Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 7bTmX9VKHfkNg6pvrXaEF+mX4+j0jmi1HLSfUfrHuug=
Subject key identifier: 08:B6:53:75:2A:A0:7C:CA:B2:78:61:F2:B7:5E:50:E3:A8:A0:49:32
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 0199375C90B5BA4840F1C1250BF4F30493D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 160E
Signing time: Thu 11 Sep 2025 06:00:37 +0000
Manifest this update: Thu 11 Sep 2025 06:00:37 +0000
Manifest next update: Fri 12 Sep 2025 06:00:37 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: Y9Y/NnF2Pc7TT1gH9OIl9w7Ha8tYVe4euqMpmI0QXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:90:b5:ba:48:40:f1:c1:25:0b:f4:f3:04:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Sep 11 06:00:37 2025 GMT
Not After : Sep 12 06:00:37 2025 GMT
Subject: CN=08b653752aa07ccab27861f2b75e50e3a8a04932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:9f:14:37:5d:f7:02:dd:88:48:b0:c4:9c:
c7:61:dd:f8:e1:61:4f:e3:20:c6:b4:10:05:ef:4f:
3b:fa:88:53:4d:5e:76:47:d1:e6:69:48:2f:a9:d0:
e5:bc:78:1c:66:49:9e:70:21:a2:79:a1:dd:0e:4c:
b7:cc:98:b1:b8:a5:02:20:cb:48:bc:e7:56:fd:38:
fb:f8:95:e6:9c:95:15:4a:40:85:57:46:ef:e5:60:
89:d0:7b:a3:39:10:07:c2:31:1d:cb:03:fc:8a:db:
36:0e:0f:51:6d:5c:6e:b9:16:75:40:96:d6:29:0e:
34:87:d4:fc:bf:cb:73:71:2a:dc:41:9f:05:48:f4:
02:88:b9:a4:ab:7c:a4:30:da:fa:54:fd:04:70:c8:
1b:d2:cf:89:81:7e:a4:dd:62:2b:2a:b8:5a:66:7e:
23:c0:e2:df:6c:8e:a1:f6:aa:2d:7a:55:f1:42:9f:
50:14:20:65:e5:6b:3e:2d:f7:dd:4e:03:44:ef:39:
1b:05:bc:b5:1f:51:f4:ed:6a:52:3b:6a:3f:fc:99:
7d:ac:fe:39:0e:b4:bc:8e:65:e8:6c:63:6b:5c:2e:
64:8b:7b:2c:72:79:f6:6d:6c:cd:0b:48:54:8c:a0:
15:73:2d:ef:e1:41:18:ab:ed:13:27:a7:ad:4d:fb:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:53:75:2A:A0:7C:CA:B2:78:61:F2:B7:5E:50:E3:A8:A0:49:32
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3f:4d:ec:36:1f:eb:76:ba:7e:fa:1f:af:ef:ea:db:90:13:
c4:42:2f:bb:96:55:3a:2f:fa:d5:1c:fd:ea:c7:48:37:87:c0:
0b:55:87:2f:43:ea:f8:44:96:73:82:f2:ed:ed:b4:9c:e0:9f:
ec:57:14:d8:59:4f:73:4f:cb:85:85:60:dd:4c:c1:dc:13:e3:
fd:2c:ee:a1:5f:15:0d:b3:0e:52:b2:07:a5:f3:23:e7:f2:3b:
fc:3b:98:76:f3:fd:0a:c3:ff:c7:8f:2b:4d:7f:76:45:1c:82:
a0:b8:4d:48:e7:d5:08:cd:66:5b:c4:aa:d9:7e:02:88:94:7e:
66:93:90:26:89:b4:41:c8:17:eb:b6:80:11:94:6d:b3:8d:bf:
56:63:16:a2:72:4e:6f:cc:9c:cf:e3:8e:7e:f3:5c:3f:40:43:
e9:0e:f4:dd:c5:81:e1:07:8b:97:d7:0b:d6:d7:cc:9f:56:53:
f7:cc:48:dd:a2:2d:33:d1:a0:73:8b:ea:2c:75:08:3b:6f:2a:
87:42:37:9e:18:ae:64:e8:5a:57:28:47:d5:74:0e:84:73:da:
d7:d7:93:17:29:9e:ff:ce:fc:6f:c4:80:d7:42:91:a0:71:aa:
56:7a:70:e2:a3:fc:37:63:5b:32:9c:fc:07:be:c5:74:66:aa:
b6:3d:87:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:16:48 2025 by rpki-client