Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: t5h9d/9gsbziJL3zs8ZIc/ceeTZdH1i+Qo2juAKGm5E=
Subject key identifier: 88:B2:D1:1C:B2:67:5A:91:A0:75:C7:67:6E:45:5B:99:D2:4B:B0:60
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 0199FDD90CD5AF10831ABF02C3D0E02B2970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 0891
Signing time: Sun 19 Oct 2025 19:01:24 +0000
Manifest this update: Sun 19 Oct 2025 19:01:24 +0000
Manifest next update: Mon 20 Oct 2025 19:01:24 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: MajlZpSEsmkXFbRrAE7KeuupzDQDauh4aSiaCmRw5z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0c:d5:af:10:83:1a:bf:02:c3:d0:e0:2b:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Oct 19 19:01:24 2025 GMT
Not After : Oct 20 19:01:24 2025 GMT
Subject: CN=88b2d11cb2675a91a075c7676e455b99d24bb060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:be:51:2a:d4:72:1e:11:37:01:83:18:36:
72:15:eb:6a:77:0c:8f:c6:51:e4:80:a3:9b:26:db:
cf:73:4f:bc:20:54:35:1d:69:dd:4b:52:8f:4f:bc:
3e:5b:cf:c8:c9:75:8d:5e:1c:f6:9b:c8:5e:a1:4a:
c2:9f:81:53:9a:6d:2f:68:74:37:42:62:e0:27:d3:
b8:36:62:34:2c:aa:45:2a:38:31:fc:a7:19:b6:d0:
23:ea:88:94:5a:84:fd:d3:8c:80:d0:59:ef:96:af:
3b:f7:b5:af:1b:8a:58:19:6d:36:8e:0f:70:12:dc:
62:f2:fd:81:00:bc:5f:df:b4:3f:c5:85:70:90:c5:
11:fc:02:14:b4:e3:7c:1c:97:7e:3d:72:06:63:48:
da:7d:15:2c:aa:96:1d:d3:4c:a3:76:9a:39:f6:60:
3e:12:78:7b:46:ce:ed:e4:cf:b1:62:54:38:c4:0d:
0a:fe:5a:a6:9c:bc:5f:69:85:81:49:24:67:e1:31:
82:7f:fd:c1:7a:3a:95:97:a9:64:05:d9:c4:f2:e5:
c1:3e:b6:e0:d0:29:8a:92:a8:8d:4a:53:48:dd:28:
7e:a9:c4:ad:23:4b:7f:34:b3:4a:6a:f3:2d:96:d0:
93:e5:2e:81:5e:d8:95:ec:5d:5b:41:3e:7c:bb:8f:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:D1:1C:B2:67:5A:91:A0:75:C7:67:6E:45:5B:99:D2:4B:B0:60
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:27:bb:d6:88:71:ad:ac:93:14:9d:40:9b:ba:b8:da:b1:e5:
9a:e3:14:31:4a:94:7f:59:c5:cb:9b:ab:0c:39:f0:fb:27:67:
a8:ec:f1:85:d2:c1:f6:c0:8d:b0:f1:56:2d:18:6d:e6:02:1b:
78:42:ef:69:07:aa:2f:0f:ba:f6:d0:f7:6d:8c:21:ca:33:3b:
6a:14:30:df:7e:b8:93:19:a0:5e:71:1f:38:3d:47:ab:84:e0:
31:13:39:fb:f3:12:80:74:a4:ed:93:d7:29:d0:e2:a1:8b:63:
97:f3:1d:f9:93:e2:43:9e:22:49:4e:62:ce:41:1a:5c:3b:a1:
eb:d1:1b:7b:1d:e8:3e:56:40:a3:01:6f:2c:b5:3f:f3:04:57:
e7:5d:8b:c6:d8:3a:91:9b:85:1c:4c:fc:6b:19:cf:19:55:5a:
77:8e:c1:4a:af:73:33:69:3c:eb:99:d9:64:d7:b1:56:10:d6:
86:43:94:01:25:09:47:59:a6:c4:3e:bb:38:2d:ee:69:54:59:
2d:86:d1:b0:55:e4:a0:64:55:4e:bc:a3:f7:dd:58:ed:d4:61:
24:5c:4c:82:4b:ea:ba:a6:24:33:41:40:20:32:a1:e6:fa:a1:
d6:b1:d3:e9:1e:5e:3a:c9:b5:10:bf:fd:4b:78:f7:af:f0:5e:
a8:ab:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:18 2025 by rpki-client