Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft
File: Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft (raw, json)
Hash identifier: 5ibjwTG3CtDwDtopjPsxkB/+leKBfz0Bqe4LZPFiIms=
Subject key identifier: 98:98:F9:FF:E5:0D:E9:EB:02:98:1B:91:27:3E:7D:1B:2E:A7:73:4B
Authority key identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4
Certificate issuer: /CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4
Certificate serial: 019A71EE915A3B4E5FB412F4FE844A098017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft
Manifest number: 61
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl (hash: 8jn8jbdWrcqMs3pGmXJHw54nMuP30S/ML5RPha3nYoM=)
2: XTgOcjNR8wb1-tvvZiXLrq9V1rE.roa (hash: 1gsq3L9BAGQsVCvDdI2JTTbvR819vWRtg2jfK/LpLoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:91:5a:3b:4e:5f:b4:12:f4:fe:84:4a:09:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=9898f9ffe50de9eb02981b91273e7d1b2ea7734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:1b:f4:22:b3:24:a7:b4:fb:f7:ac:74:0a:
0c:28:a4:8d:54:85:79:a2:7c:a3:c0:09:c4:d0:53:
97:d5:74:fb:20:89:e1:ce:54:95:cd:7f:68:24:77:
97:dc:f5:4d:69:e0:0e:90:58:38:5e:22:ab:ce:4f:
7e:aa:4a:fb:8e:76:c9:8f:22:f6:e8:fd:92:63:f9:
04:7c:f2:0f:88:61:05:bf:08:dc:4f:23:c0:bf:3f:
01:a8:15:a3:77:4c:1c:dc:4d:75:01:28:f3:ca:c1:
90:9f:03:31:b6:1c:e8:5f:1e:ea:57:86:20:55:8d:
ef:97:e8:19:22:f8:34:da:41:de:72:ed:d1:67:be:
a0:6a:7b:3e:d3:06:ef:82:a1:54:d0:6b:f7:12:a8:
f7:ff:46:71:27:c4:ec:5f:a4:2b:5b:79:42:82:23:
7d:fa:54:08:2c:72:c7:87:61:68:dc:aa:ed:ef:0c:
cd:da:a3:04:12:c4:19:4c:ed:f5:50:3a:c5:24:4f:
2e:89:68:6b:6a:3b:19:5c:8b:ed:4f:45:98:9b:0a:
c4:12:0a:8a:8d:65:e2:79:56:3b:6d:9c:f4:2d:f2:
38:d5:21:f0:70:63:38:73:f1:64:71:e2:38:da:16:
a4:30:98:80:80:35:60:85:ac:6f:bb:0b:d7:ec:01:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:F9:FF:E5:0D:E9:EB:02:98:1B:91:27:3E:7D:1B:2E:A7:73:4B
X509v3 Authority Key Identifier:
keyid:36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:cd:e2:d7:ee:41:a0:2b:3b:fe:fd:4b:e4:f3:6d:db:a5:
e5:e7:48:29:0e:25:07:00:75:0e:54:4d:40:05:75:b5:29:78:
9d:44:11:44:45:f2:c1:10:12:fc:6f:01:04:b5:9f:74:25:44:
7c:47:0c:4b:02:8c:b2:2e:21:72:7b:2d:be:25:9b:0a:c7:db:
c5:2d:91:40:16:54:72:34:bb:2a:b2:23:e0:d8:6a:71:4e:b4:
ac:d2:d7:bc:e7:b3:73:11:cf:e7:22:67:89:01:15:d6:09:5b:
3e:61:51:4b:b0:91:bd:4e:84:2d:f7:13:d1:94:ac:91:1b:18:
b8:84:9e:e6:22:dd:c5:7c:b2:aa:a0:a3:80:3f:82:7b:3c:b9:
17:11:6f:e9:67:91:9d:af:89:bf:54:00:b3:88:01:e6:f5:53:
17:23:21:71:38:fb:8b:59:6c:df:0e:ee:b9:bb:87:86:28:73:
75:4a:28:6e:74:d0:1b:31:03:03:1f:4e:ce:eb:a2:71:f2:26:
f4:b8:d7:d2:7d:df:52:e0:b1:5d:cb:fc:02:fd:5d:e1:89:50:
94:fe:bf:73:3d:09:0f:b7:94:42:a6:0f:64:64:c6:fe:8f:99:
09:65:1b:68:55:b5:74:61:02:a3:3f:21:df:85:6e:0b:ed:b3:
fa:12:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client