Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: h6lbZBNfKt0IDVztT86mdHthIU3m7sF7axj57HQbj+Q=
Subject key identifier: A0:76:1A:7A:9A:71:61:07:29:66:0F:95:2D:09:DA:DC:65:0D:7D:B2
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 019A4D06F99BE60A27E41A1591AE28D23BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:33 +0000
Manifest this update: Tue 04 Nov 2025 04:01:33 +0000
Manifest next update: Wed 05 Nov 2025 04:01:33 +0000
Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: VmoXq9VfusLA6H/hEyDdvsTt2Rzx27U70uBreouygCg=)
2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:f9:9b:e6:0a:27:e4:1a:15:91:ae:28:d2:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Nov 4 04:01:33 2025 GMT
Not After : Nov 5 04:01:33 2025 GMT
Subject: CN=a0761a7a9a71610729660f952d09dadc650d7db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:97:ae:4a:96:ef:43:f2:f5:53:3c:f5:62:
01:c6:8a:e6:1f:cc:ae:c7:5d:3b:88:a6:82:d4:bc:
09:59:b6:4f:ef:3b:74:ba:48:7c:59:3f:53:d3:b8:
aa:78:ee:30:17:05:60:0c:61:1a:5e:18:34:b7:71:
10:b0:54:93:ae:af:79:a1:b3:b1:9e:9c:f5:47:e1:
c3:11:af:10:d2:88:74:95:97:0c:28:74:83:91:87:
e6:0e:59:f5:c3:06:1e:62:c7:7d:49:2e:b3:39:f8:
e1:cd:68:00:eb:39:bc:77:c8:e9:5f:01:4f:29:36:
90:c4:54:ee:07:64:66:7d:82:e9:af:59:02:7b:c6:
d3:57:8e:15:3b:1f:c0:5e:8f:4d:84:6b:e1:e1:94:
2b:e9:ea:6e:39:aa:5c:df:4f:ee:5f:ac:7e:2d:fe:
c2:53:40:0b:52:d0:80:4a:2c:2b:95:91:2a:92:7a:
58:06:2e:c3:54:54:f1:4a:5c:87:ce:ed:fa:9d:45:
4b:cc:7f:c2:6e:0f:d5:c6:aa:f9:85:f9:d7:da:f0:
45:e4:17:c9:0f:8b:62:db:01:93:48:d7:a1:4b:2f:
6b:a9:89:3f:32:f1:16:e9:2f:c0:58:74:82:d7:08:
3c:41:4d:1d:c0:41:a2:1b:6f:9d:27:47:71:8b:fe:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:1A:7A:9A:71:61:07:29:66:0F:95:2D:09:DA:DC:65:0D:7D:B2
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:69:56:7a:fd:77:82:eb:3c:87:da:4b:b4:00:d7:aa:25:
40:a4:ad:c0:14:67:bc:63:36:e2:bb:ac:49:8d:27:cd:ee:76:
97:19:2c:95:da:ff:63:95:09:5d:3f:7d:f6:f9:06:f1:c1:12:
5d:b4:b9:db:38:2d:56:f9:bf:a9:7b:e8:96:b0:64:97:34:6f:
e0:aa:b4:2d:1f:49:c3:5f:84:83:bb:91:1b:b5:15:68:d2:46:
fc:24:0f:bd:9d:9b:9d:7c:f4:fd:71:04:81:78:b7:d7:99:08:
d0:06:d9:b8:6c:7c:59:9e:54:72:46:a8:6b:50:08:8a:1d:ad:
b1:75:06:ee:d0:b8:d7:79:4f:5a:be:70:82:53:ea:5b:d8:f6:
1a:21:7d:a3:1b:0a:51:8f:c8:cd:69:b2:5e:a8:81:1b:8b:69:
81:34:5c:23:c1:26:f2:f7:0a:63:f2:d8:bf:a4:e0:de:21:0b:
5f:1b:d0:de:55:17:4c:45:84:ed:9d:f6:a9:6b:00:a1:bf:86:
1f:b4:62:22:5a:5a:cf:bc:06:4f:2d:90:99:39:60:f1:4c:86:
90:3c:76:13:48:cc:ef:3e:21:ff:1e:52:e5:75:1d:2f:b7:5a:
e8:b0:ce:7b:4f:8c:a8:02:a0:4a:03:95:54:0d:09:8e:9b:7a:
8c:36:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:01 2025 by rpki-client