Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: t7tlwNm+7Fc+DnRZsZr2+ML8eSdhCKE1cS8VLzV6p0U=
Subject key identifier: E6:34:00:AE:C3:86:67:EA:22:45:F8:12:DA:8A:46:FA:5A:DD:83:69
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 0198744FF1E961BE12AD1DD4282621153806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:52 +0000
Manifest this update: Mon 04 Aug 2025 09:00:52 +0000
Manifest next update: Tue 05 Aug 2025 09:00:52 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: /B+QJzTJYqEAs4P+jfIMWO9tHyu+tVwXxCH9T8ySPOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f1:e9:61:be:12:ad:1d:d4:28:26:21:15:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Aug 4 09:00:52 2025 GMT
Not After : Aug 5 09:00:52 2025 GMT
Subject: CN=e63400aec38667ea2245f812da8a46fa5add8369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:97:5a:f6:84:81:a2:88:87:f9:2c:52:b6:
bd:2a:7c:48:7a:d4:cf:83:f4:6d:6f:09:19:c9:19:
1d:68:fe:79:29:25:c4:43:c5:09:d3:40:cf:40:37:
76:55:45:54:56:ae:7f:92:13:8d:72:09:5f:60:f8:
a2:95:4a:07:b5:94:51:bf:4c:0c:a2:07:e0:02:3a:
5c:2d:29:e2:81:fa:08:13:09:6d:51:fc:be:08:e8:
e6:0d:1b:c5:6e:8a:1e:03:e9:fd:d2:c4:29:ff:4a:
03:76:dc:d2:0f:3a:4b:d4:76:5b:bb:4b:e1:4b:a3:
8c:15:79:6b:70:0c:38:d9:50:9c:55:a6:51:e3:88:
2d:2d:2f:57:a3:4f:fa:56:95:d9:d2:6e:2a:2b:2a:
da:fc:16:8f:60:e9:78:e3:5c:14:6a:ec:66:6d:5c:
d2:0c:cb:96:36:8d:18:1d:7e:4b:1c:07:bd:f1:7f:
fc:78:dc:15:5c:8a:e4:62:df:22:9e:af:fc:c7:4d:
66:44:95:c1:bc:dd:b2:56:01:7a:c8:40:76:2b:c0:
d3:3b:72:83:f4:34:20:9e:2a:3e:e3:51:1f:86:e5:
76:69:f2:d0:16:d5:b9:be:fc:75:c0:99:db:4f:4a:
39:f1:c5:ba:26:10:b4:80:43:43:68:62:fb:92:d3:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:00:AE:C3:86:67:EA:22:45:F8:12:DA:8A:46:FA:5A:DD:83:69
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f7:bf:ba:58:65:2e:61:c0:0c:a5:69:36:69:6a:2b:27:d3:
b1:7d:73:48:05:2e:3d:5e:9b:4e:db:ac:c2:72:12:71:31:b0:
90:04:62:d7:27:89:e5:20:6f:3b:6c:05:a8:7e:7a:6e:e8:12:
6f:c9:77:06:73:7e:44:3f:aa:54:d3:49:47:26:24:ce:09:86:
07:aa:32:6c:0a:7b:11:c4:80:e2:43:c1:b0:95:2c:64:0c:b5:
08:96:c7:f2:95:e9:04:2d:05:e4:7e:f8:fc:82:c1:99:c5:7c:
ae:74:6b:df:a0:f2:8d:32:a0:6e:6f:a7:ac:09:af:96:d1:2e:
b2:81:65:7e:c2:65:e8:01:73:e6:c1:79:b1:13:dd:8a:4e:a3:
3c:98:49:d4:0c:e7:ba:4e:37:7b:c3:ce:eb:19:5d:b3:11:8c:
85:b8:86:50:56:c8:3f:39:de:b8:ba:39:b6:2c:d3:07:81:f9:
24:b2:2a:7e:6b:ef:0c:04:c6:fc:b6:34:2a:a3:36:16:3b:5c:
e7:51:81:ab:11:db:00:ce:2d:ba:bf:de:3a:d0:f6:7d:8e:1b:
14:11:9a:8a:1c:f2:ff:b9:22:24:ea:16:45:98:2b:a3:96:4e:
56:0f:56:ad:c7:1b:50:04:dc:fa:d2:cc:4e:e1:be:5b:c4:a2:
11:d7:7c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T/HpYb4SrR3UKCYhFTgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz
OTEzNzAwHhcNMjUwODA0MDkwMDUyWhcNMjUwODA1MDkwMDUyWjAzMTEwLwYDVQQD
EyhlNjM0MDBhZWMzODY2N2VhMjI0NWY4MTJkYThhNDZmYTVhZGQ4MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6uXWvaEgaKIh/ksUra9KnxIetTP
g/RtbwkZyRkdaP55KSXEQ8UJ00DPQDd2VUVUVq5/khONcglfYPiilUoHtZRRv0wM
ogfgAjpcLSnigfoIEwltUfy+COjmDRvFbooeA+n90sQp/0oDdtzSDzpL1HZbu0vh
S6OMFXlrcAw42VCcVaZR44gtLS9Xo0/6VpXZ0m4qKyra/BaPYOl441wUauxmbVzS
DMuWNo0YHX5LHAe98X/8eNwVXIrkYt8inq/8x01mRJXBvN2yVgF6yEB2K8DTO3KD
9DQgnio+41EfhuV2afLQFtW5vvx1wJnbT0o58cW6JhC0gENDaGL7ktNe7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY0AK7DhmfqIkX4EtqKRvpa3YNpMB8GA1UdIwQY
MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt
NTU0MTVhMGJhNzNiLzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQtNTU0MTVhMGJhNzNi
LzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfe/ulhl
LmHADKVpNmlqKyfTsX1zSAUuPV6bTtuswnIScTGwkARi1yeJ5SBvO2wFqH56bugS
b8l3BnN+RD+qVNNJRyYkzgmGB6oybAp7EcSA4kPBsJUsZAy1CJbH8pXpBC0F5H74
/ILBmcV8rnRr36DyjTKgbm+nrAmvltEusoFlfsJl6AFz5sF5sRPdik6jPJhJ1Azn
uk43e8PO6xldsxGMhbiGUFbIPzneuLo5tizTB4H5JLIqfmvvDATG/LY0KqM2Fjtc
51GBqxHbAM4tur/eOtD2fY4bFBGaihzy/7kiJOoWRZgro5ZOVg9WrccbUATc+tLM
TuG+W8SiEdd8mw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:20 2025 by rpki-client