Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: sLb5drnTBZ/j2SokTmMfm/kXEH/eN04qvPWDM3bYzc0=
Subject key identifier: 1C:FB:7D:3E:3B:AB:E6:28:0B:A3:3F:20:5A:BB:7F:C9:2D:11:F6:A2
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019933141BD68D5D33C4760EE2388ABD8DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0FF0
Signing time: Wed 10 Sep 2025 10:02:59 +0000
Manifest this update: Wed 10 Sep 2025 10:02:59 +0000
Manifest next update: Thu 11 Sep 2025 10:02:59 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: oZE9QOkXbK248J00btbkn/WrD2YgRdlwS2zsYsPnh/M=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:1b:d6:8d:5d:33:c4:76:0e:e2:38:8a:bd:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Sep 10 10:02:59 2025 GMT
Not After : Sep 11 10:02:59 2025 GMT
Subject: CN=1cfb7d3e3babe6280ba33f205abb7fc92d11f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:8b:d2:71:eb:0f:65:d0:e2:02:6b:14:d6:
64:7c:34:29:b2:d2:63:f3:a8:f0:bb:ff:f3:23:bd:
6e:6d:a6:af:14:97:cd:5e:5c:88:88:50:fa:d8:c8:
d1:6d:2f:c3:f7:b7:02:68:e0:86:10:43:32:d0:39:
05:1d:d1:cd:51:e2:82:ec:04:1a:da:7d:5b:e7:35:
9b:2a:65:3a:85:39:60:d5:7e:00:31:fd:00:a7:30:
0a:80:13:69:cb:97:e1:05:6a:25:df:e6:22:47:a5:
c7:bb:ec:e9:9e:77:1e:13:62:ec:a3:ad:a0:e5:68:
7b:b0:d1:36:65:d3:82:86:37:6b:cc:11:0b:30:75:
e3:cf:1f:9f:65:5f:04:a8:c1:af:b9:84:10:fd:bd:
6a:e9:c4:95:d9:6f:ed:89:c4:30:cb:5a:05:d3:48:
aa:8f:f1:46:e2:07:04:20:53:bc:b2:04:27:c8:6b:
ad:bc:69:d3:12:01:16:27:55:53:d8:98:d4:01:9e:
07:55:11:c4:0a:d6:9b:cb:b9:14:b1:b6:2d:da:ac:
7d:dc:c2:4a:c7:ae:84:74:ee:0e:02:49:01:97:81:
4d:08:62:88:b7:dd:5e:cd:15:25:32:c2:3b:60:d6:
9c:cb:2b:2b:95:ef:a9:86:2b:e5:c9:9b:64:a2:62:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:7D:3E:3B:AB:E6:28:0B:A3:3F:20:5A:BB:7F:C9:2D:11:F6:A2
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:48:9f:fc:e7:64:83:8c:35:69:5f:4e:65:d8:5e:93:7a:3c:
c2:1c:d6:4d:77:04:b8:e7:9c:9d:88:13:78:aa:5e:dd:30:6b:
13:eb:48:80:2a:ce:e9:e1:80:ad:96:74:2b:50:70:53:36:33:
02:19:53:29:7b:1a:ed:32:34:39:13:9d:59:fe:e2:29:86:bf:
5d:a7:b1:08:9a:d2:a2:ac:f9:4e:e5:33:67:10:6d:e6:19:9f:
9c:80:2a:26:f0:02:4a:2a:dc:3b:34:35:a8:f0:04:bd:65:40:
e0:d4:31:f2:97:66:5d:d8:1b:e7:7a:c6:2f:af:ac:47:39:55:
2c:73:c9:25:56:3a:5d:ac:9a:d5:8e:22:47:c7:ed:9d:b7:b5:
55:db:9d:47:9b:ca:22:b7:3d:c3:a7:bc:b4:6b:44:05:bb:46:
bb:ae:c1:73:dd:18:12:99:9b:b4:f5:dd:5b:d4:03:8f:5f:36:
03:63:ed:9e:c3:f8:9b:8e:d7:a7:23:0f:e9:04:19:ce:ad:38:
48:ea:5c:99:d7:94:e0:c7:6d:13:b0:51:e2:bc:6a:fc:9d:cf:
f8:89:ed:ff:9d:dd:cd:60:82:d5:3e:b7:7d:93:4a:6b:42:8b:
fa:32:80:64:b0:29:a0:14:07:14:3c:24:03:b5:2d:c4:9a:c1:
8d:e5:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:41 2025 by rpki-client