Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: fGqFuHagsmXUQp2x8zCg6JOUw2OKpp8vTLZS7UvzA7M=
Subject key identifier: 44:FC:70:71:8D:BA:57:69:BC:9F:4F:41:EB:65:16:3A:04:2D:6D:FD
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0199586839A78356EBE16D12F7775834719D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0FDC
Signing time: Wed 17 Sep 2025 16:00:49 +0000
Manifest this update: Wed 17 Sep 2025 16:00:49 +0000
Manifest next update: Thu 18 Sep 2025 16:00:49 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: I6EOnSw7eFx9YGrpU19V2I6Sy40xyAgl8ugevoOc/pA=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:68:39:a7:83:56:eb:e1:6d:12:f7:77:58:34:71:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Sep 17 16:00:49 2025 GMT
Not After : Sep 18 16:00:49 2025 GMT
Subject: CN=44fc70718dba5769bc9f4f41eb65163a042d6dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:b3:a9:19:9f:f4:26:33:ec:8f:8e:82:bf:
b6:f8:f9:d0:92:cd:88:65:18:2f:6d:22:64:05:49:
b3:ca:a6:ae:17:c3:65:7c:5f:6b:c0:1e:b7:99:76:
de:c8:a0:3a:aa:0f:29:b9:c9:db:15:ed:b0:a7:ff:
cb:77:17:fb:be:96:7c:99:3a:72:38:cf:69:f0:ef:
f0:90:9a:62:a2:81:67:ef:0e:50:18:68:ab:6c:87:
d2:1e:c9:9e:a1:87:13:49:3e:30:44:85:d8:9f:e7:
12:c2:75:c6:6a:ad:28:e9:e3:ae:dc:78:5f:c5:94:
66:45:ea:e0:ca:28:50:ab:4b:b7:9f:c6:ae:8f:78:
e1:ab:c6:61:1f:f7:bb:10:aa:2e:d0:40:f9:36:d0:
04:8a:ce:58:29:a0:30:0d:cb:ec:77:79:3e:aa:13:
de:97:d2:13:12:53:24:02:ec:4a:9e:76:cd:8b:10:
94:c5:95:43:54:a4:39:a2:c5:2a:64:54:5a:34:72:
4d:62:79:64:b4:32:81:15:f9:d5:52:ef:10:fc:36:
09:cb:7f:2b:7d:7f:0a:3d:18:38:f4:c9:11:86:5d:
b3:65:e4:1d:5c:18:52:21:f5:c6:c5:53:9e:05:53:
6d:80:06:e5:2e:23:ed:02:28:43:d4:f7:da:09:3a:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:70:71:8D:BA:57:69:BC:9F:4F:41:EB:65:16:3A:04:2D:6D:FD
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:a1:1d:96:89:9b:e9:9f:26:24:8d:f9:76:73:8b:57:4a:
bd:1f:a3:2f:94:b3:c8:48:04:0f:97:23:a1:61:98:c4:4d:47:
98:64:da:2c:46:26:ff:83:db:a2:fa:50:6c:42:45:4a:e4:e3:
69:8e:01:e5:a3:61:ea:71:4e:18:7b:1f:52:4e:7e:b2:b1:21:
a8:fe:b1:56:8f:83:b0:32:54:63:03:8d:54:e1:c8:6c:10:77:
d8:74:7b:33:a2:64:10:4e:6c:37:f1:01:91:02:2a:0d:94:04:
ec:83:47:e3:8a:56:d5:3d:e4:84:55:bc:d5:2a:cc:2c:11:9d:
74:93:c0:7d:d2:51:72:52:bf:cf:02:cf:20:84:6a:69:f8:2a:
63:91:45:33:11:0c:d4:29:7e:e1:23:97:bc:9d:3e:25:66:7d:
48:f6:68:7c:cc:c9:96:1f:3b:a8:45:55:d1:8e:c1:3f:dc:38:
d1:1f:80:f0:97:79:7f:f3:e0:00:6e:b3:53:3e:ce:d2:ae:00:
5d:de:af:a2:d0:0d:02:ce:7a:5b:ff:a5:d4:f0:78:73:42:a5:
6f:1f:b9:e1:19:ce:3a:6a:07:94:f0:0a:0e:90:e2:82:ee:c1:
f2:8a:5d:95:e2:26:ef:b2:d7:b2:c2:7e:28:a8:cf:a6:6f:f5:
c1:3e:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:54:48 2025 by rpki-client