Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: 6fndICH6Uqy3wwx+6pDY7FE2ch44mjmzVsIha8KV85Q=
Subject key identifier: 38:F0:CA:22:48:A1:D6:85:D8:99:38:29:9A:1E:5F:E9:D4:39:33:D8
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019A4D05F435E0BF3479ED6128B2F0483259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 1082
Signing time: Tue 04 Nov 2025 04:00:27 +0000
Manifest this update: Tue 04 Nov 2025 04:00:27 +0000
Manifest next update: Wed 05 Nov 2025 04:00:27 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: D1/3VGxEuVeWhNRFeB3ZF41AP3OVbaXOHApttmzO6jY=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f4:35:e0:bf:34:79:ed:61:28:b2:f0:48:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Nov 4 04:00:27 2025 GMT
Not After : Nov 5 04:00:27 2025 GMT
Subject: CN=38f0ca2248a1d685d89938299a1e5fe9d43933d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:a8:55:d8:91:6d:8f:fa:9b:a6:3e:3d:91:
14:68:fc:d6:79:f2:b5:4c:f9:3b:e3:ac:f7:27:a9:
5a:61:4c:86:a1:2f:ff:9d:3a:d5:cd:ad:54:8d:36:
28:14:7a:c1:11:3b:67:8d:b9:e7:ed:31:bf:d7:76:
bd:cd:28:ef:cd:c5:f5:bf:45:df:35:1f:61:aa:63:
ab:10:0a:44:c6:83:f1:be:08:5e:1d:aa:f6:45:31:
15:cd:0f:f5:4e:38:07:83:b5:6e:05:30:dd:b7:ac:
90:06:81:61:16:ae:11:10:c0:b4:bf:91:c5:0d:ab:
25:b5:69:b8:aa:3f:ee:11:5a:8e:92:f1:30:75:36:
01:0b:9c:63:d4:c8:cd:fb:87:27:8f:8a:7a:e4:33:
60:af:d6:48:67:49:3e:47:be:59:2c:80:fc:05:8e:
06:1b:0f:5c:70:ae:e3:0f:15:b6:fc:7a:b4:be:2b:
8c:55:cc:94:43:87:63:4d:ac:1a:1d:e3:4d:d8:77:
28:e8:47:d8:13:a7:98:79:2f:20:c6:de:14:27:bc:
39:63:0d:20:f4:60:0d:5f:ac:fa:dc:31:da:13:ef:
00:8b:57:a6:98:77:72:21:c2:a9:ef:82:ce:b2:b1:
90:e9:40:37:6f:51:94:d6:f2:7e:c8:6c:37:78:17:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:CA:22:48:A1:D6:85:D8:99:38:29:9A:1E:5F:E9:D4:39:33:D8
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:57:ed:01:bf:c7:8b:43:cc:82:71:11:cf:ea:63:15:2b:
6e:bc:36:5c:68:f7:7c:77:c5:f8:13:ff:42:a9:55:64:f7:23:
e2:a7:95:65:03:71:b7:ec:68:6b:f3:67:0e:f0:82:3d:3e:42:
9f:0c:13:0a:ba:2f:79:9e:67:d8:bd:d6:d0:49:61:6a:35:78:
cd:5f:47:b3:17:3d:08:73:c8:09:45:9c:a6:22:42:dd:38:4e:
4f:32:90:0e:da:87:9a:ee:dd:f7:b9:53:8f:d9:42:5c:80:ce:
71:1b:14:45:e3:cf:9a:ee:3c:36:22:35:23:5c:3c:65:82:41:
d1:71:3b:de:19:f0:3b:71:56:dd:a9:03:ff:0b:a0:5f:60:8d:
94:78:2f:b1:d9:f4:84:af:95:70:c1:bb:43:91:90:ab:24:ca:
7b:4d:ad:91:b3:cc:b0:5d:6b:30:2f:10:61:97:3f:37:40:8c:
ac:c2:85:ed:5e:ec:5b:cb:57:33:a2:d4:b7:bf:58:ca:92:7c:
9a:cc:35:18:58:33:cf:8e:09:83:c6:22:d6:36:d6:fe:3c:76:
59:53:c2:ed:44:35:e9:f1:20:d9:ca:30:74:e2:1b:28:b0:a0:
f5:34:91:4e:a2:c2:c2:26:fc:e6:4b:23:16:fe:b0:a5:d8:c4:
60:28:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:25 2025 by rpki-client