Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: QpLdVNfA3IhYcV+mOHQhVD6P6/02r2/VKJXo5BW0RkI=
Subject key identifier: B5:2A:66:85:90:A5:35:DD:9B:6F:70:87:37:B6:1A:65:6E:E5:A6:7F
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019874506060DA70157E91455891793A565C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: L4SRmsHkBUbLGmGtdgrn4u1zINiLhDdAUw5UsPZRKhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:60:60:da:70:15:7e:91:45:58:91:79:3a:56:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=b52a668590a535dd9b6f708737b61a656ee5a67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:63:76:32:84:ee:b3:b8:b8:25:df:a6:16:58:
2f:a4:c7:d6:21:c0:70:24:eb:3e:40:bb:97:ad:5a:
fc:94:06:6c:f8:5d:bf:5d:94:60:71:17:7d:34:89:
35:30:b8:20:fc:ac:cd:0e:d5:d8:9f:38:c5:5c:53:
59:ad:c1:af:36:7f:49:ba:1f:2b:9d:33:4f:72:20:
2e:59:a4:b0:71:28:67:cc:9c:71:dd:ea:09:e1:39:
57:93:3c:ab:44:37:30:5a:01:e5:d6:13:fa:79:78:
b6:11:27:89:19:a0:d0:11:fb:e3:33:19:d8:e5:5b:
70:64:52:db:4d:d2:30:3d:07:b8:92:fd:67:f4:0a:
08:d8:2b:33:2b:7f:e7:f4:37:a1:c6:11:ad:25:55:
c6:1a:3e:5d:d7:d2:24:50:74:95:3b:72:43:85:dd:
c7:a2:0f:5c:79:02:8d:4b:e3:61:c3:b1:5e:0a:d3:
16:12:14:a1:3f:2d:81:70:76:50:01:c3:74:b9:43:
4b:ff:a3:4a:0a:c6:76:39:1c:af:31:fd:a9:0f:bf:
79:f9:5c:b6:ef:1c:69:9b:d0:f2:0c:2c:90:3c:7e:
a5:51:ba:82:fa:fe:f7:b0:d7:85:b2:5e:3f:8e:fc:
7e:05:bb:d0:94:aa:3e:82:a8:b5:99:0b:cc:37:67:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:66:85:90:A5:35:DD:9B:6F:70:87:37:B6:1A:65:6E:E5:A6:7F
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6e:de:ea:31:b3:b3:26:5a:05:ea:27:eb:36:71:15:53:da:
29:5e:67:6a:84:3d:a0:6c:7c:04:6f:49:0d:28:4c:ca:f6:39:
cb:43:6c:cc:a8:7d:24:64:31:36:11:55:c9:d7:75:f2:06:99:
4d:a3:79:41:55:6c:6b:7f:08:03:9a:f8:21:de:fa:35:2f:05:
7a:33:9b:07:ff:73:97:ba:a7:4a:e2:70:47:cb:a7:09:92:fb:
43:1d:8b:b6:3d:e7:9d:68:03:af:a9:40:4a:9f:87:7e:b1:b7:
22:38:f0:62:37:d2:f4:96:e6:e2:67:dc:51:1a:28:2c:d1:ac:
ae:83:91:13:06:00:4b:5b:31:93:e2:d2:55:38:20:d8:ea:34:
8f:b2:5a:93:4b:7e:fe:35:5e:50:85:30:63:91:10:2e:51:8d:
29:cc:1c:d9:06:de:89:0b:71:6e:68:bb:63:ed:1c:b8:60:13:
f8:75:96:53:84:5b:ad:e9:ca:e8:0a:0c:07:18:19:12:65:3e:
6d:17:22:0f:21:cd:5e:b4:01:c0:b6:79:5b:68:03:5c:8d:14:
bf:5e:79:dd:0b:bc:d2:87:d2:da:ef:70:76:47:16:b5:a8:09:
88:34:a1:93:c8:fe:c1:b2:f9:8b:47:6b:c0:f6:ac:1b:48:30:
e0:a2:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:49 2025 by rpki-client