Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: hadjpqBHMX+iQLvp2y0DqSaL1L6ysqyN1xlr9atfYws=
Subject key identifier: D0:05:0A:DE:38:2C:61:28:1E:59:64:5C:2D:EB:CC:3A:C3:A3:3C:B2
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019A01110ADF57D1834BCEC5188B293A47F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 10:01:25 +0000
Manifest this update: Mon 20 Oct 2025 10:01:25 +0000
Manifest next update: Tue 21 Oct 2025 10:01:25 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: t64TZmkcAnvimSq+XnJZ7vkqGf4mR1ob/fLDWuwg2Y4=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:0a:df:57:d1:83:4b:ce:c5:18:8b:29:3a:47:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Oct 20 10:01:25 2025 GMT
Not After : Oct 21 10:01:25 2025 GMT
Subject: CN=d0050ade382c61281e59645c2debcc3ac3a33cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:25:b6:09:2f:6d:9a:de:88:0b:3d:f4:d9:
42:83:b3:04:6f:2d:e6:44:92:ed:26:40:4e:a7:f7:
81:b8:e0:b8:72:fb:05:cd:4c:d9:d8:c3:bb:00:26:
9e:54:dc:74:19:96:1c:6b:ff:ba:a1:4f:b8:fb:03:
98:36:45:1b:d8:88:c2:c8:e9:8e:6d:12:13:ab:9c:
53:e2:06:d6:b9:1a:71:a5:3d:8d:1f:51:f6:76:bf:
fc:b1:55:42:7f:43:2d:e1:0a:9b:a5:51:4a:9c:07:
1d:e4:2c:bb:93:a8:56:db:d5:77:e6:e1:22:c7:72:
ff:77:8e:f7:bd:a1:8a:17:5b:73:c8:71:e3:46:4f:
07:33:90:56:bd:52:a8:98:67:e2:50:41:a7:1d:20:
ab:de:c6:61:4c:c2:45:4b:03:9a:e9:e7:ff:46:a6:
85:ec:fe:06:d7:71:52:28:45:72:8c:4f:61:77:54:
e4:2f:2d:cf:00:e5:ff:23:8b:b6:d5:7d:f8:ac:97:
b2:af:f9:75:4c:13:cd:a4:b7:52:0c:b8:3d:04:69:
5f:ef:31:8e:eb:34:44:cc:81:85:78:62:f2:9c:7a:
54:e7:8b:7c:3c:3e:16:38:24:27:71:82:89:1d:49:
24:21:44:89:8a:96:c7:07:4d:ea:09:db:56:d5:cc:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:0A:DE:38:2C:61:28:1E:59:64:5C:2D:EB:CC:3A:C3:A3:3C:B2
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:b4:91:3a:ea:c6:56:1c:df:0c:d7:03:7c:de:9e:1e:c6:
56:e2:7e:7f:e0:45:6a:28:06:93:d1:06:88:c6:a9:1e:8f:2a:
be:a5:be:ec:5d:13:15:97:cc:20:23:64:76:45:3d:fe:2e:a6:
0f:de:b6:48:87:10:0e:6b:e1:bd:35:f7:01:52:53:93:16:8e:
c9:a9:84:53:30:cb:ea:ec:cd:2e:4d:2f:1a:90:25:bf:58:39:
b0:01:e2:c1:db:a9:18:3f:77:51:df:21:91:a8:9b:3f:74:9d:
e0:53:34:18:04:82:03:8e:47:89:c4:75:13:60:3f:25:1b:b7:
df:3c:fd:bb:cf:5c:9a:e8:68:b1:0a:41:8b:80:d7:48:55:6e:
58:c1:d7:e6:d9:cd:59:80:4a:52:6f:94:37:d9:28:69:0f:25:
7a:74:bc:c1:8e:fe:36:0a:47:0c:5b:2c:53:58:9c:39:7e:2c:
2c:67:a1:21:84:65:f4:53:93:2c:9b:c6:e9:15:fb:59:bb:ae:
1a:f3:f0:20:7e:5a:b3:66:73:2f:2d:4b:5b:64:68:32:84:43:
a7:e2:85:5a:08:b5:e7:72:61:d3:ae:4f:24:33:4c:c5:c5:d9:
8f:99:1c:60:96:64:39:9a:dd:cf:cb:77:f9:70:fa:df:bd:3c:
cf:d6:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:35 2025 by rpki-client