Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: remmeqx/5BlSee5zUFe3ynTbaEkThbQ9qZSaKNt3gpo=
Subject key identifier: 17:DA:52:C2:BE:FB:F0:3A:A1:DF:35:14:E3:FB:BA:F1:CD:82:0E:1D
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019A2109041A6D753145675AD80CBB9FDF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 15:00:30 +0000
Manifest this update: Sun 26 Oct 2025 15:00:30 +0000
Manifest next update: Mon 27 Oct 2025 15:00:30 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: rU1ySiG4PbWjRLCkHcQ/OyrxyRLStZT4xWQgqXaqTZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:04:1a:6d:75:31:45:67:5a:d8:0c:bb:9f:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Oct 26 15:00:30 2025 GMT
Not After : Oct 27 15:00:30 2025 GMT
Subject: CN=17da52c2befbf03aa1df3514e3fbbaf1cd820e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:50:d8:82:06:5b:9e:b9:eb:88:7c:31:ac:
89:6f:df:d1:fc:79:d5:5e:be:af:46:9b:18:88:85:
c8:fb:f5:05:05:51:94:1a:c2:5d:84:7f:a0:c7:a2:
81:5b:df:f4:3b:09:ae:01:db:07:75:32:72:41:b3:
97:b5:a2:a1:63:33:28:86:ae:78:9c:77:b8:a5:ed:
c7:c7:3a:ab:fd:96:6d:87:08:2a:f4:ec:f0:a8:ae:
16:95:c1:e4:dc:8d:3c:86:d0:56:01:3d:66:7c:56:
a9:15:e6:13:f7:a7:3e:30:e1:85:a8:77:f7:2d:43:
ee:c9:87:1d:5f:60:82:ea:bf:7f:0f:85:41:07:e0:
20:9b:91:64:ae:ef:03:35:87:8e:b9:78:10:c5:76:
a6:55:b6:cb:93:66:b9:0e:a4:97:91:3f:4d:43:ac:
48:41:ef:09:cc:0e:5f:fb:3e:09:a1:94:86:66:21:
43:38:6c:f2:f7:3a:a3:d6:2e:d2:60:f1:0c:02:d8:
2a:96:d6:97:8a:05:de:99:ab:c2:74:57:57:8a:5e:
c8:07:de:d3:c3:e4:66:4f:98:4c:47:f4:e2:d9:9c:
bf:1d:03:f2:9e:e3:2d:4f:da:04:ce:59:b7:26:37:
92:8a:23:7e:d9:d3:ce:f3:c3:c0:5a:27:f1:1a:c3:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:52:C2:BE:FB:F0:3A:A1:DF:35:14:E3:FB:BA:F1:CD:82:0E:1D
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0b:d7:e4:89:da:5b:a8:8d:49:56:32:23:0e:ee:24:c2:a7:
31:42:80:b0:93:d3:bb:84:2a:a2:10:dc:bd:2b:e9:b1:7e:04:
c2:12:f8:50:57:cb:e4:99:4f:1e:53:15:f0:c4:bd:21:d7:48:
ad:7e:44:a5:26:11:33:86:d0:ff:8f:16:0f:86:f9:e3:cd:01:
3b:d7:39:ec:d3:9e:53:3d:d6:ee:be:2b:d2:30:75:53:bf:a5:
42:31:4c:11:da:41:59:a5:4d:fb:36:ae:cd:7e:0c:4c:d5:21:
38:b6:f0:96:d1:59:fa:06:c7:fa:de:7b:9b:c1:e1:8e:47:6f:
9a:f6:e9:d1:be:09:5a:3e:a8:dd:f8:08:37:b7:cc:56:dd:44:
17:83:0c:62:33:65:4b:a5:42:73:14:5b:1e:af:73:d2:c8:d7:
b8:ab:52:5a:d7:39:81:03:70:d7:c4:f4:b6:95:74:4e:53:19:
e6:ed:0b:59:99:3e:24:c3:2e:29:68:9d:83:a3:0f:ae:50:e2:
8d:d4:7d:b3:d3:19:30:17:8a:04:9c:e6:97:6e:80:f4:c4:9a:
49:49:fe:1b:18:41:52:ed:59:4a:d0:84:77:18:25:62:41:33:
d9:33:34:57:e3:0e:b3:d0:e8:bf:fa:4c:72:a7:39:5e:4a:e0:
14:9e:1a:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCQQabXUxRWda2Ay7n99OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjUxMDI2MTUwMDMwWhcNMjUxMDI3MTUwMDMwWjAzMTEwLwYDVQQD
EygxN2RhNTJjMmJlZmJmMDNhYTFkZjM1MTRlM2ZiYmFmMWNkODIwZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BZQ2IIGW56564h8MayJb9/R/HnV
Xr6vRpsYiIXI+/UFBVGUGsJdhH+gx6KBW9/0OwmuAdsHdTJyQbOXtaKhYzMohq54
nHe4pe3Hxzqr/ZZthwgq9OzwqK4WlcHk3I08htBWAT1mfFapFeYT96c+MOGFqHf3
LUPuyYcdX2CC6r9/D4VBB+Agm5Fkru8DNYeOuXgQxXamVbbLk2a5DqSXkT9NQ6xI
Qe8JzA5f+z4JoZSGZiFDOGzy9zqj1i7SYPEMAtgqltaXigXemavCdFdXil7IB97T
w+RmT5hMR/Ti2Zy/HQPynuMtT9oEzlm3JjeSiiN+2dPO88PAWifxGsNC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfaUsK++/A6od81FOP7uvHNgg4dMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQvX5Ina
W6iNSVYyIw7uJMKnMUKAsJPTu4QqohDcvSvpsX4EwhL4UFfL5JlPHlMV8MS9IddI
rX5EpSYRM4bQ/48WD4b5480BO9c57NOeUz3W7r4r0jB1U7+lQjFMEdpBWaVN+zau
zX4MTNUhOLbwltFZ+gbH+t57m8Hhjkdvmvbp0b4JWj6o3fgIN7fMVt1EF4MMYjNl
S6VCcxRbHq9z0sjXuKtSWtc5gQNw18T0tpV0TlMZ5u0LWZk+JMMuKWidg6MPrlDi
jdR9s9MZMBeKBJzml26A9MSaSUn+GxhBUu1ZStCEdxglYkEz2TM0V+MOs9Dov/pM
cqc5XkrgFJ4aPg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 19:03:02 2025 by rpki-client