Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: 0OSP6AjfW8dggBw6H6wJl+JXTtVByiJhz8+yWH5/Ebc=
Subject key identifier: 95:B4:78:B9:A8:C2:9F:EB:B4:0E:05:A7:ED:92:FB:82:B9:BC:B3:2A
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019A4D74181F1C3B0CE5F326C4D8F66D51CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: povcPWEdjqK1xjvcDqRlnnMZbxZW2sTwqhWzLspVqtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:18:1f:1c:3b:0c:e5:f3:26:c4:d8:f6:6d:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=95b478b9a8c29febb40e05a7ed92fb82b9bcb32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:30:53:91:55:94:f3:74:35:ce:26:d7:d2:
cf:00:77:b4:5a:9d:0e:6f:18:a8:bc:77:43:a3:aa:
f9:7f:89:ff:15:5d:02:a4:2f:a2:11:36:c1:47:0d:
26:f4:52:35:23:6c:7f:9f:1a:c8:b6:1f:17:8a:2c:
6d:d2:21:ee:41:34:f7:5b:99:fb:1d:40:b1:96:cb:
67:4f:87:d5:f1:64:18:68:86:ef:2e:98:d5:01:94:
c4:f9:a9:3e:62:23:7d:bb:1f:1c:16:c1:6e:fd:ef:
d6:8e:e7:c2:45:a9:de:63:87:ea:cc:72:74:3d:c0:
a5:41:c8:15:7a:24:4f:d7:5c:b9:54:a8:93:90:2f:
5b:71:03:5d:62:18:39:a0:2e:ce:91:34:b9:84:3d:
22:59:28:d5:ba:ff:ba:3d:1b:94:8a:e5:25:4e:f5:
bf:7e:36:89:94:49:9b:a2:f9:b3:e6:0a:58:13:ca:
af:3b:de:6a:63:c5:3f:70:15:69:08:d3:5d:02:fa:
1b:f2:38:b3:08:09:4f:fd:48:8a:bf:bc:81:7b:91:
01:0f:43:65:62:d4:84:bf:65:6b:4a:12:b9:81:02:
26:04:79:75:14:ef:1c:cb:f5:35:7c:09:8a:dc:5b:
75:53:0b:47:05:de:7b:fd:e5:41:31:52:98:32:4c:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:78:B9:A8:C2:9F:EB:B4:0E:05:A7:ED:92:FB:82:B9:BC:B3:2A
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:38:40:7c:53:89:67:a4:4a:49:eb:07:42:77:b1:b9:6a:
64:d3:73:23:45:14:af:d5:03:11:ad:58:90:9d:9e:7e:17:7f:
7e:14:13:e5:a7:36:d9:52:54:8d:7b:ca:65:f5:38:e2:2e:f2:
c4:31:ea:df:5e:00:2f:0c:62:44:a1:35:ca:1e:88:a3:b2:10:
21:15:b4:b8:26:a9:85:33:30:93:c7:a0:61:4d:c7:75:01:60:
3e:d7:51:43:e4:7e:03:1e:f6:93:3c:14:e2:f1:0c:d4:78:6b:
bb:31:c4:83:d0:46:96:d6:68:e4:4d:b9:c7:78:4f:0b:c1:b3:
63:bd:3d:28:57:dc:3b:3a:01:c1:30:7e:0c:a8:e9:2c:f7:84:
e6:f8:ff:2c:8b:d8:ec:4b:ab:cf:06:d8:a7:7e:2a:8b:40:53:
88:c7:08:6b:37:58:05:36:7b:77:49:d2:56:6c:2c:22:97:1c:
65:40:c2:1f:93:3d:4f:9c:eb:ab:d3:6c:27:b7:29:6e:c4:00:
65:90:8c:25:b2:e4:80:71:e9:f9:9a:e9:4e:4a:dd:0c:ff:bb:
2e:c4:d3:22:da:51:5e:d9:5f:65:c0:33:18:b1:62:49:cc:1e:
23:99:54:5c:9a:76:f6:70:d1:f7:cb:20:7b:3c:a6:da:98:61:
34:db:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:00 2025 by rpki-client