Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: ys7UlBZaS0pmGT6maskJtsp8uu4qcdU43FVoJf1a9mk=
Subject key identifier: 67:00:F5:5E:E9:72:51:16:8E:6B:29:F6:BE:93:1B:51:09:0E:9E:E3
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 01993537C7CFFF428CECF38D4015537D63BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0307
Signing time: Wed 10 Sep 2025 20:01:12 +0000
Manifest this update: Wed 10 Sep 2025 20:01:12 +0000
Manifest next update: Thu 11 Sep 2025 20:01:12 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: iRN0QdSor28k86jgkTC3db94TlkSKYdK2/SoVZ4l2og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:c7:cf:ff:42:8c:ec:f3:8d:40:15:53:7d:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Sep 10 20:01:12 2025 GMT
Not After : Sep 11 20:01:12 2025 GMT
Subject: CN=6700f55ee97251168e6b29f6be931b51090e9ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:92:5f:0f:75:fb:37:f0:73:dd:1c:9a:ed:
13:82:0f:fa:37:b1:9a:20:70:16:96:34:a0:b6:23:
1c:5b:8a:e1:a8:68:5c:48:2f:84:cc:3c:b6:f4:73:
d0:d6:9b:bf:37:05:f7:80:79:79:40:a5:c2:4e:ca:
a7:fd:fb:55:ad:31:85:aa:7c:28:30:70:16:13:2d:
77:17:d4:7e:b2:3d:c1:77:e9:d8:f9:2c:cb:22:cf:
63:88:d4:4e:3b:9a:88:6e:55:5a:f6:d8:cf:7c:71:
c9:61:c9:6f:06:8a:c0:ac:76:af:0f:2e:47:9c:92:
39:dd:7f:a8:da:ec:17:71:f0:31:a6:9c:53:87:e1:
64:3d:75:eb:10:03:f3:69:94:33:dc:3d:1c:f4:25:
72:55:ce:72:c7:70:66:d2:02:f8:0c:4a:e4:f3:87:
20:f6:d9:4b:ae:d4:86:81:50:30:c9:f5:f9:1b:cc:
1a:e5:cc:8e:24:31:92:b3:fd:0c:c5:32:1f:07:9e:
84:9a:48:74:39:82:05:1a:3c:8b:c3:9b:1e:e1:3c:
f3:b9:47:36:44:f5:b5:ef:b4:76:86:63:b9:3a:2d:
43:d3:16:74:19:ab:25:6c:07:88:00:8a:5e:3b:e5:
01:0d:50:0f:dd:24:9e:a6:5e:35:8d:77:d3:1d:1f:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:F5:5E:E9:72:51:16:8E:6B:29:F6:BE:93:1B:51:09:0E:9E:E3
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:ae:b4:1c:8e:a7:b5:5c:fe:a4:31:2a:66:06:66:36:33:
09:83:e1:de:e9:fb:b5:25:60:ed:73:06:dd:c6:f0:a3:d0:fe:
f0:7b:ed:40:27:96:51:4b:14:0f:49:5d:09:97:5c:f3:e2:69:
3c:4f:45:9f:16:f9:93:93:e7:df:2a:a0:df:2f:30:57:08:2a:
7c:2e:9b:64:0b:10:cb:93:69:36:b2:98:8f:f2:f1:15:58:9d:
bf:ca:d9:03:28:0d:36:27:9b:07:7d:16:a5:65:78:a8:0c:00:
36:a4:22:ef:69:12:69:30:a4:29:b1:fe:bb:12:66:79:8d:e5:
aa:bd:5f:54:d2:83:5f:1a:a0:4f:08:7f:ae:ea:55:3a:73:f1:
ef:ed:72:c1:85:ca:dc:57:be:9d:22:f4:f8:53:3c:b5:68:11:
91:61:32:ba:93:d8:3d:88:09:8c:29:64:92:9e:e5:d7:08:2a:
ce:07:16:b8:d1:06:61:ff:36:65:be:05:dd:5b:7c:c6:ca:00:
56:72:aa:96:c8:41:1e:70:66:c2:a8:1d:63:13:10:e0:86:b7:
c4:0d:2c:5c:41:70:b6:2a:43:27:5b:c9:ab:64:8f:76:00:af:
dc:ab:e9:a7:18:99:cb:2e:21:f9:0a:2e:36:55:ac:89:c6:ca:
bf:0b:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:21:51 2025 by rpki-client