Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: jmhWFU4faYwiE0bgT5uT/eLK+V9rFgBgIZ1dOmLLjcc=
Subject key identifier: 4C:BA:63:59:78:C3:15:1B:10:1E:17:3E:F4:78:07:49:41:4A:91:15
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019938DF6534017CAE586AE16AAE142D2E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0F81
Signing time: Thu 11 Sep 2025 13:03:08 +0000
Manifest this update: Thu 11 Sep 2025 13:03:08 +0000
Manifest next update: Fri 12 Sep 2025 13:03:08 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: omVq76Qe57O6pBtaeyCSVYQHJMRUzAXL5G4o0IgyKg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:65:34:01:7c:ae:58:6a:e1:6a:ae:14:2d:2e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Sep 11 13:03:08 2025 GMT
Not After : Sep 12 13:03:08 2025 GMT
Subject: CN=4cba635978c3151b101e173ef4780749414a9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:96:bf:0d:d1:dc:bf:1a:e2:83:8b:1e:b7:
b6:76:5e:c8:36:fc:27:fc:59:2c:72:80:71:07:c2:
96:a6:2a:dc:88:06:91:fe:61:b3:c8:21:11:63:b4:
86:6f:ba:8f:71:4a:cb:68:80:d1:1e:7a:0f:d3:01:
7c:74:12:61:18:71:00:35:d1:98:10:60:32:af:a7:
7e:e7:b9:b7:73:ee:bd:39:25:9d:79:a0:6f:32:69:
55:4b:88:cf:d0:9f:b5:5f:18:f3:c2:f7:8d:ff:60:
b6:ce:0c:f9:be:41:fa:30:de:28:63:18:3a:24:7b:
cd:a2:61:e4:6f:5b:cf:47:dd:4b:44:ef:46:d1:81:
35:3c:1e:aa:b3:85:5d:ea:fa:7b:88:d2:24:a4:7d:
41:6d:bc:34:b6:51:d4:2d:ef:4c:6a:d6:25:1a:5e:
bc:25:92:07:11:20:53:9b:76:c0:35:5c:3b:dd:b1:
cc:8c:7b:96:47:24:94:ef:40:04:2b:c8:11:58:45:
3a:bd:e0:b0:78:3d:b8:b8:2e:45:72:08:82:e5:22:
c6:5d:e0:bf:64:52:ca:79:c2:f5:ab:f9:a7:a9:0d:
b2:08:59:34:0e:b5:70:f3:76:d0:e5:82:fd:82:c9:
1e:a0:67:39:67:cf:0d:94:59:64:ab:54:24:2b:8a:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:63:59:78:C3:15:1B:10:1E:17:3E:F4:78:07:49:41:4A:91:15
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c0:15:99:5b:4a:0b:98:52:a3:cc:ce:5c:9a:fc:ab:57:c6:
28:c6:7d:9e:a6:b5:ba:7e:04:d3:fd:27:c6:6d:0d:5f:34:23:
af:4c:51:45:b0:d7:1c:3d:21:e7:b6:d7:e3:8c:25:e2:30:5d:
d2:12:fc:1e:b7:11:60:31:3e:bd:09:a8:f1:cd:17:eb:4f:43:
bb:15:17:7f:5d:11:d5:b7:74:57:3b:48:70:25:0e:ac:ec:bc:
76:f3:aa:82:83:e7:25:42:20:b8:b7:32:be:11:d7:4b:0b:d1:
7e:50:d6:0f:73:50:75:3f:63:0c:c9:3e:48:cd:0d:f6:2e:c1:
99:46:df:05:2d:7e:3a:a7:65:61:5e:a4:0c:c5:62:9f:a0:b8:
b5:09:a1:5c:b4:04:be:f4:30:3b:fb:39:31:ba:73:bb:6b:cd:
5a:f2:cb:d0:21:5f:22:8c:3e:08:f7:1b:69:2e:69:d6:49:f2:
e0:50:5b:51:50:83:bd:80:a9:6c:e0:cc:05:72:21:15:4b:f8:
0d:2d:a4:22:c2:7a:75:73:bf:19:56:73:cd:1a:d0:1f:ae:12:
b9:db:10:19:21:00:59:99:e0:10:59:94:29:e0:a7:31:25:2c:
40:83:12:9e:d0:c5:e5:b3:d7:d5:02:fc:2b:c8:dd:d8:ef:f4:
86:51:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:20:00 2025 by rpki-client