Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 7D5tkhvZHzfYmeGFlnnUhh6Gw5QSsMFpcWHJlVaEESk=
Subject key identifier: FD:7A:38:D6:8C:07:2F:E8:46:A4:A7:4C:35:6A:8A:C1:37:27:91:3C
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019A4F625C54CC2731C7456F1968CD16951B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 15:00:37 +0000
Manifest this update: Tue 04 Nov 2025 15:00:37 +0000
Manifest next update: Wed 05 Nov 2025 15:00:37 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: rGxO/LONCj2lLIkk254Q3ZtC7Ql6XaDIJckf4LUFKQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5c:54:cc:27:31:c7:45:6f:19:68:cd:16:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Nov 5 15:00:37 2025 GMT
Subject: CN=fd7a38d68c072fe846a4a74c356a8ac13727913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:74:fa:8a:f3:06:6e:f4:e9:98:ea:82:d2:
24:f8:ae:f2:1a:8c:43:4a:78:bd:e3:ec:e2:92:96:
af:c6:0c:f5:a8:80:7d:ca:35:bf:b2:70:a7:a7:86:
e8:66:0a:9e:5b:c0:e2:15:dd:6c:49:b7:8b:98:73:
5b:32:c1:18:45:73:24:af:ab:9b:60:b3:5d:26:87:
87:4a:f9:d9:e9:c0:79:72:b6:95:bb:fd:5d:06:3a:
67:4c:d8:00:0d:cb:c4:bd:7a:63:bb:bb:1f:5b:ab:
5f:e1:99:ff:c8:aa:dd:bb:4f:4a:4c:3f:9f:ce:43:
b8:c8:e1:be:cb:86:9a:ca:47:a5:0b:94:fc:58:24:
a9:1e:07:e3:ca:79:2b:f1:6d:66:db:bd:0d:60:d6:
9b:3a:34:bf:39:60:22:b9:7a:bd:95:ed:d0:67:c5:
c0:d2:2d:b3:b0:66:3a:02:29:1f:8c:6b:73:fb:95:
27:4d:89:9f:90:32:42:2f:05:1b:f3:56:90:8d:52:
71:0b:ec:5d:3c:c0:b2:59:5f:cb:9a:57:2b:a0:e1:
5f:0d:0e:b0:5a:46:12:c4:24:47:5f:a6:53:0d:17:
c8:a5:0b:c2:09:b7:8a:04:ca:b9:82:4f:e1:d8:43:
e5:7b:d0:8d:62:1f:82:b3:de:cd:a6:3f:13:64:3f:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:38:D6:8C:07:2F:E8:46:A4:A7:4C:35:6A:8A:C1:37:27:91:3C
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:b5:71:6b:d0:4a:f1:f8:92:0e:eb:73:0b:ff:3b:18:72:
a5:ed:d3:55:05:c4:2c:53:f2:47:3b:ff:1a:4e:a5:b4:69:d6:
9a:b4:aa:4c:cf:4c:b8:0d:9c:8c:f8:d3:1f:4c:1a:f9:a4:d8:
bf:43:4e:7c:31:ac:5e:94:b0:63:16:f5:68:a0:31:c6:27:ab:
7b:39:cd:86:c2:0a:4b:d9:65:54:81:5a:d9:c1:76:ca:d8:22:
bc:8d:b8:f3:10:2d:68:23:b4:27:b8:6d:92:89:ae:9d:e6:86:
f3:03:9c:00:09:2c:09:ff:1e:2d:ec:0d:1e:d8:ab:e9:aa:32:
4a:6c:5b:e8:f0:1e:9b:e8:f4:bb:b5:4b:1e:86:a7:8b:bd:f1:
62:9e:eb:6b:5c:69:11:a5:d8:90:ce:9d:f8:69:f8:7c:fc:ec:
dd:2c:c7:77:58:cf:37:6d:81:e7:df:2f:cf:b0:be:1d:39:9c:
5c:18:ac:a8:06:19:3a:0e:cd:0d:a5:bd:cb:ba:6b:e1:91:84:
3d:fd:9e:1c:a7:d5:84:e2:38:9e:56:8c:8d:82:68:a3:05:cf:
2d:85:52:36:a3:82:ee:43:8b:e7:0e:f5:27:a3:8a:e9:2f:d9:
b1:00:cd:27:3c:ff:de:89:a1:6d:78:30:a9:95:aa:49:e5:7f:
8a:b0:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:40 2025 by rpki-client