
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: maVhf3Kfp5QeCA9DcqNYnPavYkyxtQkl7+AFyThj4CE=
Subject key identifier: 6E:9A:46:4E:DE:FA:C7:87:AB:C3:FB:A0:65:C2:B6:0F:82:CC:4C:5D
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 01987B9BDFEEA4108F38D64591D2CA1709C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0F91
Signing time: Tue 05 Aug 2025 19:01:09 +0000
Manifest this update: Tue 05 Aug 2025 19:01:09 +0000
Manifest next update: Wed 06 Aug 2025 19:01:09 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: ZVgcd3XPy+VTesSqAJRZLztrHTVtCvdUPd40aR/5sUg=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:df:ee:a4:10:8f:38:d6:45:91:d2:ca:17:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Aug 5 19:01:09 2025 GMT
Not After : Aug 6 19:01:09 2025 GMT
Subject: CN=6e9a464edefac787abc3fba065c2b60f82cc4c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:7a:04:8a:eb:bd:00:a7:af:3c:a4:da:2f:
b7:b8:2d:3a:24:7d:83:b9:72:c0:d5:a1:ff:9a:a6:
fc:ba:2b:58:80:50:54:0c:95:19:ce:d2:00:5d:9b:
3a:23:ca:ff:9f:ee:e6:0d:05:90:af:f2:fe:29:89:
11:ca:5c:ab:f9:e1:b4:ac:e9:52:00:d6:61:47:5d:
04:59:fc:5c:06:88:cd:13:f4:63:d7:b4:84:71:37:
59:ea:e3:a8:87:d3:82:11:f3:b7:61:24:af:33:91:
47:ec:42:2c:8b:61:62:ea:37:08:71:17:8e:1e:d4:
15:f0:b1:4b:56:5e:6c:b2:b8:97:ad:8d:16:f4:6a:
5e:0d:0c:65:fb:7f:8c:a5:d0:61:82:7a:96:86:ab:
e9:5b:06:08:19:07:b0:aa:80:4f:15:eb:c0:67:7e:
48:2c:cf:73:d1:f9:c6:7d:95:f3:a1:b0:e7:ea:5a:
e9:ee:26:05:98:da:a0:e0:f5:bf:d6:8d:de:f0:11:
fc:9f:c4:cb:e1:50:9a:57:6c:36:6c:4e:e5:42:0e:
32:f4:d4:e4:81:40:f1:27:2d:81:fc:c9:75:c5:70:
d5:60:a9:1c:d1:89:71:1d:af:9f:b7:bb:c8:a5:98:
74:6b:1b:1b:e8:0b:70:bc:ff:84:bc:c5:ae:ac:14:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:46:4E:DE:FA:C7:87:AB:C3:FB:A0:65:C2:B6:0F:82:CC:4C:5D
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:a7:9e:c3:8c:a1:89:49:9c:d6:c8:61:93:12:6b:db:73:
8c:d8:b9:42:a7:78:a9:89:19:bd:da:ef:25:98:b4:37:37:9c:
1a:f3:a6:af:8e:fe:93:24:7d:95:3b:64:40:f5:43:19:09:2a:
9f:12:75:57:11:dd:8c:8c:ff:5b:9f:64:84:40:0e:3d:34:fe:
6f:5e:89:5b:c5:78:f5:2d:06:44:c8:34:9b:7d:47:0b:69:14:
03:b9:87:7f:71:3d:31:76:4f:ea:76:62:f0:54:09:4d:8c:4d:
a2:3d:7d:bd:13:44:3b:39:c3:0c:e0:3a:18:70:55:89:fa:2d:
67:98:59:70:f5:c6:60:48:4f:e5:b8:87:41:de:e0:30:d3:6c:
ea:7f:da:5d:d9:77:8e:30:03:08:37:13:b1:d9:e5:b8:58:75:
80:4d:fd:30:d3:0e:b8:7c:69:8d:c0:fa:31:b5:28:64:ac:d6:
58:4e:4f:72:cc:4b:14:f9:a6:f1:19:57:ce:38:2b:2f:6d:49:
b9:4e:bf:07:79:85:c4:ea:f0:30:3b:b1:ad:52:59:f2:51:a6:
26:0f:db:7f:4b:9f:19:39:a4:ae:0a:25:10:e8:1b:73:f7:1c:
00:d5:e6:5b:7f:95:03:db:a1:4c:db:83:85:a1:a7:c7:43:f4:
e4:65:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:07 2025 by rpki-client