Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: dfzyO6iMz2+BwDTvQwr+Bp6tilF77wsLPqFJDEl/Ke0=
Subject key identifier: 28:ED:2F:3C:05:6C:4D:5A:66:A3:6F:35:B0:D0:60:7F:55:79:E4:F3
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019A4EF466D95F175F6D256A436A17F3D3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0F02
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: IVqcFNT1IyXUyetqbG0YU3pdeezIXPRvw0S34uDVLko=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:66:d9:5f:17:5f:6d:25:6a:43:6a:17:f3:d3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=28ed2f3c056c4d5a66a36f35b0d0607f5579e4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:61:ef:8f:86:e4:eb:f9:a6:e4:51:06:33:
04:16:6d:b0:df:80:4f:e4:89:29:49:b0:fe:96:2e:
d7:6d:ac:54:e2:33:56:45:ee:97:48:86:50:42:9f:
53:c4:0a:67:8b:1d:a2:23:93:67:f3:0f:80:7b:3f:
09:a2:cb:6f:fe:e2:80:47:8d:7c:b3:93:4f:16:c8:
d1:ef:5e:0e:2c:8d:99:5e:23:9d:1a:e5:2d:2c:4d:
79:54:8b:92:36:6f:8f:30:79:35:8d:77:2a:2d:62:
63:c2:ab:13:ba:f9:ac:54:7f:2f:cb:b4:8b:a3:20:
3c:e7:b9:c3:b1:75:2a:3b:ca:2d:1a:d9:b8:cd:05:
eb:30:d2:14:6f:04:16:7f:31:90:02:1f:e8:41:fc:
1c:48:6c:e9:26:fd:c1:bf:b2:9b:62:99:cd:9d:a6:
87:92:47:7d:33:5a:f9:94:d4:3c:61:c5:79:da:27:
5e:6d:65:93:39:7b:2e:1f:74:54:bb:63:ff:6a:13:
e0:76:ac:1a:95:e3:86:e8:13:f0:b9:6e:85:03:76:
2d:6d:ce:aa:5d:07:f0:6a:00:a3:ca:12:11:21:ac:
5d:a5:bb:35:c4:da:b6:4e:2e:35:71:9f:7b:fb:82:
3f:41:38:30:9f:06:34:e8:1e:c6:c9:e1:da:dd:73:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:2F:3C:05:6C:4D:5A:66:A3:6F:35:B0:D0:60:7F:55:79:E4:F3
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:41:f2:a3:32:f2:b4:0e:78:07:3d:c7:c9:be:12:e3:93:
28:9f:b3:2a:6f:8c:87:92:96:70:35:36:6b:21:e6:30:6b:66:
ef:89:b7:e0:cc:9f:26:9d:d7:44:54:47:d6:e4:d3:b2:d4:08:
d7:a6:3b:e2:70:69:0f:b4:f2:b2:0a:25:89:a5:1a:9f:7d:f4:
44:4b:84:78:11:cc:24:70:2f:4a:24:82:a1:82:88:bd:0e:2b:
5a:a4:f6:99:f0:87:8a:57:33:00:85:62:9e:74:55:44:64:46:
ce:93:bc:33:87:f5:c7:ab:69:28:75:9b:4f:ec:ef:34:40:8a:
f6:ae:08:83:1a:cc:0f:c5:12:02:f2:04:3d:21:7c:01:29:1a:
1b:b2:cb:0a:85:ee:f0:a4:a9:3d:59:60:f6:99:5c:63:86:6a:
77:86:3f:06:6a:b3:ac:7a:5e:ef:8f:3e:51:ab:1b:34:12:4f:
11:90:83:08:ce:c6:b6:d8:a1:6e:09:28:ef:21:2a:c9:88:ce:
a2:d9:b4:0f:e1:10:39:bd:ee:6d:d9:cf:3b:c5:63:8a:41:a3:
fc:f8:03:25:73:e1:f9:29:e3:7e:39:cc:ce:44:a5:ff:c2:b6:
d3:4f:c0:41:27:05:40:f7:14:53:57:21:9c:1d:67:e8:7c:91:
eb:c2:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:18 2025 by rpki-client