Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: A2DpjPeYB1D2XB6NKe/W08XgXZ4M63442qKWtRJVz+M=
Subject key identifier: 2D:13:B4:31:B3:FA:8E:D8:D4:16:06:BE:31:A4:3A:D7:16:D7:D4:BD
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019A71B8F4A2C94160DA5A1091FC683CB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 1095
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: RFT0Qyim+lDQgFQqYZFjJ0OanBWqE53NktWxDK5pbik=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f4:a2:c9:41:60:da:5a:10:91:fc:68:3c:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=2d13b431b3fa8ed8d41606be31a43ad716d7d4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:57:c7:71:49:db:d0:1f:e8:fd:1f:05:af:
3d:17:54:2f:af:84:b2:30:c9:3f:17:27:74:32:9e:
99:a6:cf:45:79:a2:86:c3:02:8d:8f:c6:da:c2:d5:
f1:e5:81:75:cb:cf:de:2f:ba:b2:ae:11:42:90:6a:
0d:35:bd:c9:fa:96:31:52:94:25:ed:c4:45:0b:4f:
0e:da:0d:23:f9:e2:f1:4e:75:26:aa:6f:17:7c:b7:
35:40:af:4f:54:2a:67:bc:ea:47:68:a5:65:2f:4d:
44:33:80:0a:7d:10:bc:85:54:83:08:83:22:b3:a0:
bd:92:e9:75:8a:b4:be:44:48:f3:d2:af:aa:42:74:
e0:2e:cc:77:66:e4:6f:6a:2d:44:dc:f3:7d:6a:bf:
3b:3e:59:8d:82:05:c9:09:7b:5a:67:5e:82:07:aa:
3f:1d:77:f0:c6:89:7d:01:e2:a6:72:4f:4d:4a:ed:
f7:bd:33:81:85:5b:f4:79:bf:d0:96:24:a3:92:d9:
86:2a:03:fc:7b:7a:2b:93:3d:cd:41:b1:4c:e0:74:
ba:98:b6:86:5c:9f:cc:10:f3:e4:4e:09:41:d3:21:
70:17:2d:ae:10:a2:1b:6a:dd:35:c5:b8:65:21:23:
19:e5:46:2d:96:e0:82:be:c3:bd:10:cf:9c:7b:a0:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:B4:31:B3:FA:8E:D8:D4:16:06:BE:31:A4:3A:D7:16:D7:D4:BD
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c0:ce:ae:de:0c:d5:b6:37:00:db:37:82:ee:36:6e:51:38:
be:09:fb:ff:3e:43:6c:d3:10:ba:42:fd:53:41:44:73:d8:4d:
af:b6:6f:39:f7:12:b1:4e:f5:ed:a9:c8:f5:d1:c3:b5:f5:23:
7b:97:e1:31:25:cb:69:26:ca:b2:1d:ee:b2:3d:26:d6:53:a0:
2a:72:8b:c2:de:45:0b:ba:8e:ea:e7:d2:e9:83:f1:1e:ba:6e:
22:92:b1:50:d6:cb:df:c4:9c:5c:f6:fe:47:75:e0:d7:24:8a:
f4:9f:f8:b8:72:fc:b5:c3:5f:75:ec:cf:c5:21:5e:e0:c1:41:
28:9e:b9:e0:af:a0:2f:ed:c4:be:a9:44:ae:7f:21:3f:e7:bd:
f4:ad:7e:0c:27:33:92:79:be:97:5c:45:ac:ca:48:9c:bf:a0:
d5:1c:2d:70:c0:cb:b5:f2:64:e2:3a:40:48:29:2b:f3:fb:98:
01:1d:b9:95:cb:54:cf:4e:60:3d:86:7e:f8:c8:b8:11:96:5f:
ad:eb:cd:f4:a2:57:9e:d1:f0:4d:c1:cc:d2:a7:30:c9:55:bb:
88:84:75:ff:19:70:a4:f7:5e:fc:fe:07:bd:39:cd:82:9d:7b:
49:9f:97:74:17:ee:47:6e:f0:21:60:74:b7:eb:90:82:10:e3:
6e:46:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:31 2025 by rpki-client