Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: 2Erurca48HmQJuOB5iut/b/v69sBRUVwrsGLZWEQKZc=
Subject key identifier: 64:9B:2A:E7:BE:7C:7D:4C:EE:87:69:E4:37:7C:1B:67:E6:C6:DE:B7
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019A006C9BFA36FB0F9741A6244312649B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 1012
Signing time: Mon 20 Oct 2025 07:01:49 +0000
Manifest this update: Mon 20 Oct 2025 07:01:49 +0000
Manifest next update: Tue 21 Oct 2025 07:01:49 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: crBXY5yhukzzPZwTQeCl6rGNMTjOfAnHGsJs+Pt5nH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:9b:fa:36:fb:0f:97:41:a6:24:43:12:64:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Oct 20 07:01:49 2025 GMT
Not After : Oct 21 07:01:49 2025 GMT
Subject: CN=649b2ae7be7c7d4cee8769e4377c1b67e6c6deb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:45:65:9c:90:93:cf:ee:12:a9:bb:ad:ff:
46:e1:7c:7a:1a:37:ee:d1:eb:34:62:b6:ab:19:ba:
4b:f3:99:0c:ba:28:3c:c1:25:1c:64:e5:a8:54:93:
a0:74:0e:63:00:e2:c9:1d:59:01:70:51:75:df:4a:
d9:f1:cf:22:9e:84:7c:f4:e3:c2:4b:2e:1f:78:9d:
8c:dc:35:18:e9:14:e2:d4:5e:dc:9a:03:51:1c:13:
c2:90:0d:dd:6b:d0:df:6b:d8:88:88:97:7b:d2:5f:
24:e9:43:3c:c2:ee:08:43:21:eb:46:2a:12:bd:22:
3f:e7:af:b1:ad:04:3f:27:00:36:57:38:54:c9:1f:
2a:a9:3a:cc:de:70:3e:26:ad:59:03:4d:64:c6:91:
df:55:18:1a:9c:8c:fa:af:29:6d:ec:67:6a:9a:9f:
6c:93:b8:7e:2a:ec:95:5f:e5:4c:a8:19:25:c0:e5:
59:39:8b:3e:16:64:b7:3b:22:1b:54:9f:a7:0e:86:
28:6e:9c:02:e8:e3:08:38:bf:45:ae:79:fc:83:df:
ab:8e:28:3e:bc:8f:2a:c8:1e:bc:3e:cd:82:c0:fa:
fd:32:dd:81:e8:c9:1f:18:f2:35:49:1f:b1:02:92:
75:02:65:02:b8:c6:52:cd:e0:4f:56:4c:ee:e1:01:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:2A:E7:BE:7C:7D:4C:EE:87:69:E4:37:7C:1B:67:E6:C6:DE:B7
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:54:7a:04:f7:bb:39:c2:71:53:8e:74:ed:92:3c:64:2a:
70:0a:3a:32:56:be:3a:96:f4:8d:07:85:d8:f3:35:50:17:e5:
07:0d:c8:ce:48:0f:93:10:b0:cc:a8:61:ad:db:3f:25:ad:ad:
ad:ff:2d:c4:81:8f:cf:54:f8:48:a5:19:a4:9b:5c:49:10:84:
60:c8:c6:79:81:da:6a:e8:b8:51:0d:a4:09:6d:79:2e:e6:79:
1a:b9:0b:51:d2:14:12:78:af:e5:7b:30:ed:2a:6f:b5:c3:0e:
d2:c6:f2:05:4c:34:82:1a:7d:18:96:c8:b5:ce:ec:1a:f4:1d:
6c:24:45:e1:4e:1e:af:d9:5f:0e:66:5e:83:7e:14:b1:6a:a0:
4b:0e:9b:69:71:5d:97:a8:d5:3a:90:7b:b5:42:33:7f:43:5c:
b3:1e:49:9a:0b:76:f8:d1:ca:5f:18:ec:9e:ad:ca:c7:f5:62:
1e:f2:1c:55:65:d0:9c:82:e9:5a:5e:36:b3:c6:aa:88:8e:1a:
ac:c6:e0:8c:e9:bc:22:b9:d6:f0:86:91:c7:f0:46:10:66:f3:
07:57:6c:92:4c:78:08:fb:19:1d:89:fc:87:21:63:f6:09:73:
1d:66:34:a9:21:54:46:cc:2f:1f:f5:1e:18:19:18:9a:52:c8:
0a:e6:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:29 2025 by rpki-client