Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: TvTptlNreOCuF3oOceQAW909imxl4parNoaK6fNUBXU=
Subject key identifier: 1B:D5:13:13:49:A4:A6:18:29:54:25:D3:62:57:5E:E4:1F:9D:0F:6B
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019A522CB0D94C895A56569C2FBE9763E952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1720
Signing time: Wed 05 Nov 2025 04:00:51 +0000
Manifest this update: Wed 05 Nov 2025 04:00:51 +0000
Manifest next update: Thu 06 Nov 2025 04:00:51 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: ctIdcbAxzlgE61iaJYeLZI-atK4.roa (hash: xe/X44jbVuhNTWtEZLlddMSK0Nf/sdgGvPMIEXHpN6g=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: eNd1RmGkr3t3pJJKl3Cd5zYu0cv/jtNVpp5Gbn0nNhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b0:d9:4c:89:5a:56:56:9c:2f:be:97:63:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Nov 5 04:00:51 2025 GMT
Not After : Nov 6 04:00:51 2025 GMT
Subject: CN=1bd5131349a4a618295425d362575ee41f9d0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:f1:dc:de:68:28:5f:5e:8c:5b:59:31:e3:
8a:eb:11:2a:f0:f5:d7:57:e1:0a:8d:fd:5b:94:92:
0d:cb:59:68:ba:0b:18:93:3f:10:de:b4:1c:e3:3a:
f2:4c:e1:7d:79:04:7e:52:57:42:98:7b:f8:f9:e3:
2e:b9:be:28:58:5a:84:ee:42:c1:48:31:94:74:fc:
a5:ce:4f:09:31:4e:1a:5b:29:00:c9:c0:2a:2a:5b:
2c:c0:43:f4:ff:ea:f5:9c:5d:0a:25:0b:5e:d4:fa:
6e:f2:68:3c:77:5c:1b:03:ff:d9:ea:93:74:18:46:
d4:0a:a8:60:45:c6:8b:97:c9:d0:da:31:ba:57:8a:
ce:3d:2b:a3:b5:78:80:88:f5:d2:ab:1f:b9:ad:8e:
74:ff:33:96:d0:05:d4:84:b5:d6:13:cd:e3:2f:a3:
23:5a:32:ee:9d:a5:0a:c6:6c:6d:0b:55:3f:68:32:
2d:d1:48:ed:40:fc:80:bf:9a:ae:eb:81:2d:59:13:
5d:78:55:d1:09:bb:6d:ca:36:d0:8f:7e:9e:4a:ee:
ad:a9:2c:0d:c6:1c:d4:38:f2:10:8b:9a:b7:32:be:
cb:ac:c8:eb:0b:0f:0f:d9:ef:6b:b3:05:c2:26:d8:
aa:38:8e:d4:c2:17:11:2b:6b:22:da:d2:22:ab:c4:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:13:13:49:A4:A6:18:29:54:25:D3:62:57:5E:E4:1F:9D:0F:6B
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:61:aa:30:63:01:9e:a6:92:b1:c5:79:ae:c7:6a:71:64:
07:30:58:25:3f:3a:ec:10:ea:97:8c:77:1b:ba:9c:f7:b4:1c:
42:ac:5f:0c:49:25:be:23:46:40:66:9e:e6:55:e2:b8:d0:46:
92:d8:06:48:4f:43:15:53:52:41:5c:b8:c8:57:fd:6c:48:d0:
a8:67:4c:57:10:6b:74:dd:9c:a9:2f:4f:db:ca:62:48:22:5e:
ac:f7:44:a7:ef:9b:60:02:2c:68:c5:62:ae:19:6f:ee:6d:8e:
18:73:36:4d:7c:8c:7d:b7:05:d5:7c:70:b1:a5:47:5b:1c:f9:
dc:09:49:cf:89:3f:78:00:06:42:fc:05:c0:a5:a7:84:39:d8:
b8:0a:01:ad:3e:c0:3a:9d:66:7c:f9:08:f2:e5:73:92:8f:8f:
87:48:eb:10:d1:03:8b:1d:e3:ea:06:85:9b:63:20:64:96:df:
6d:a1:73:de:79:06:1f:1f:fc:4d:0f:e4:e2:ab:fa:14:99:f0:
49:19:de:37:ed:f6:ba:01:62:16:9e:65:fd:9c:32:a8:50:1b:
83:2e:e4:f5:14:1c:2f:fd:b5:7c:c0:87:f1:3b:9c:0f:45:50:
13:8d:19:3d:93:ba:c4:e0:90:64:00:1f:62:47:68:e2:d8:dc:
3b:a4:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:09 2025 by rpki-client