Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: 6v00sR7cL37Wza/+OAzgBEpauLOhUbwoM6kt3jD4fSs=
Subject key identifier: 67:B6:8F:57:DD:B3:F1:A4:53:7E:47:D7:49:5F:C9:9E:72:C6:B9:E4
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019A21E4C128A1CEB77B4CE1125CC5B2D166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0FB9
Signing time: Sun 26 Oct 2025 19:00:31 +0000
Manifest this update: Sun 26 Oct 2025 19:00:31 +0000
Manifest next update: Mon 27 Oct 2025 19:00:31 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: ymdgVXcO/SJ2Li3wV7FFgVTTz0S2ot9oj0p7mbs61zk=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:c1:28:a1:ce:b7:7b:4c:e1:12:5c:c5:b2:d1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Oct 26 19:00:31 2025 GMT
Not After : Oct 27 19:00:31 2025 GMT
Subject: CN=67b68f57ddb3f1a4537e47d7495fc99e72c6b9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3c:88:1a:82:22:d9:81:84:29:bb:37:74:13:
55:e0:63:27:66:46:48:cd:4b:28:e7:2c:b8:be:c6:
fb:b3:1f:2f:88:bc:24:cc:0f:b2:3b:0c:db:6e:e8:
98:3c:ce:3b:cb:7e:c0:77:0a:2b:44:63:90:b0:a3:
3e:e0:b2:40:13:dd:42:f7:4f:a6:97:72:06:fc:a8:
9c:fd:55:91:b0:8a:80:9b:68:d8:a5:2a:e6:d6:78:
56:9e:f6:ea:ab:25:aa:cb:19:1c:cd:59:8f:0e:5f:
7b:3d:ff:78:d7:07:31:36:da:f1:58:21:cb:fa:a9:
09:14:ee:82:7b:f6:a7:03:74:a2:57:4c:17:88:b0:
88:ea:d9:ef:e9:b3:43:d1:56:46:cf:7b:bb:2d:68:
85:19:85:a8:71:79:9c:ce:9c:3b:71:28:56:9d:92:
86:5b:8f:e4:69:2e:a2:47:58:76:d3:3b:05:59:d1:
37:2a:b9:7c:fd:00:9d:9b:ed:54:eb:98:c4:5d:b2:
26:14:c4:ee:c2:84:49:c4:75:31:6b:6d:a3:23:cd:
44:48:00:dd:5e:19:9c:12:d4:e7:a5:49:33:26:e1:
f9:fb:4e:75:d4:bf:b6:92:66:15:fb:3b:5e:52:7c:
43:a8:6a:f8:8b:12:ca:87:60:c6:5e:fa:8a:1c:44:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:8F:57:DD:B3:F1:A4:53:7E:47:D7:49:5F:C9:9E:72:C6:B9:E4
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:6b:16:44:e2:94:7a:9b:e1:01:e2:eb:a7:79:a7:76:d9:
dd:10:15:83:b5:a2:7d:15:7c:bf:d4:11:06:5d:5c:5c:a1:bf:
20:e5:fc:9e:ea:00:ac:03:cc:3c:09:97:9c:ed:ec:09:b1:72:
5c:8b:90:26:9e:9c:6d:35:a1:f8:cb:78:fa:fe:6f:9e:52:77:
a8:93:b6:a7:69:85:00:64:cb:13:12:ae:e6:46:32:2a:57:16:
a7:f7:f3:81:cf:02:bd:51:df:b5:8e:5b:06:1a:d8:cd:a5:92:
6b:2a:35:b7:6d:ea:91:88:7d:14:b1:4e:6d:24:5b:fe:cf:f4:
48:7e:f6:ab:c4:ec:b7:83:73:bd:c8:e8:7b:ef:e8:93:30:90:
d4:46:a6:be:4a:24:86:78:af:a6:52:97:dd:f7:f6:8b:7f:ae:
ea:70:bb:51:f9:4e:5a:57:d2:66:49:2b:6b:e7:62:47:e4:5d:
af:79:5b:05:b6:29:59:8c:75:da:db:d8:7c:3c:23:c8:a5:1d:
d1:80:12:4c:8b:73:2c:40:4d:ab:1c:03:bf:4e:43:ca:66:7d:
eb:73:94:b9:3f:ec:6f:c5:37:fa:4c:52:39:f4:10:21:30:c6:
cc:b0:72:d9:52:ad:8c:a3:7f:d3:23:fa:89:66:a7:ea:87:ce:
a5:ae:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:37 2025 by rpki-client