Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File: nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier: 8fVnPjOj+l7g+IgZ3202qXSUEQq6isGYfySPp7kd6g4=
Subject key identifier: 22:CD:F3:24:64:85:1A:D2:8F:50:CD:9E:87:EF:BD:66:B9:58:A0:A1
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer: /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial: 0198D4A7C8A3DC5FBBE2F57BF2F299FC1949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number: 052F
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: CWd1vHQ5DerQa3xb+AHgSfAIYt7pp90Q+HyF+gDY/Hw=)
2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c8:a3:dc:5f:bb:e2:f5:7b:f2:f2:99:fc:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=22cdf32464851ad28f50cd9e87efbd66b958a0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:06:87:0f:4e:cb:80:17:50:85:d9:29:8c:
99:7f:6c:e6:fc:fc:d2:56:f4:e2:77:c3:75:dd:cb:
5d:4c:d8:39:00:78:98:9b:df:d2:d9:5c:37:7b:07:
ed:7b:c8:d8:f3:7b:bf:e5:f9:27:11:9c:55:25:b0:
bb:47:37:4e:95:d0:57:14:9d:ed:90:46:dc:e2:cf:
cf:ea:e7:76:ec:1a:f0:42:91:00:4a:ce:f8:08:2d:
30:8f:74:a2:f0:3b:63:be:29:4f:1e:9d:64:d2:d6:
66:fc:53:b1:b1:84:65:14:4b:5d:4d:6c:05:4f:55:
46:d7:f5:f3:be:1c:a6:8a:07:50:1a:bf:e1:a4:09:
0c:fc:a4:15:00:26:0e:13:81:07:9d:2a:d7:52:eb:
e0:37:93:b2:bd:ff:9a:cd:2f:37:f5:ec:f9:80:2d:
78:9f:8e:52:78:b5:11:8d:d9:6b:58:54:55:1a:e9:
ef:36:56:b3:25:a0:ad:60:0f:fe:91:a1:44:8e:22:
f4:41:8b:62:91:70:aa:7d:08:2c:bb:59:af:fe:91:
8a:38:15:00:68:ed:80:ed:0b:6c:8c:de:df:12:7e:
88:aa:91:b4:44:31:94:da:23:f7:13:a9:2d:ad:0b:
1a:90:0f:cc:9c:4a:63:f1:94:f1:d0:f8:d1:3d:ce:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CD:F3:24:64:85:1A:D2:8F:50:CD:9E:87:EF:BD:66:B9:58:A0:A1
X509v3 Authority Key Identifier:
keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2d:aa:2e:e2:a5:9f:cd:fd:33:33:75:74:62:12:e7:1e:86:
4a:ef:7c:2e:68:e8:97:5e:8a:44:9b:fe:50:b2:7e:88:88:35:
fa:57:00:a4:69:b0:3c:57:64:4b:17:aa:4c:23:60:3c:d8:7d:
63:0e:67:ee:df:2d:c0:20:7a:d6:43:bd:46:cb:df:a5:66:76:
89:4a:b8:12:d1:c3:90:b9:19:e2:fb:6e:6f:74:86:a2:78:11:
f3:7c:1e:ac:fd:d0:c9:4a:38:43:5c:22:5b:f3:2c:16:c3:a7:
da:de:c4:0f:2d:46:b7:85:ca:96:db:12:71:8b:b9:32:73:91:
c2:84:72:c5:95:3f:d3:95:8b:73:ca:3b:f4:8c:2f:30:c7:e1:
04:d7:61:4c:cf:8d:0f:23:34:bc:6d:26:3c:e1:bd:69:9f:ae:
32:70:d0:15:df:3d:82:31:fa:d7:68:d4:46:8f:26:2a:ea:0b:
2c:0c:07:32:0f:41:54:05:ee:1d:f5:df:80:5a:27:8a:57:db:
d9:37:99:f8:57:7f:6d:27:0e:31:98:e4:54:69:9a:98:31:5e:
55:44:a8:db:4f:8e:9c:d3:28:7a:78:c8:c7:96:f7:75:f1:64:
d2:8a:d0:6f:5e:5b:9d:79:ee:74:c7:fb:aa:1b:8e:32:08:eb:
0a:dd:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:51 2025 by rpki-client