Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: gGSufPiCisvPpRISoOdJroaAqxysA3VvQk/iFYgXAl8=
Subject key identifier: 2B:1E:CD:B7:9D:FD:9D:45:0A:93:3C:AE:FA:63:61:52:E4:4F:8A:22
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 01987D8A21537CDBA1521F98B370E7CA6B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:00 +0000
Manifest this update: Wed 06 Aug 2025 04:01:00 +0000
Manifest next update: Thu 07 Aug 2025 04:01:00 +0000
Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: bF4ZHzuf8pRQ4Zbb5jst2gRDXM8of6GFr7NuPnskn0w=)
2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:21:53:7c:db:a1:52:1f:98:b3:70:e7:ca:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Aug 6 04:01:00 2025 GMT
Not After : Aug 7 04:01:00 2025 GMT
Subject: CN=2b1ecdb79dfd9d450a933caefa636152e44f8a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:c9:8a:47:23:d1:b1:df:f5:b4:31:f2:b2:
db:0f:c0:91:9e:72:3b:ee:05:29:ef:e4:78:46:53:
e4:d3:e6:f6:0b:97:61:7b:bd:4c:a1:a6:e9:7b:df:
40:ff:e2:9a:4f:19:be:df:e3:da:9a:ad:36:7d:7b:
86:b5:58:37:58:d8:35:f2:66:b3:86:71:80:58:ab:
e7:ea:89:34:cf:cd:40:96:c9:01:d4:bb:1d:1e:6e:
50:e3:84:6a:bb:f4:28:60:ee:00:68:5f:ef:74:cd:
53:7d:0b:72:5a:02:ae:c6:bb:c0:7c:75:65:fe:36:
bc:10:69:c8:7f:40:00:fb:0a:6a:41:43:7f:2e:05:
90:68:17:e2:8f:d2:f3:ea:d6:b4:f0:7c:bb:72:77:
03:44:04:c4:a8:e6:a1:a7:a9:a0:95:00:3b:b4:57:
3b:72:38:14:25:ca:2b:fc:a6:73:a9:16:53:5a:6f:
56:46:7b:c0:cb:44:ee:f0:fa:38:89:ee:d5:76:c9:
84:f7:a0:d9:82:a5:23:e6:56:7c:c0:54:6c:56:f4:
e2:bb:6f:0e:b9:4e:55:a7:ea:43:ec:28:e8:3c:00:
6d:16:bd:93:9a:15:92:c8:b0:55:59:32:2d:a0:4d:
97:8e:7a:bf:44:ba:6f:0c:c7:15:2d:92:87:7a:6f:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:CD:B7:9D:FD:9D:45:0A:93:3C:AE:FA:63:61:52:E4:4F:8A:22
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:e7:3d:6c:90:53:38:06:d9:50:3c:9c:51:30:39:22:f3:
62:fd:56:8b:af:90:f0:86:5e:66:6e:97:bb:37:92:ab:04:31:
bb:00:f3:f7:dc:8f:1e:5c:0c:e0:b6:2b:95:4a:f7:c3:57:d5:
d3:62:77:ec:0b:d3:5a:11:00:0b:59:d7:9a:a4:fd:7c:9e:ed:
7e:42:84:34:1d:91:20:c3:f8:ce:ef:3f:7f:16:a7:16:db:7d:
53:e5:12:fe:a2:a0:ce:b1:a0:5f:a7:37:65:d1:a0:aa:fc:68:
fc:f5:9b:fe:e7:9b:1b:d3:71:02:ed:69:f1:ee:fa:68:5c:ea:
f6:34:14:76:8b:06:55:d5:a3:0f:4e:1b:b8:97:a4:31:99:06:
30:cd:d5:7b:7f:6d:62:c1:b1:50:d4:51:d6:0a:74:90:e0:62:
05:76:0c:74:f3:d9:7b:dd:2a:ba:9e:60:0c:97:15:67:0c:4c:
3a:f2:25:a6:ea:ea:3b:43:8a:33:e0:be:20:e8:16:4a:de:d4:
dc:da:b5:16:84:11:78:43:34:b0:bf:51:46:44:11:b5:4c:b7:
2f:3e:5c:9e:bf:c0:5e:ca:94:30:6c:88:37:9b:43:99:3d:e4:
b8:b5:57:68:9d:5a:d4:f9:fc:69:33:fe:22:dc:26:bf:c6:41:
45:43:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:33 2025 by rpki-client