Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: qOQoiF+X9zzJPuJ9iGg63QRkBBJX7SlsDNGHgSXDB64=
Subject key identifier: E0:2E:1F:6B:ED:A9:46:41:8C:9D:AC:46:BA:3C:BD:8B:CB:D7:5C:04
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019A7225F403D258D498079D8BE97DA811E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: Jua/TkXCZn6wJxJOAT2donnaIJ6a63xvOG5kT31u4cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:03:d2:58:d4:98:07:9d:8b:e9:7d:a8:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=e02e1f6beda946418c9dac46ba3cbd8bcbd75c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:32:16:09:48:26:66:ac:dc:22:fc:a7:05:
20:9a:bc:f4:4b:e9:d4:ad:f0:47:4d:71:a3:af:41:
09:9a:f9:d9:74:69:1d:db:29:15:d9:4a:9e:ae:34:
5d:dd:07:71:82:4b:76:9c:32:12:40:7e:58:ec:cb:
a6:71:5c:08:12:57:b0:09:a7:14:7a:b7:6f:20:d6:
ba:8e:d5:d9:5a:47:50:ee:d7:b7:fc:95:75:e2:3e:
42:9f:0f:7b:bc:b3:49:d6:e5:fe:00:7f:24:06:06:
71:32:89:dd:5b:cb:c9:2e:f2:3c:26:70:55:65:17:
79:19:4a:0b:f1:7e:0c:57:b8:26:c3:3a:a8:fe:e8:
c9:f5:77:df:c4:85:f5:97:e4:41:09:b4:fb:4f:82:
b9:80:fa:e6:b4:25:e6:6d:38:0e:c9:ef:e8:db:5e:
55:df:36:63:f7:2f:1b:b7:84:20:51:97:5d:45:cc:
e6:32:99:53:0d:ed:e0:71:b4:6d:60:c1:ab:37:43:
53:3c:00:95:1b:63:03:86:0c:90:6c:e0:91:ff:63:
96:3b:c5:7e:56:a7:2e:ae:75:5e:21:b9:9f:29:19:
a7:11:9b:ce:65:5b:c8:31:b4:36:e1:42:c8:35:43:
06:5d:a8:5f:d5:15:3c:0b:59:98:31:4c:78:7d:c5:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:1F:6B:ED:A9:46:41:8C:9D:AC:46:BA:3C:BD:8B:CB:D7:5C:04
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:34:2b:6e:26:04:34:0b:46:db:69:6e:92:88:bd:bd:c3:
8a:46:7a:22:f5:c3:6c:e3:22:34:5f:15:28:96:9b:7f:ef:08:
56:e9:a2:ab:cb:02:ca:c0:08:39:4e:d8:0b:82:c0:51:7c:16:
8c:00:ce:ad:c6:ed:9e:5f:81:d9:98:38:c4:92:7d:e0:ed:fb:
90:29:41:38:3e:bd:3c:e6:ae:a9:19:78:db:cf:39:d3:44:74:
4f:ff:12:c9:50:6e:5c:a3:0f:93:46:ed:af:b9:28:8f:73:cc:
44:d5:cf:a1:c8:14:c6:40:50:25:b2:4d:3c:99:59:92:b1:d9:
e0:0f:a6:93:40:97:e2:c7:1d:72:47:7d:14:62:11:5c:50:39:
be:03:a9:3e:7a:21:cf:52:23:da:dd:e3:86:73:57:3e:3c:cb:
2d:6f:dc:72:9d:ab:9b:fb:20:87:9c:4e:12:47:f9:8e:8a:d4:
65:c4:eb:93:c7:82:d6:d3:a8:73:f1:54:e4:11:b6:35:62:5c:
4d:2d:aa:8c:10:7d:79:2c:23:27:f7:27:18:72:14:90:5c:af:
83:c4:4c:73:43:cf:be:ff:88:94:b8:15:96:de:0e:45:37:ea:
b8:72:6e:b1:4b:f2:29:32:00:52:68:49:e3:e4:2c:2c:06:5e:
9a:94:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:44 2025 by rpki-client