Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: +kBOb8P9zIQonhpavUF0+Mk3dAU9DAQJyNPFdtddCgw=
Subject key identifier: 11:B1:F3:A1:30:23:2B:1E:7F:3B:10:43:7A:F5:AF:DA:45:A1:07:FF
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 019A4EF4A4EAD37E37D6D039DB4BC7D9BB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 122B
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: liZxOPXRG2yDrOm+sabw938W8HrZpFDkLMKLdgDIOX0=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a4:ea:d3:7e:37:d6:d0:39:db:4b:c7:d9:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=11b1f3a130232b1e7f3b10437af5afda45a107ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:bf:d4:85:50:84:fd:78:f3:47:4d:b1:7d:
47:a6:48:f0:2e:a9:11:52:f8:06:18:ea:b7:ba:f4:
30:49:2e:fd:cf:cd:25:6e:ae:62:3c:b9:f6:72:31:
10:c7:18:fc:8f:2a:32:82:aa:99:9e:01:cd:20:0a:
d4:9f:97:cf:7f:aa:31:5c:7c:6e:11:d5:00:7c:ef:
81:60:d6:82:74:6b:9e:f9:85:2b:b9:28:fa:97:36:
d0:be:74:16:a5:d8:3e:6f:87:b4:59:4e:34:5a:1d:
0c:2f:31:3b:3a:54:42:fb:c7:70:0e:6a:f4:2e:28:
e0:0f:61:b2:a0:d7:32:f9:60:91:40:60:05:c1:30:
61:ec:91:99:04:73:3b:00:1c:4a:bc:11:c3:4e:a6:
39:84:03:6f:9a:b7:6a:18:ac:33:01:9a:80:e9:3a:
34:91:b8:cd:19:f5:ed:96:cf:b6:0a:23:75:35:9b:
b4:57:a3:b3:e1:a2:c2:49:50:f0:2e:ec:2e:ab:dc:
5e:ef:16:6e:40:95:6f:fe:38:a2:09:34:c2:fa:f3:
e1:93:bb:ca:52:54:20:f7:16:0c:ee:0f:b9:b6:72:
af:ff:44:59:5e:a4:ad:b6:6e:47:1e:65:c0:09:d4:
18:43:46:d5:aa:ac:3b:e3:1e:e2:83:38:56:17:72:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:F3:A1:30:23:2B:1E:7F:3B:10:43:7A:F5:AF:DA:45:A1:07:FF
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:64:23:8b:7c:d9:45:b5:d2:87:83:d8:5f:ee:3f:63:be:
7e:57:cf:6e:e9:bf:9f:e3:f1:c2:dc:19:9a:fd:b3:7f:8e:40:
04:64:f1:2f:7a:fc:43:eb:ea:26:9d:ad:3f:94:ad:68:df:55:
7b:cf:e6:46:68:b7:13:1a:26:b6:d5:04:b8:73:59:6a:a4:50:
83:f2:a4:5e:9c:79:73:fd:d6:77:ce:b3:f6:ed:40:21:d5:9d:
02:63:7f:dc:c1:08:f1:d7:c2:da:3c:91:08:f1:30:5a:62:65:
f2:2e:96:f1:95:99:c3:9b:1d:f1:11:25:e5:99:f2:1e:bb:02:
63:74:cf:0a:e4:73:38:54:6b:15:d8:3a:81:d6:e4:6d:94:76:
40:25:a2:25:36:f0:47:a1:ec:41:fc:03:40:35:2b:ba:40:af:
ed:a9:24:9a:f3:e3:6a:df:bf:18:80:22:48:89:39:1e:b7:43:
67:83:9b:62:17:73:71:90:1e:63:a3:ab:64:80:f5:fb:67:dd:
77:5d:38:21:ee:cd:dd:4e:6c:b0:05:92:88:43:80:ad:e5:95:
19:a7:33:31:7f:29:41:b4:0d:ce:92:3a:42:07:91:40:a0:d8:
db:db:43:be:cd:63:20:67:93:61:bf:1f:ef:9e:a0:ce:62:da:
1c:48:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:44 2025 by rpki-client