Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: 5DiT0ADsLBD8nbysvbI2SUgEKb2c3ekt4FKnJVhvhro=
Subject key identifier: BA:B5:E2:72:59:07:7C:54:E8:2B:98:E4:1D:F3:6B:53:0E:9A:89:B4
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019A50E2C8E391D732F9CCE062DCBB7C8283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0F03
Signing time: Tue 04 Nov 2025 22:00:31 +0000
Manifest this update: Tue 04 Nov 2025 22:00:31 +0000
Manifest next update: Wed 05 Nov 2025 22:00:31 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: kgT36UFltlDSc8LmuAwTUJyuKXLnsAU0wKP5oE2snj0=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c8:e3:91:d7:32:f9:cc:e0:62:dc:bb:7c:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Nov 4 22:00:31 2025 GMT
Not After : Nov 5 22:00:31 2025 GMT
Subject: CN=bab5e27259077c54e82b98e41df36b530e9a89b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:30:14:a2:56:74:31:09:a9:4b:f9:b9:ec:
a4:03:70:14:da:96:a4:ee:fd:9b:4d:25:f9:d5:92:
a1:84:38:51:44:16:cf:fa:6b:0d:60:fc:55:d6:5e:
c3:3f:ab:a7:b8:b3:f4:ea:20:64:f8:f3:44:bc:3b:
38:06:b4:6b:be:5c:5c:f2:21:0d:13:cb:72:02:32:
79:b1:00:66:0e:0a:e4:88:b7:60:86:23:8f:fb:bc:
65:13:3d:53:15:38:30:03:97:d6:e2:06:6e:1d:55:
a6:84:0a:5d:ab:e4:96:0d:d3:9a:13:02:11:5a:9f:
34:8e:56:aa:4f:f6:36:17:8a:2a:d9:f2:90:b7:be:
d5:64:6b:f6:c8:93:50:86:c1:8d:96:d2:91:cb:3b:
89:6c:aa:de:11:a5:67:c6:b6:32:19:33:74:32:d4:
9e:4a:19:b8:12:ad:26:b9:46:c7:6a:43:9b:27:55:
09:fa:db:33:c9:a5:19:ee:d2:48:fe:85:9d:ac:39:
55:4c:8e:9b:ed:4a:2b:51:5e:e8:af:3c:c7:92:16:
39:64:8c:11:be:43:81:da:bb:51:ac:29:ee:8b:4d:
26:99:0f:31:68:80:40:1d:02:df:fb:ee:49:06:11:
18:74:d3:2e:90:82:21:2a:26:7b:0b:8d:70:bd:77:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:E2:72:59:07:7C:54:E8:2B:98:E4:1D:F3:6B:53:0E:9A:89:B4
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:f0:6a:57:ad:1b:66:8e:fa:d0:04:18:ab:fa:e3:52:cd:
5c:bc:4b:6a:b1:21:34:50:f0:77:cb:45:5c:85:6e:b1:f9:a9:
a2:3e:e3:09:e5:6a:ae:9a:cb:34:96:e9:25:2f:19:ab:4f:5a:
b9:e7:9c:cc:fa:28:a1:eb:b7:99:bc:16:fa:a4:2b:02:84:48:
5c:d7:b9:43:c6:83:21:26:94:b3:9c:58:99:53:93:c5:21:78:
f3:d8:39:f5:22:60:41:c4:6d:c0:d7:1c:d8:ec:55:57:08:cc:
8f:69:f9:9b:b7:a3:f6:24:f3:c4:87:93:0a:f0:02:91:c7:1e:
fd:82:b7:9e:e4:28:fb:af:7e:b9:c8:02:75:bd:14:d7:8a:6e:
41:9e:0f:93:87:94:6b:b9:68:c2:32:44:19:7d:36:e1:43:15:
b7:89:95:41:d7:86:84:27:3e:fb:80:20:c7:9f:9b:9b:0a:e4:
d5:7b:bc:ce:61:b5:e8:70:ef:86:a3:f4:2f:95:98:07:c2:7d:
06:68:60:d8:e5:05:8b:fe:5a:70:04:27:23:c4:4e:e9:d2:7c:
dd:99:9d:ca:bc:9b:c1:0c:eb:98:38:05:ab:d7:18:d9:86:dc:
76:b8:af:26:71:11:e5:d7:c3:ab:22:13:23:ec:9a:0a:5f:b3:
ea:ed:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:03 2025 by rpki-client