Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: fubqOiDR9XsesZde4xHw6hAs5kGqq8+llr08gYsHzd8=
Subject key identifier: EC:86:D9:A5:0F:A6:91:4C:10:2B:DC:5D:8A:6F:78:B1:8D:26:0F:5F
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019896DC3A84A5DD9D7CD7645D35FBF126A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0E1E
Signing time: Mon 11 Aug 2025 02:01:11 +0000
Manifest this update: Mon 11 Aug 2025 02:01:11 +0000
Manifest next update: Tue 12 Aug 2025 02:01:11 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: Pf52PQZte1LHxFerp7xl7Rhpqm0m9tLn50iUzH6El8w=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:3a:84:a5:dd:9d:7c:d7:64:5d:35:fb:f1:26:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Aug 11 02:01:11 2025 GMT
Not After : Aug 12 02:01:11 2025 GMT
Subject: CN=ec86d9a50fa6914c102bdc5d8a6f78b18d260f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:d2:6b:9e:51:e4:06:7b:01:22:25:cd:72:
dd:8c:3c:99:80:b8:37:6e:54:bf:32:15:b8:d5:c9:
a4:0f:ef:1d:c7:c7:66:e1:f2:5a:9f:67:fa:0c:13:
ab:2f:31:93:e5:48:45:d2:3c:25:dd:fc:7e:d6:f5:
ab:72:37:db:9f:d0:04:6a:94:4a:ab:52:fa:42:33:
08:d5:5e:78:f2:d8:03:84:be:c3:2c:68:b4:d1:5b:
bd:86:fc:a7:7f:ae:c3:9c:52:6e:02:f8:a5:38:07:
14:7a:26:a5:dc:f0:e1:9a:ef:a8:5d:12:f8:ea:d8:
03:1f:1e:80:7e:de:02:8c:f2:bf:86:89:1c:80:06:
fc:32:d9:c4:92:3c:34:a3:e6:4e:41:88:74:0a:d3:
d2:1e:ca:9a:8e:6d:c1:b9:19:ef:b0:39:24:fd:cd:
f0:09:00:53:4c:55:43:34:0f:f1:2c:bc:26:d5:37:
2f:ca:42:3d:27:96:77:1f:78:8a:9a:88:03:00:f9:
1e:b7:87:66:52:ce:dd:d7:5e:82:9e:b4:14:e1:dc:
c3:c6:b1:59:4d:6b:5a:ff:59:51:e8:b9:82:83:af:
1e:f9:d1:68:79:63:77:2e:49:4b:41:75:ff:88:72:
c3:fb:b2:a5:21:46:59:23:f3:cb:0e:36:ed:f9:64:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:D9:A5:0F:A6:91:4C:10:2B:DC:5D:8A:6F:78:B1:8D:26:0F:5F
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:3a:72:b7:60:e7:9a:f6:39:9d:38:12:b0:33:17:a2:dd:
1d:a5:4c:41:e9:81:85:1a:e8:68:5c:9d:18:7d:55:d4:ab:a5:
87:63:3b:7e:17:40:ce:19:2a:6d:2a:13:8e:a5:81:1a:b0:43:
f8:60:c4:10:a2:04:2f:ab:07:31:54:a9:00:02:0b:0b:ec:8c:
59:33:a3:3d:89:02:72:ed:cb:21:d7:0c:2d:2a:57:bf:10:1e:
37:da:6e:d4:b9:94:5a:a5:9e:cb:52:16:c3:89:b9:09:61:86:
a7:45:3f:8e:64:18:43:9c:c5:df:12:ee:7b:45:34:cb:73:ee:
78:7f:90:43:b4:d4:5e:11:63:89:ef:04:df:ff:e5:35:c3:71:
53:f2:c7:99:72:d8:da:6b:be:f1:ab:ee:e2:a5:f2:3b:f6:11:
be:47:dc:bd:d1:df:cd:63:34:07:59:83:21:22:af:37:65:e7:
76:04:18:89:9b:04:6e:0d:99:12:dc:7b:9b:f8:d7:99:05:40:
4a:93:ad:3f:bc:34:56:7e:a3:a6:9b:3d:9e:9c:99:51:7e:e2:
d0:ef:f8:3c:9e:b0:e3:ba:ca:a1:41:0c:f0:40:9a:97:55:66:
f3:0a:bd:f7:6a:2f:d1:53:90:6e:d6:4a:69:45:42:a2:00:0f:
a6:aa:7a:e4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiW3DqEpd2dfNdkXTX78SakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2
NTkwMDgwHhcNMjUwODExMDIwMTExWhcNMjUwODEyMDIwMTExWjAzMTEwLwYDVQQD
EyhlYzg2ZDlhNTBmYTY5MTRjMTAyYmRjNWQ4YTZmNzhiMThkMjYwZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArErSa55R5AZ7ASIlzXLdjDyZgLg3
blS/MhW41cmkD+8dx8dm4fJan2f6DBOrLzGT5UhF0jwl3fx+1vWrcjfbn9AEapRK
q1L6QjMI1V548tgDhL7DLGi00Vu9hvynf67DnFJuAvilOAcUeial3PDhmu+oXRL4
6tgDHx6Aft4CjPK/hokcgAb8MtnEkjw0o+ZOQYh0CtPSHsqajm3BuRnvsDkk/c3w
CQBTTFVDNA/xLLwm1TcvykI9J5Z3H3iKmogDAPket4dmUs7d116CnrQU4dzDxrFZ
TWta/1lR6LmCg68e+dFoeWN3LklLQXX/iHLD+7KlIUZZI/PLDjbt+WS9OwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOyG2aUPppFMECvcXYpveLGNJg9fMB8GA1UdIwQY
MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj
LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2
ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+o6
crdg55r2OZ04ErAzF6LdHaVMQemBhRroaFydGH1V1Kulh2M7fhdAzhkqbSoTjqWB
GrBD+GDEEKIEL6sHMVSpAAILC+yMWTOjPYkCcu3LIdcMLSpXvxAeN9pu1LmUWqWe
y1IWw4m5CWGGp0U/jmQYQ5zF3xLue0U0y3PueH+QQ7TUXhFjie8E3//lNcNxU/LH
mXLY2mu+8avu4qXyO/YRvkfcvdHfzWM0B1mDISKvN2XndgQYiZsEbg2ZEtx7m/jX
mQVASpOtP7w0Vn6jpps9npyZUX7i0O/4PJ6w47rKoUEM8ECal1Vm8wq992ov0VOQ
btZKaUVCogAPpqp65A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:20 2025 by rpki-client