:17:25:
57:62:95:4a:47:ab:e8:b7:6f:f7:27:96:5c:75:34:
6c:ab:ee:70:95:49:38:66:59:05:8b:68:c7:9c:a8:
a0:68:86:36:fb:18:36:54:1f:b9:f0:93:f0:ac:f9:
20:33:01:47:00:01:17:3b:e5:65:4d:0d:7a:7b:1c:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:3C:DC:E3:20:3E:3C:64:B0:23:B1:7A:AB:5B:15:56:63:1C:75
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:32:d3:be:78:24:44:6b:72:cf:78:4f:c0:2d:3d:c2:c5:
01:4b:3b:be:85:0c:3d:01:e8:bb:9c:72:97:f1:07:7d:15:d7:
bf:6d:bd:64:24:74:02:3d:34:55:59:54:c6:77:61:0c:0c:07:
48:f3:56:a2:ec:1a:89:e7:b4:d7:94:a7:d7:57:f4:1b:8f:85:
fb:ae:ef:44:dc:9c:3d:db:72:45:d7:0c:07:5c:8a:a0:8e:4d:
72:d6:8d:af:71:86:0c:bd:fc:73:17:fc:a5:f3:77:18:40:cf:
6a:c5:4e:2a:41:d0:7a:65:4e:e0:08:54:4e:3f:8e:b8:4b:a2:
3c:10:e4:cb:52:8a:c5:9e:00:dd:07:01:43:eb:0d:f7:e4:7d:
64:76:36:54:ff:66:c3:00:45:e5:b3:b8:cf:d5:9f:3c:9c:c8:
99:4e:13:32:cf:2e:c7:68:40:17:80:87:4c:12:45:17:c4:8b:
39:bb:24:b6:8c:1f:7e:e6:b2:0d:e7:18:8a:75:24:46:fe:ea:
3a:74:ee:e7:d4:ba:55:42:cd:ee:64:c8:fc:c3:f0:2b:db:20:
b3:60:ec:03:75:8d:78:9a:6c:4e:79:e1:87:b5:ff:78:1b:c5:
d2:bb:95:94:af:3c:b7:a4:ca:bf:ff:7c:37:2b:41:7b:89:cb:
f5:2f:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 08:20:19 2025 by rpki-client