Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier: Yy4qRF75GSl7wAbLBJ54DcI4ZFAuVMAyh+t3Z/aijvE=
Subject key identifier: 63:F7:E7:49:F9:23:0D:AA:57:40:F5:4B:7C:DF:19:86:08:5D:CE:1C
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial: 019A71B86910C5A429C3B172CA89B3FF68E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number: 0961
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=)
2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: tEbiyUmbquW8VcgR/Cp27RTrS5hLpo6Xgs6GNsy7soI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:69:10:c5:a4:29:c3:b1:72:ca:89:b3:ff:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=63f7e749f9230daa5740f54b7cdf1986085dce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:21:03:e7:2a:38:34:25:0a:bf:5e:8b:d7:
c9:65:bf:41:79:e5:6b:e4:2d:7c:9d:51:e0:32:64:
8c:d2:72:bd:9d:b5:3e:e0:15:58:80:28:d7:2f:a8:
d9:b0:a5:e0:19:44:2f:86:19:d9:36:fe:f9:f4:07:
f5:3d:ea:8e:22:24:33:f0:45:2a:70:f6:43:a4:74:
9a:0f:c0:91:8b:e1:dd:f4:c4:de:32:7d:9c:92:a0:
61:82:bb:b7:42:65:18:27:72:f7:0a:dc:b3:47:54:
38:b5:5d:b8:e0:ae:02:34:23:aa:38:40:00:20:53:
80:e4:7e:47:0c:da:24:45:90:0a:f7:29:3b:95:18:
6c:00:fb:e6:3e:cf:30:6c:39:e2:63:c9:41:95:c3:
a2:25:62:f6:52:c5:97:4e:77:9e:ee:50:f0:56:e5:
bd:08:fc:27:b3:60:4d:7f:8e:76:72:6a:da:17:5d:
10:de:f8:c2:3a:e3:ba:d3:55:b9:79:4d:13:a7:60:
29:da:25:58:11:fe:29:43:91:22:a7:89:54:b6:18:
b1:20:2d:34:4e:00:0e:e2:dd:12:17:d9:70:3f:31:
d1:f0:bd:32:af:ca:07:31:1a:27:ea:9d:4d:5c:e4:
82:34:91:c2:78:eb:89:75:50:ed:ea:d5:68:49:db:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:E7:49:F9:23:0D:AA:57:40:F5:4B:7C:DF:19:86:08:5D:CE:1C
X509v3 Authority Key Identifier:
keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:bc:cf:9e:f8:7f:ea:9c:59:dc:78:13:eb:a4:a3:4b:b5:
00:69:df:64:e7:3a:d8:87:df:7f:75:3a:d6:21:b6:c9:da:cd:
74:46:62:3e:d1:90:2f:f9:2c:97:11:16:5f:41:ac:36:21:d2:
fa:47:a1:4c:e2:42:61:ee:c3:8d:a6:98:17:49:b0:2b:a0:62:
43:a7:97:ed:5d:2c:c1:c9:57:05:7f:2c:dd:fd:71:ac:7b:51:
e7:23:41:c6:36:f6:8c:7f:6b:12:44:76:58:c5:d6:e2:2a:e6:
ef:21:de:35:b3:13:95:a0:f2:18:6c:f1:8a:83:20:5a:4f:dc:
7f:57:9d:d1:8a:db:1f:49:70:1a:a1:f5:b3:45:b2:3d:ed:c9:
58:2f:b6:f9:22:bb:91:e4:57:83:1d:69:10:2b:b3:a3:1a:d8:
a3:18:44:19:d1:f1:ca:37:f1:25:50:4b:80:5c:1d:b7:53:26:
2d:b6:1a:84:a9:5e:ff:4c:6e:4f:4d:45:ba:5e:e3:bf:cf:59:
c3:53:c9:fd:bb:8d:f9:24:07:f7:be:18:fe:76:5e:33:e6:25:
08:cd:44:f4:d7:b4:4c:55:d9:5f:98:f8:55:34:16:c7:bd:6f:
b2:c1:f4:a3:3a:2b:19:40:34:ad:7a:56:a8:73:de:d1:f8:b4:
f2:21:3c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGkQxaQpw7Fyyomz/2jiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw
ZWFkMjkwHhcNMjUxMTExMDcwMTQyWhcNMjUxMTEyMDcwMTQyWjAzMTEwLwYDVQQD
Eyg2M2Y3ZTc0OWY5MjMwZGFhNTc0MGY1NGI3Y2RmMTk4NjA4NWRjZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywIhA+cqODQlCr9ei9fJZb9BeeVr
5C18nVHgMmSM0nK9nbU+4BVYgCjXL6jZsKXgGUQvhhnZNv759Af1PeqOIiQz8EUq
cPZDpHSaD8CRi+Hd9MTeMn2ckqBhgru3QmUYJ3L3CtyzR1Q4tV244K4CNCOqOEAA
IFOA5H5HDNokRZAK9yk7lRhsAPvmPs8wbDniY8lBlcOiJWL2UsWXTnee7lDwVuW9
CPwns2BNf452cmraF10Q3vjCOuO601W5eU0Tp2Ap2iVYEf4pQ5Eip4lUthixIC00
TgAO4t0SF9lwPzHR8L0yr8oHMRon6p1NXOSCNJHCeOuJdVDt6tVoSdu9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP350n5Iw2qV0D1S3zfGYYIXc4cMB8GA1UdIwQY
MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt
ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4
LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1i8z574
f+qcWdx4E+uko0u1AGnfZOc62Ifff3U61iG2ydrNdEZiPtGQL/kslxEWX0GsNiHS
+kehTOJCYe7DjaaYF0mwK6BiQ6eX7V0swclXBX8s3f1xrHtR5yNBxjb2jH9rEkR2
WMXW4irm7yHeNbMTlaDyGGzxioMgWk/cf1ed0YrbH0lwGqH1s0WyPe3JWC+2+SK7
keRXgx1pECuzoxrYoxhEGdHxyjfxJVBLgFwdt1MmLbYahKle/0xuT01Ful7jv89Z
w1PJ/buN+SQH974Y/nZeM+YlCM1E9Ne0TFXZX5j4VTQWx71vssH0ozorGUA0rXpW
qHPe0fi08iE8yw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client