Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: +lHOkxA6Zp7vUgp4+Tfjp22VNdXG/WKK+E7PD1axA3Y=
Subject key identifier: 73:29:98:82:E4:9C:99:EA:81:B0:1E:6D:10:0D:73:75:24:B0:C8:7F
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019A52D184A37678D8887618FDE4D80043CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:00:53 +0000
Manifest this update: Wed 05 Nov 2025 07:00:53 +0000
Manifest next update: Thu 06 Nov 2025 07:00:53 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: Y1Ud5tkFT/gSS84aqxuM/nAPavBQy9JhHCM6Yb6T5zw=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:84:a3:76:78:d8:88:76:18:fd:e4:d8:00:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Nov 5 07:00:53 2025 GMT
Not After : Nov 6 07:00:53 2025 GMT
Subject: CN=73299882e49c99ea81b01e6d100d737524b0c87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:d7:2a:a9:39:76:db:b3:14:f3:1a:31:20:
ee:b9:74:e9:7a:60:e0:ee:9b:38:cf:0e:61:11:84:
18:b5:7a:ff:cd:e0:39:e0:60:05:1b:1f:d9:85:8f:
1b:89:d2:2c:12:3b:a5:f3:87:92:45:c6:ea:94:74:
c8:09:39:16:f5:a7:53:69:18:36:76:e1:70:3f:80:
3c:f2:ef:ce:92:04:b3:6f:87:e8:d1:8c:7d:ee:b5:
f9:11:ee:b2:e0:8b:f2:49:b9:6a:9b:ae:bc:0d:e8:
b9:12:d4:ef:15:73:a8:61:aa:b8:1d:e8:5d:b7:84:
fc:b3:2e:b8:b5:91:70:f1:f0:9f:ed:85:ea:0a:df:
5a:93:4e:8a:4c:29:21:27:1e:b5:2c:13:44:25:df:
e9:b9:94:26:83:63:43:7f:32:22:85:1b:f6:37:58:
2d:1e:f5:e8:4d:5d:81:f3:0c:9d:e0:bb:a6:d6:7a:
75:04:f8:33:d3:05:e0:5d:9c:bb:8f:64:e4:d8:27:
de:f6:36:7e:f5:2d:d7:3d:13:84:3e:09:80:1f:bc:
b8:d4:2a:ef:6c:82:82:bd:64:f3:6b:5e:03:ce:79:
62:48:ba:cd:69:e5:f5:c1:64:8a:c0:df:9c:9d:a6:
c5:b7:5e:07:72:f6:3b:f6:10:4d:ed:32:43:75:57:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:98:82:E4:9C:99:EA:81:B0:1E:6D:10:0D:73:75:24:B0:C8:7F
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:91:2a:36:f1:b0:33:99:77:b1:07:a6:d4:be:87:ed:ce:46:
68:70:7e:54:e9:eb:bc:02:20:1d:8f:f2:95:c3:90:6b:4d:eb:
cd:ed:e5:39:8b:a2:d0:33:3c:0c:32:50:2a:92:dc:dd:22:f1:
d6:86:79:c0:c2:d4:28:4e:6f:e6:1f:53:6f:bc:06:50:a0:70:
d9:41:83:76:45:25:c7:61:8c:61:4b:2e:dc:45:ec:93:f6:64:
d1:2b:e4:fb:e2:ee:6a:a2:67:de:2e:d0:8b:4f:e2:13:11:91:
f4:54:88:44:8a:e6:d5:c4:99:7c:9f:0f:0c:95:46:32:7e:c8:
6d:8f:79:76:c3:4c:59:92:2a:03:e5:c3:6e:b2:6a:cc:b8:7c:
19:24:3d:61:88:d9:81:b2:76:23:ef:89:0a:eb:18:fa:ce:1d:
3d:ab:b0:f1:ce:99:ef:15:79:e4:e2:64:4f:e1:46:c5:6c:c5:
c7:63:2c:1d:6c:76:35:0a:45:cd:c6:ed:5c:7f:c9:1f:14:6a:
c2:be:e1:d2:19:d3:f7:ae:09:46:2e:2f:d5:9b:22:3c:86:00:
63:22:6d:41:3f:55:dc:06:ca:13:90:df:37:da:a4:49:d1:a9:
eb:c4:7c:fe:20:dd:4a:af:bd:b9:f5:c3:83:e0:36:75:11:66:
27:e5:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:52 2025 by rpki-client