Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: nSjRIemhe3uXgRHnCCKih20nPeiu/RDNXrNbYJedOow=
Subject key identifier: E9:CF:53:03:64:BB:9D:66:7B:A6:A0:77:1F:EC:05:2E:E4:DF:C6:2F
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 0199FC8F69917ADC2BBF933A85AE47A903F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 030C
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: jkHdOcPtfjPz557NubeG7yHHMG9Xau9V/oiyWhOE+Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:69:91:7a:dc:2b:bf:93:3a:85:ae:47:a9:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=e9cf530364bb9d667ba6a0771fec052ee4dfc62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:6f:7f:be:08:34:fb:2d:bb:57:de:c4:35:
9c:75:e6:6a:7c:4f:14:d9:66:d3:15:64:64:0d:50:
bf:5f:16:c0:40:05:9d:9c:a7:54:ed:7f:13:b2:7b:
4e:c9:63:60:a7:3e:aa:a0:d9:ba:79:5c:80:f5:a2:
c2:ae:14:23:e4:18:88:f2:1f:a6:68:9e:1a:e4:06:
c1:5c:7a:4b:0a:45:77:1c:1d:8f:3d:0e:0b:7d:36:
69:dd:bf:6a:d1:39:2a:2a:16:62:d2:a0:43:bb:23:
13:f6:4d:72:76:a4:1d:0a:5a:20:d2:37:61:bc:48:
f2:46:96:10:dd:1c:90:0f:c3:43:12:8a:41:16:b4:
be:81:23:93:11:bb:fc:8c:54:fd:65:36:b0:12:b9:
1f:53:0f:56:fc:5b:eb:85:16:6a:cd:b9:77:a8:5d:
c7:3d:99:f9:3e:cc:62:47:ea:ed:4f:da:2e:0d:e8:
ac:d7:c1:a8:e1:6a:61:c0:51:18:3c:66:c8:75:67:
00:73:28:ef:a7:1e:10:d7:df:1a:a1:3c:2c:83:27:
2c:62:7e:61:40:6b:a6:f6:11:67:26:13:c0:53:25:
c4:5a:82:18:6b:d2:aa:81:2f:17:2b:a4:25:14:16:
af:17:52:2a:bf:fe:40:a2:a0:c5:99:71:47:dd:06:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:53:03:64:BB:9D:66:7B:A6:A0:77:1F:EC:05:2E:E4:DF:C6:2F
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:88:44:01:04:93:31:88:0a:fd:ef:4b:ea:ea:62:5c:ca:
0c:de:4c:11:b2:bf:38:97:3d:af:da:56:e9:c6:a3:4f:8f:0e:
23:c6:38:17:54:95:09:dc:a8:99:ca:e5:70:d1:79:55:f6:e1:
49:9a:b0:35:36:0d:cc:95:70:7a:c0:bf:6e:d6:26:d5:82:ad:
67:35:77:64:e0:d8:ef:25:40:4d:ca:b9:ef:5d:31:e5:bc:f4:
59:2d:db:d0:88:60:7c:5f:db:b4:4a:e0:b1:a6:5f:12:0e:fe:
78:58:f8:4d:5d:da:5b:7d:e0:79:ce:74:f9:ce:4f:5b:56:61:
48:4b:21:81:be:cc:ea:40:9f:19:6c:7b:1e:ad:5f:7a:b8:f1:
67:a3:01:66:fc:b4:bd:60:5c:f9:d7:df:2d:c1:05:9a:d8:38:
e2:6a:2a:2b:7d:cc:08:5f:08:e9:ee:9d:6d:82:07:68:1f:c7:
9d:cf:08:d7:5e:63:b4:c5:a1:ad:2e:ee:d0:cb:e6:5e:80:46:
5e:b8:b2:d9:2e:72:a7:a2:f9:ba:13:ba:eb:f5:62:06:28:fa:
1a:13:7e:95:51:8e:9e:cd:27:11:d1:16:10:56:13:29:ef:83:
f6:e3:d7:3c:9a:13:2b:81:5b:ac:65:0c:ec:d7:6b:54:d9:9e:
ba:64:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:09 2025 by rpki-client