Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: uV/RFQjkSitG5TtRNts3v6Ub3toiZsscuBTjQLhNhWg=
Subject key identifier: E8:E9:6D:8F:68:E5:3C:66:53:4C:14:59:63:1C:4F:52:E8:EA:76:B4
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 0198D47380EDDA369DD955EDB88C32A2A780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 07F7
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: JhgC8kR4qn8hx6PD7d5Zlei/f5DRtTUlcveA3hEInOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:80:ed:da:36:9d:d9:55:ed:b8:8c:32:a2:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=e8e96d8f68e53c66534c1459631c4f52e8ea76b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:4e:4e:85:e9:6f:e0:c7:9d:b5:15:55:db:
00:97:b9:13:50:f0:08:19:99:6d:6d:ef:78:37:8d:
b3:98:24:86:b6:a0:2a:7a:99:91:8b:d3:ed:ad:fd:
83:4a:6f:9b:0d:dc:0a:72:fb:fd:64:82:59:c1:2c:
78:41:ee:f1:6f:1d:dc:0f:f0:f5:5c:a0:26:93:db:
1d:17:f3:d0:dd:3b:19:35:5a:ad:25:02:ce:b8:c3:
aa:d4:30:50:5c:f2:7b:88:f3:61:c7:78:b1:87:27:
2f:a4:20:98:83:50:dc:74:47:a3:04:81:f6:de:c8:
bb:d3:33:b1:f4:54:ce:b3:1b:d1:72:2f:2c:1f:a6:
b5:10:76:39:cf:f1:00:e5:2d:14:59:20:e7:ec:e8:
29:c1:44:f9:40:49:6f:58:c9:14:96:99:a0:4c:a0:
66:93:f1:19:d7:52:50:3f:7c:ff:83:35:5f:17:55:
1f:0c:d8:6a:17:92:d5:bf:b4:b7:43:a6:9d:f9:9c:
db:aa:29:cf:43:c0:a3:87:6d:b9:fd:87:fe:f0:9c:
9a:e6:c4:23:9e:f9:f9:7d:7a:4b:e4:f6:4d:e9:4d:
d4:c5:e9:3b:9b:b0:61:fb:84:14:d4:47:ef:59:e6:
52:c0:6c:41:0a:4f:28:17:22:3c:c5:ed:29:cd:66:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:6D:8F:68:E5:3C:66:53:4C:14:59:63:1C:4F:52:E8:EA:76:B4
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:55:d8:fa:fb:ab:fe:68:25:74:07:26:47:1c:7f:7e:42:32:
5f:f1:b3:c6:03:3c:17:c4:fc:36:af:16:15:d0:f7:16:ae:38:
7b:eb:e3:d1:df:16:3e:be:6a:68:26:5f:5b:f4:d1:e5:86:da:
80:0c:24:4d:4e:84:dc:f7:0b:39:4e:8f:af:da:32:1d:78:5f:
78:ba:3e:55:bc:f3:f6:3a:22:45:82:c9:d1:7b:bb:e6:25:d1:
73:38:31:65:a9:81:d3:ec:5a:25:7c:dc:b7:72:38:c1:51:f3:
98:19:bd:33:05:43:d4:0f:c1:17:e7:70:93:15:9c:29:51:d6:
8e:23:b5:58:87:91:38:58:73:7f:75:22:a8:3d:22:b4:df:f5:
5f:19:58:c5:fd:f1:7b:e4:f9:52:e4:99:8b:63:b7:18:19:3b:
d8:65:55:e2:11:00:19:07:9c:ee:9a:b1:28:c7:81:be:ee:c1:
7e:3e:87:8a:8f:c1:6b:5b:5c:93:ab:d5:38:87:2b:e9:24:ec:
c0:7b:e1:de:f9:36:3a:0f:e7:10:d7:b6:cc:f3:15:72:a3:68:
f3:fa:e7:55:c0:23:3c:3e:b2:4a:49:2a:3e:8a:d7:66:00:89:
96:8b:3d:34:3a:72:0b:ed:fa:58:9c:6d:96:78:32:c6:fd:43:
b1:06:6b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc4Dt2jad2VXtuIwyoqeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZTBiZDRmZWMyOGM0MWM3ZGY4MjE0OGYwOTFlYzNmMzkx
YmRiNzAwHhcNMjUwODIzMDEwMzE2WhcNMjUwODI0MDEwMzE2WjAzMTEwLwYDVQQD
EyhlOGU5NmQ4ZjY4ZTUzYzY2NTM0YzE0NTk2MzFjNGY1MmU4ZWE3NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7JOToXpb+DHnbUVVdsAl7kTUPAI
GZltbe94N42zmCSGtqAqepmRi9Ptrf2DSm+bDdwKcvv9ZIJZwSx4Qe7xbx3cD/D1
XKAmk9sdF/PQ3TsZNVqtJQLOuMOq1DBQXPJ7iPNhx3ixhycvpCCYg1DcdEejBIH2
3si70zOx9FTOsxvRci8sH6a1EHY5z/EA5S0UWSDn7OgpwUT5QElvWMkUlpmgTKBm
k/EZ11JQP3z/gzVfF1UfDNhqF5LVv7S3Q6ad+ZzbqinPQ8Cjh225/Yf+8Jya5sQj
nvn5fXpL5PZN6U3Uxek7m7Bh+4QU1EfvWeZSwGxBCk8oFyI8xe0pzWaCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjpbY9o5TxmU0wUWWMcT1Lo6na0MB8GA1UdIwQY
MBaAFJ7gvU/sKMQcffghSPCR7D85G9twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYt
ZWRmYmFiMzM2MWJiLzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYtZWRmYmFiMzM2MWJi
LzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlXY+vur
/mgldAcmRxx/fkIyX/GzxgM8F8T8Nq8WFdD3Fq44e+vj0d8WPr5qaCZfW/TR5Yba
gAwkTU6E3PcLOU6Pr9oyHXhfeLo+Vbzz9joiRYLJ0Xu75iXRczgxZamB0+xaJXzc
t3I4wVHzmBm9MwVD1A/BF+dwkxWcKVHWjiO1WIeROFhzf3UiqD0itN/1XxlYxf3x
e+T5UuSZi2O3GBk72GVV4hEAGQec7pqxKMeBvu7Bfj6Hio/Ba1tck6vVOIcr6STs
wHvh3vk2Og/nENe2zPMVcqNo8/rnVcAjPD6ySkkqPorXZgCJlos9NDpyC+36WJxt
lngyxv1DsQZrsg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:57 2025 by rpki-client