Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File: nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier: htrDoawLjzUJCn3023SNb2X5e+XC2Rp7b4mmBjT1ojM=
Subject key identifier: 7F:43:EC:92:1D:95:B3:C3:F5:15:3F:43:42:27:F2:C3:96:28:57:AC
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer: /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial: 0199FFFEBE74A138F6D27EB32D3073B57D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number: 05CA
Signing time: Mon 20 Oct 2025 05:01:48 +0000
Manifest this update: Mon 20 Oct 2025 05:01:48 +0000
Manifest next update: Tue 21 Oct 2025 05:01:48 +0000
Files and hashes: 1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: +Nh+vkLeEJvKb6HZ1oMBIbaWfnpUaSEVS+UjY7g9yPY=)
2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:be:74:a1:38:f6:d2:7e:b3:2d:30:73:b5:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Validity
Not Before: Oct 20 05:01:48 2025 GMT
Not After : Oct 21 05:01:48 2025 GMT
Subject: CN=7f43ec921d95b3c3f5153f434227f2c3962857ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:50:b5:4c:07:a9:7e:f8:dd:39:29:c5:bd:
7a:86:56:24:b0:0f:cf:ac:b9:a8:a8:18:e6:c0:2a:
6a:60:73:f4:cc:e2:80:a9:e7:cb:2f:2d:0d:d4:af:
87:8f:b8:4b:f3:ba:a4:a6:09:e4:84:7f:8f:70:e6:
9d:38:47:e1:00:dc:a5:6d:2b:84:05:eb:74:a5:f7:
62:4a:ad:b3:ce:73:c0:19:2d:05:7f:8f:80:1e:96:
e7:b6:86:c3:b1:9f:1f:f7:ed:80:03:4a:b7:d6:b4:
9c:8d:19:b0:0c:b5:7f:1c:ce:26:c9:84:67:b2:b4:
13:8a:d0:56:48:ec:a1:70:ba:04:f1:c7:60:9e:d9:
b3:77:69:44:b3:bd:a2:1a:af:c4:2b:ae:a9:95:a4:
5a:c8:78:97:29:c6:c5:87:ee:34:65:29:60:28:db:
d9:6c:73:a6:cf:3b:7f:bb:44:6e:a5:5f:91:e5:1f:
17:40:e5:2d:83:00:e5:4a:04:1e:c0:5e:82:88:67:
e7:5d:81:87:0a:29:69:a8:dd:e1:6d:76:6d:0f:ab:
7c:cd:2c:ed:f5:aa:4c:12:8f:04:0f:6c:ed:80:80:
b2:f0:03:a7:e2:02:18:98:67:82:0e:31:1d:91:a8:
96:a8:ae:c6:b7:7d:5a:1e:ba:84:41:5e:70:b7:a7:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:EC:92:1D:95:B3:C3:F5:15:3F:43:42:27:F2:C3:96:28:57:AC
X509v3 Authority Key Identifier:
keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b5:35:c4:5c:a8:21:1a:aa:cb:60:d0:06:1b:82:47:09:73:
44:a8:09:ea:04:65:e7:a4:ec:9b:8e:71:a3:83:f1:1a:16:24:
82:a1:4d:9c:5a:3c:1a:46:99:09:6a:c0:fb:ab:60:49:6e:48:
a1:c3:30:15:20:bd:ec:89:1e:96:a1:04:f8:ae:bd:71:55:3e:
7d:ee:72:5f:5c:f5:dd:bd:5b:d5:04:4d:7b:b5:2a:fb:e2:39:
a8:1b:5a:4d:63:03:fd:32:75:96:3c:fe:08:44:ec:98:c6:d7:
24:97:90:ce:1b:1a:47:ba:3c:a6:3d:2d:2b:43:3b:10:6f:db:
4e:45:57:68:37:0d:0d:00:d3:7e:b5:1d:67:92:dc:63:83:dc:
3d:bb:ea:9e:57:e4:e9:25:42:37:77:c1:b5:92:0c:47:bb:17:
bd:ba:d3:71:8f:84:e6:52:43:10:f5:8a:9a:c7:99:47:0e:4e:
8a:1a:0a:c9:ad:e7:20:25:c2:d9:dd:2e:c0:b2:1c:3c:34:d9:
c8:0e:9c:43:fd:b2:d3:3d:6e:4d:ea:a3:34:a6:77:dd:97:c6:
00:ed:a4:4c:10:a4:fb:5d:5e:14:cc:76:a9:b0:cb:29:68:4a:
99:41:3c:f2:b1:d8:b7:fa:10:48:9b:7f:e6:ee:32:d4:8b:7d:
35:fc:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:45 2025 by rpki-client