Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: jIC4RBDXd/OaDGLlnWWLLrZ0zMKyGmWlJ5xqaKT+tHg=
Subject key identifier: 95:F0:02:F3:27:85:72:FC:B8:AF:E1:2E:B1:5C:44:57:89:61:72:29
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019A28551E2A4FC3F13E6CAEA8E49802314B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0FFD
Signing time: Tue 28 Oct 2025 01:00:58 +0000
Manifest this update: Tue 28 Oct 2025 01:00:58 +0000
Manifest next update: Wed 29 Oct 2025 01:00:58 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: XvprtEDM/HI3ZJjEbuldVRKP/QEVU26jleqtGMGghmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:1e:2a:4f:c3:f1:3e:6c:ae:a8:e4:98:02:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Oct 28 01:00:58 2025 GMT
Not After : Oct 29 01:00:58 2025 GMT
Subject: CN=95f002f3278572fcb8afe12eb15c445789617229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:ff:3b:f8:5c:c7:e4:96:f4:9c:1c:47:ef:
e0:db:19:48:f8:71:af:fa:68:ff:df:1a:92:99:03:
8f:7b:ee:4a:54:df:51:f4:4e:39:f5:b9:de:ee:80:
d5:73:2a:b8:69:ed:8b:55:bf:50:f7:7c:e6:0c:96:
f2:0c:61:1e:28:5e:34:c5:0f:3e:f8:10:96:52:fe:
82:ee:b3:90:73:84:19:7a:1a:df:be:12:f0:53:39:
1f:15:c2:73:74:3a:23:ba:b6:d9:24:b7:5b:49:00:
03:66:c1:48:da:3e:a3:0c:a1:96:a4:92:ee:82:ea:
f2:a1:b7:19:9c:04:a3:a4:82:76:7a:01:21:4a:fe:
05:e5:b6:82:7e:18:c6:36:e3:75:e3:e8:10:ca:0b:
b9:ea:b3:4d:8f:4e:04:89:5e:18:73:3d:f0:ff:65:
91:91:0a:cc:bd:a2:4b:3f:06:46:6e:2e:13:67:0c:
00:6c:81:41:70:d5:73:87:55:48:de:a3:24:e3:f4:
16:b1:03:e9:5f:0c:fa:e6:6a:85:a6:e1:96:41:b7:
ff:25:b9:c4:c5:24:e4:3e:59:de:9e:d7:be:40:e6:
3a:71:d4:8d:18:19:42:df:e6:0d:e7:9e:48:48:d9:
ad:95:33:35:cb:1f:c0:92:8d:53:ae:6a:6d:9c:90:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:02:F3:27:85:72:FC:B8:AF:E1:2E:B1:5C:44:57:89:61:72:29
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:c1:5f:80:11:7d:a2:65:d7:fe:15:30:59:c1:e9:0f:bf:
56:e9:de:03:d0:5b:f5:8b:38:0b:c5:09:f3:fb:67:7f:48:b7:
c0:f3:d0:de:27:6e:5a:0b:eb:45:81:34:5d:eb:3c:84:6a:dd:
8e:88:75:97:76:f2:b5:1f:77:af:35:06:0d:90:ac:0d:44:29:
62:00:5d:73:48:11:21:44:6f:f5:aa:f5:c9:84:fe:20:35:9c:
8a:0c:5f:c7:37:da:88:60:ba:95:77:8d:a3:55:32:3c:37:6b:
80:7c:9f:9b:b3:a7:6e:2f:a4:13:96:0a:93:8c:c4:4f:eb:62:
e3:a3:2d:d2:ec:06:1f:c0:91:09:55:06:ef:b5:ad:a6:28:cf:
9c:9e:1d:cd:4d:60:8c:63:f8:e4:c9:98:1f:63:23:8e:1c:13:
62:da:ed:85:cf:75:95:05:22:28:71:57:00:60:da:c7:40:ae:
d6:19:e3:6b:cf:76:3b:b4:65:34:26:e2:d9:70:67:b4:a3:9d:
34:4b:c4:3d:0a:e0:14:03:46:5e:ed:da:28:18:5c:54:60:d9:
91:31:e1:f3:a6:53:40:79:30:fb:7c:86:14:6a:70:cd:2e:ce:
19:78:78:c4:a9:f6:9b:ca:0a:c2:52:04:27:6e:e5:a0:83:d7:
e2:f1:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:49:54 2025 by rpki-client