Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: 3Bo33gvik5DRqU9Ew5GEI/urZMoVzOqX9zWLH2uHwdg=
Subject key identifier: A0:EF:1C:0E:33:A9:DF:3D:4A:9D:51:8F:7F:C9:A1:0D:98:BD:0B:6F
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01987418DEDDC3E9830ECDB52531BE6F4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 08:00:43 +0000
Manifest this update: Mon 04 Aug 2025 08:00:43 +0000
Manifest next update: Tue 05 Aug 2025 08:00:43 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: +WFNlLpC02FpWttqHBktuot5IDFgMTLkoqEb+OSkXtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:de:dd:c3:e9:83:0e:cd:b5:25:31:be:6f:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Aug 4 08:00:43 2025 GMT
Not After : Aug 5 08:00:43 2025 GMT
Subject: CN=a0ef1c0e33a9df3d4a9d518f7fc9a10d98bd0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:8d:7c:24:c2:a2:a1:ae:5c:55:00:e0:b6:
43:64:13:67:36:74:34:66:fe:37:8e:78:07:90:f0:
fc:85:88:a5:b8:3d:6f:56:00:ad:a2:ca:9a:bb:92:
2e:a4:db:8e:31:75:24:61:3a:55:b2:a5:86:c9:74:
8b:2d:0e:0b:f5:33:c0:9c:c6:d0:0f:50:24:ae:a3:
90:f4:83:ec:91:29:17:49:c5:82:63:80:7f:d8:40:
02:b7:98:66:b9:9c:16:5d:d6:39:77:65:b7:37:4d:
12:44:08:6e:ee:c5:50:f7:e6:94:07:19:97:30:ff:
40:b2:03:85:c5:12:77:76:d8:fc:49:9f:17:43:92:
bf:63:c8:fa:e2:79:78:81:5f:d1:38:f7:f7:06:e7:
3f:9f:13:62:08:f7:62:3f:d2:30:b9:d4:2b:14:01:
0e:a6:16:13:4d:45:0a:ef:b8:5c:45:de:ab:9d:c1:
0f:61:8c:42:aa:ad:77:64:32:d2:e0:13:c4:d9:8b:
40:13:9c:5e:84:6b:08:60:1a:7b:0e:b7:ad:ca:69:
f1:92:02:11:c4:d4:e8:e7:7a:71:d7:3b:ce:60:0f:
9c:b8:85:22:9f:b5:eb:2c:a9:f2:a7:ed:18:69:49:
b7:26:28:71:4b:57:35:29:30:e9:7f:0a:71:a8:b7:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:1C:0E:33:A9:DF:3D:4A:9D:51:8F:7F:C9:A1:0D:98:BD:0B:6F
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:90:4e:ca:0a:38:13:05:dd:46:06:a6:dd:55:70:f7:22:ab:
50:e8:c8:16:e6:28:00:5c:3e:7e:0f:7a:8e:e1:b5:b5:d0:cc:
a1:20:71:db:5d:f5:f8:56:d3:50:b8:21:1f:d7:d3:6b:ce:bb:
66:89:46:89:09:82:f8:8a:c2:d2:16:86:ab:92:5b:e3:b5:36:
7d:5a:d3:c4:a6:43:b0:66:3e:a8:a8:c0:84:8f:9a:7c:a3:b5:
a4:09:c5:1f:df:0c:48:ec:e4:66:84:8d:4e:54:44:0e:94:14:
65:11:75:a0:91:b6:51:62:9e:49:26:44:81:f8:35:ce:c5:23:
ec:be:a9:8f:15:c1:b8:47:8b:74:b1:b9:85:60:aa:56:07:1c:
96:67:6c:aa:0c:e7:14:2c:1f:8b:49:f5:ca:2f:56:f4:45:58:
cb:7c:9d:76:bc:74:bd:86:03:3e:18:6c:b6:a4:17:9d:bd:2b:
90:2a:72:d9:b2:7b:76:14:c3:2d:f8:8c:fe:bb:a5:66:f7:ad:
42:2e:6a:93:a0:77:ce:e8:1b:65:88:e7:f5:4a:83:13:39:84:
3a:ed:22:f4:15:dd:49:2f:35:10:8d:fc:93:bb:42:2d:0b:0c:
87:cc:dd:b8:e3:6d:82:28:78:65:26:7e:e8:8e:a9:67:c1:a0:
5f:92:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:16 2025 by rpki-client