Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: 7DOaF30NZOrjJmy0IovQPCdfC6qhCWSW0W+49RG1Ocg=
Subject key identifier: ED:60:4F:17:AB:1C:63:08:E5:A5:6D:A8:C4:32:9C:F8:3A:DE:40:72
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019A50E3244E97147F9CB4E0EF4DF726D8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 15D6
Signing time: Tue 04 Nov 2025 22:00:54 +0000
Manifest this update: Tue 04 Nov 2025 22:00:54 +0000
Manifest next update: Wed 05 Nov 2025 22:00:54 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: 27+mstzUQ6/86jVWzDvHu3ikSUgO2Bjizvyoh53ULxY=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:24:4e:97:14:7f:9c:b4:e0:ef:4d:f7:26:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Nov 4 22:00:54 2025 GMT
Not After : Nov 5 22:00:54 2025 GMT
Subject: CN=ed604f17ab1c6308e5a56da8c4329cf83ade4072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:1d:69:14:05:ae:ff:2f:ef:af:94:b7:ff:
cc:1e:a7:ee:29:9b:71:42:f4:0c:b3:01:aa:1c:06:
83:d1:b5:75:e6:eb:06:b5:3c:a0:73:36:0c:04:6a:
00:d1:31:f6:1c:28:a2:a1:66:13:2e:11:4c:f9:e2:
bf:e3:52:0c:70:0d:6d:7b:f7:f2:e3:84:8e:be:23:
ec:58:06:6d:0a:69:ef:2d:34:a5:34:d2:b4:d7:d3:
a1:65:1c:ed:27:e7:a8:f9:95:97:eb:dd:b3:59:97:
f5:ed:43:0f:51:c6:eb:f4:35:22:8b:49:d1:5f:c7:
af:c2:e0:35:a5:5e:ac:23:a8:df:c2:d4:7e:a1:2b:
e2:dd:9f:15:5c:81:ad:a7:d7:9a:d9:3d:83:76:f3:
5c:ab:d5:a2:64:98:ab:f6:0c:91:42:fb:e4:99:be:
6e:9c:96:08:9b:ec:00:16:9c:22:11:dd:1d:03:dd:
2e:d2:1e:97:bf:44:17:16:2f:d0:31:6d:28:c1:b0:
eb:f9:50:07:02:81:36:b9:02:a5:56:14:fc:29:ce:
78:a0:5a:55:25:ff:1d:1b:e9:64:89:fa:eb:e6:1e:
54:b7:b9:4f:e4:42:15:68:05:99:23:93:56:e0:0d:
5f:db:13:89:54:b2:f4:17:be:66:5a:d1:b6:f5:29:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:60:4F:17:AB:1C:63:08:E5:A5:6D:A8:C4:32:9C:F8:3A:DE:40:72
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:49:40:a9:6e:c0:71:2a:5c:44:0b:9b:ee:f3:c0:b0:24:
2b:0b:97:d6:4d:11:40:93:f5:7c:b1:4c:49:84:11:bc:dc:8e:
9a:5f:3b:32:d4:86:dd:fc:82:0d:a3:3e:71:2b:7d:92:87:96:
89:5f:56:67:3a:91:64:88:9d:56:c4:3d:26:a9:46:51:e5:99:
3a:40:f5:78:a0:6b:87:15:56:10:af:22:2a:3b:9b:a5:02:f5:
d5:04:3c:95:dc:38:76:31:7d:e0:42:31:ec:b8:fd:b9:87:1f:
c7:28:e0:29:3f:a5:9f:4a:da:54:67:a9:88:21:6d:d7:ef:b7:
53:4f:71:3e:42:00:9b:5f:b2:43:e7:a2:e2:f8:90:98:ca:3c:
a0:95:4a:4e:5f:10:52:96:5e:d2:bd:e2:d7:1d:9c:88:39:63:
06:e7:96:bf:59:ef:9d:14:83:a5:7a:21:1b:3d:5b:d0:ee:e1:
b9:ed:35:94:6d:d6:e6:6d:bb:ed:5b:0b:44:00:c5:ea:ce:1d:
56:f5:90:09:ea:33:37:b0:86:4f:6f:77:99:b4:fa:c0:28:b1:
93:3b:70:7a:92:bb:1a:19:46:a5:6c:b3:68:6e:24:c7:73:f1:
86:2c:e5:2d:f6:fe:f9:2d:75:78:d9:4c:a7:81:2e:1e:aa:e2:
fd:36:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:32:58 2025 by rpki-client