Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: GSURBCAq900uIQdzMvyb/BvHGzcMIeqN2eenFdu1oZ0=
Subject key identifier: 12:4A:D9:71:E6:20:AC:E9:AE:94:33:57:93:F6:7C:0D:F0:89:FF:1E
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019A51874E3D0DDD1501371C6321F6E62832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 105D
Signing time: Wed 05 Nov 2025 01:00:13 +0000
Manifest this update: Wed 05 Nov 2025 01:00:13 +0000
Manifest next update: Thu 06 Nov 2025 01:00:13 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: iy/K4Lr+t6Zcbcf3AKcEgZAfTxFw904HCvUziSg/fVw=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4e:3d:0d:dd:15:01:37:1c:63:21:f6:e6:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Nov 5 01:00:13 2025 GMT
Not After : Nov 6 01:00:13 2025 GMT
Subject: CN=124ad971e620ace9ae94335793f67c0df089ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:9a:b4:1b:45:1f:05:fa:21:26:b5:59:86:
ca:8f:03:5d:ad:70:84:81:a6:e7:8e:18:19:7f:e0:
96:72:ed:37:54:c3:ab:71:b2:14:97:68:14:21:5c:
a8:28:c0:25:13:10:a4:16:27:41:60:77:d5:d9:1d:
ae:f9:2f:11:33:32:50:53:c9:cf:ea:8a:3d:c7:b6:
b3:2a:ce:17:f9:db:44:4a:c0:c1:00:df:7a:dd:65:
5b:2f:53:da:0d:16:4f:64:45:70:1f:2c:40:7b:38:
42:ac:fc:0d:34:44:60:db:41:7d:f9:b1:df:c7:05:
40:f3:a9:bb:89:d2:33:3c:f8:25:44:f6:33:87:49:
91:d2:1b:52:19:af:ff:5d:8c:da:87:7b:5f:dd:1d:
9f:ff:8a:f3:4a:47:99:c3:40:bb:bd:94:7e:2c:22:
48:86:78:2f:05:11:54:c7:70:94:f2:70:1a:12:ef:
e9:6d:13:a3:0d:7f:0e:0d:fe:4c:81:ea:16:f8:57:
38:7a:20:60:39:20:71:20:e8:96:a6:af:d5:a9:a8:
3c:ea:ba:02:b0:10:db:f5:7c:61:8e:97:ea:d0:76:
a4:33:bc:55:d6:13:12:ff:00:75:95:a2:40:02:d0:
07:dd:38:c8:3c:33:93:3c:08:52:11:8f:38:01:f0:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:D9:71:E6:20:AC:E9:AE:94:33:57:93:F6:7C:0D:F0:89:FF:1E
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:27:68:14:e4:a9:ab:4a:f5:40:0f:a0:e0:e0:03:61:41:74:
b2:1b:4e:9b:34:a2:5f:c4:bd:43:a0:0d:23:a0:cf:1b:72:c1:
e3:38:6a:b3:65:81:5d:32:12:15:d5:2d:9f:56:4a:b5:d4:f9:
a2:78:24:5e:8b:0a:f9:4c:a2:28:c4:15:f5:38:97:49:8d:79:
26:79:5e:bd:d3:8c:de:c3:a1:c3:c5:f4:a3:a7:ad:ed:1a:db:
ea:08:68:d1:10:d4:ff:31:f7:98:a2:40:88:67:9f:4a:2f:5d:
4f:2c:af:db:d8:c8:53:eb:ec:da:20:ee:54:8c:0d:18:60:81:
35:d4:37:5a:54:eb:7b:7e:fd:0e:c5:9e:95:09:e9:0e:e5:94:
62:45:9b:9f:92:57:26:e3:2b:69:1d:2f:0b:34:bc:c8:c0:4f:
ea:24:a0:ed:1d:f2:60:b0:d5:81:42:66:cf:6a:00:2a:9c:49:
9b:b7:28:e5:bf:7c:14:55:16:e8:d5:f4:23:fe:df:85:55:2c:
25:77:a5:f4:27:20:8f:e1:f8:f6:24:a1:c7:52:28:24:fd:78:
69:8f:96:71:6a:71:10:ea:34:a6:95:dc:5c:bf:04:09:87:d2:
c6:8c:60:30:46:72:06:1e:b4:20:57:e2:a4:52:8e:44:4b:6f:
9a:3d:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:00 2025 by rpki-client