Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: wjTbGjYV4PSgZD1pf3NYCrm33/TZr7/zeadqYEX6cpY=
Subject key identifier: C8:95:F8:32:03:E5:6E:91:BB:7F:1B:B8:A5:0C:F1:AC:25:40:F7:95
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019A3120E5CC173AE9543D80D529972974A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 1161
Signing time: Wed 29 Oct 2025 18:00:30 +0000
Manifest this update: Wed 29 Oct 2025 18:00:30 +0000
Manifest next update: Thu 30 Oct 2025 18:00:30 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: hnlF6pwKt+Gd0G5YTlApahLxBdxsuJDlQ1/hwfAwCNE=)
2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:20:e5:cc:17:3a:e9:54:3d:80:d5:29:97:29:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Oct 29 18:00:30 2025 GMT
Not After : Oct 30 18:00:30 2025 GMT
Subject: CN=c895f83203e56e91bb7f1bb8a50cf1ac2540f795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:b5:45:0a:7e:61:1b:83:ae:cb:ca:69:df:
b7:ea:94:90:91:46:39:6d:61:72:97:db:f9:72:28:
27:87:99:11:c5:5c:0a:48:66:1d:74:cb:a8:88:28:
d7:ec:7e:b1:fd:36:94:52:0a:27:17:f0:1c:45:22:
e7:c5:d1:ce:3a:ad:66:22:18:7a:bd:53:61:a9:1a:
e2:f1:59:61:fc:79:ae:56:06:74:de:35:74:2d:3b:
9e:cc:bd:40:80:6f:e5:50:5b:23:35:18:bc:5c:af:
c8:ac:f3:c8:4d:94:fb:44:73:e0:77:26:ce:61:20:
6e:0f:53:94:53:8e:2e:36:ca:47:da:d2:9b:cd:73:
84:5a:4c:33:f8:8e:5e:97:2b:fb:50:a7:87:aa:df:
30:0e:0d:5e:5a:25:d4:fd:44:05:4d:5f:df:d6:db:
6c:1e:cf:38:14:1a:04:2a:5b:96:5f:96:48:da:34:
69:7b:d8:fe:ee:ef:50:7c:9b:79:e7:32:cd:6e:73:
ef:35:66:3f:cd:59:c3:30:99:7a:3a:ad:a3:c5:bf:
fa:5a:7f:25:cf:ee:4b:65:24:f4:6a:36:92:1a:cf:
ea:b5:34:3c:08:0e:16:6b:32:07:5a:2d:8e:e0:f6:
58:05:70:f7:cf:4e:22:10:62:f6:aa:b8:a7:15:05:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:F8:32:03:E5:6E:91:BB:7F:1B:B8:A5:0C:F1:AC:25:40:F7:95
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:e6:26:db:cb:5e:e7:3f:37:5a:d6:ab:65:f5:d2:e1:77:
69:65:d9:03:50:70:b0:1d:c3:93:58:58:86:b6:b5:50:b8:95:
1f:2e:32:22:34:3d:ca:48:16:92:c2:ef:7f:81:65:9c:be:04:
13:73:a7:f8:2f:9b:39:27:93:ac:64:90:07:c4:aa:b9:bb:c6:
d8:4b:03:7d:01:99:ac:be:7f:24:2d:4c:8f:8f:07:6c:6c:b5:
53:2b:63:fb:56:fe:90:9c:6e:83:95:83:a4:d9:5b:35:c0:0b:
1c:8c:d2:33:7e:4d:18:70:8c:de:78:b7:ce:38:80:85:31:da:
0e:23:1c:82:f0:7d:11:e8:3a:ee:ee:2d:a8:36:2c:ec:bc:5d:
ba:45:f1:fe:7a:02:82:40:78:7d:4f:03:12:15:84:bf:f4:3c:
9a:01:42:49:0f:f9:95:22:01:13:6e:e8:b7:3f:80:a1:2e:47:
57:66:9c:4e:83:0e:1e:73:93:03:4e:fb:a3:4c:1d:8b:1f:86:
31:64:fd:fc:2b:33:43:d2:83:47:ec:9d:a0:8a:bf:df:73:13:
a6:d1:3f:13:38:c4:e6:71:e2:39:2f:24:b1:bf:37:e3:89:15:
90:5d:77:a8:42:7e:2c:13:6e:fe:b4:66:fa:ee:cd:24:8a:ff:
5b:52:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:15:59 2025 by rpki-client