Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: 7Srmbuiw1j6P1Bkg4kuvvapZBDYY40giF1UpTrL7uVY=
Subject key identifier: 46:9A:31:B5:C4:E2:B8:35:47:F6:CD:4F:53:DB:F4:F2:6E:96:18:9A
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 0199FB0EDCC77FD9758ECB630709234975AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0F16
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (hash: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: pvFvurIyG1uea0N4582BQDUz7cKvBvrpeni8MHQAanY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:dc:c7:7f:d9:75:8e:cb:63:07:09:23:49:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=469a31b5c4e2b83547f6cd4f53dbf4f26e96189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:01:d5:9a:be:7a:18:36:94:47:bb:41:c8:
fc:d2:ef:45:ab:9c:3a:6a:d6:ef:f9:7e:21:89:eb:
8d:03:87:6d:4d:1c:ae:04:ea:49:e6:da:15:f6:00:
4c:78:29:55:9d:5f:f1:9e:a4:ab:07:e8:6d:7c:07:
28:60:3d:be:bf:35:cd:1a:3e:1c:17:d0:5b:1e:4c:
a4:49:30:b6:70:a8:08:a7:dd:2c:12:ba:5d:55:71:
19:59:2e:6e:9d:d7:82:14:c7:61:be:bc:ed:f9:9e:
df:5c:88:9c:e9:f4:b8:df:74:59:2b:a3:77:1e:db:
a8:18:b9:c9:40:8f:82:21:ba:87:d4:fb:52:f5:b7:
92:b8:fc:2f:ef:c2:ca:82:20:48:e9:fc:fc:f9:4c:
23:ce:63:08:47:cf:42:36:62:8e:33:3b:2e:95:96:
24:e8:c6:84:87:22:08:cb:31:67:41:13:3d:53:d8:
71:b4:20:73:9a:aa:b8:8d:b9:ce:7f:d1:b2:56:22:
c4:04:5a:f3:f9:4b:88:f2:08:06:25:d5:fd:8b:45:
78:dc:16:25:87:0f:2c:94:c2:33:3d:a4:0e:8f:31:
dd:b3:61:4f:48:30:93:2a:2b:d0:b5:74:0a:91:b9:
78:0b:4f:8d:fc:43:79:7e:72:80:a6:b2:6a:47:26:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:31:B5:C4:E2:B8:35:47:F6:CD:4F:53:DB:F4:F2:6E:96:18:9A
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:35:9d:42:85:c1:0d:11:da:fe:55:2f:28:3a:0b:3e:62:
9a:c1:ee:5c:fb:5b:bf:cf:05:21:3e:f9:25:38:c1:b9:e8:93:
86:1e:8e:31:2a:a8:88:ab:ae:f8:35:0e:98:a7:06:41:99:83:
cb:b8:2b:b8:51:62:83:cf:9a:e0:db:25:3d:61:a3:79:53:da:
76:7d:21:62:52:d6:92:ae:92:36:a3:8e:61:03:8a:1a:50:0c:
6a:76:5a:3a:23:7d:4d:7b:4c:0c:a7:52:bc:79:cd:2b:fb:85:
00:bc:1c:b1:90:f8:7f:ef:2b:16:b8:7b:a9:4e:f6:5c:44:2b:
14:de:c3:58:f5:10:cf:6a:c0:09:45:c9:3f:36:16:2d:fa:86:
7d:d2:51:2b:90:18:7c:0a:58:95:d4:a8:b3:b0:60:2c:54:a5:
59:1f:9b:67:c5:18:38:78:66:cd:07:1b:59:bd:dc:80:ea:cb:
91:ce:a0:64:60:f4:f2:e6:ed:dd:5d:73:d4:95:91:d7:19:ea:
af:58:db:1e:75:ef:e3:1d:3e:43:24:fd:86:a6:a1:f0:72:d1:
7e:e8:0c:5e:01:a0:95:d5:c9:0a:8c:39:33:64:aa:ef:87:e0:
34:a9:d0:5e:b0:30:e9:05:3a:30:0c:16:9c:f8:ee:91:dc:f1:
3f:66:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:49 2025 by rpki-client