Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: iU2unNt3pHpNqMeAecnP5MDpyGNO6ywCqv27fblfbe0=
Subject key identifier: 1E:F7:A6:83:B2:0C:97:AC:29:AE:0F:94:74:5B:DF:A2:69:E5:5F:C3
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 0199FC587A85FB923581BF25D19C32E346E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0CAE
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: Y3pi8KQ9e0+fbqvR0/HIQ/NqxTrsORTjA60xBlPO7iQ=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7a:85:fb:92:35:81:bf:25:d1:9c:32:e3:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=1ef7a683b20c97ac29ae0f94745bdfa269e55fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:00:0b:e0:ab:94:df:91:17:ce:62:6f:c3:
f6:25:6c:ef:7e:2c:c3:18:4f:cf:75:ea:87:22:cc:
d2:ea:46:53:6b:e8:8f:a4:53:ca:65:85:49:21:1d:
89:16:bd:7d:5d:4e:55:7b:b3:e6:f8:5c:8e:1f:93:
da:29:d7:b8:e8:98:81:14:85:56:8d:2d:2e:b1:dc:
22:c9:25:b1:cc:bf:c8:3e:c0:c0:06:21:68:15:51:
64:41:3a:58:6c:7e:80:e9:67:02:fa:36:61:a7:07:
dc:1e:ae:cf:d1:ec:a8:9c:60:9c:b3:82:e3:ac:02:
59:62:82:fb:d7:10:61:f0:a2:46:ac:6f:05:08:6b:
1b:e7:36:a6:20:fc:b0:84:3c:ff:b4:8d:73:2a:16:
6a:3e:91:f0:ef:58:70:92:6d:6b:68:a7:88:7f:b8:
d9:76:d4:4f:51:29:76:99:a7:fb:e7:09:bb:ce:91:
a0:71:0f:55:1a:f7:99:96:dd:28:77:3d:3c:42:96:
ec:0c:90:ad:b0:eb:16:50:64:d9:a0:ce:58:92:11:
23:71:ce:02:06:42:7b:42:c2:8a:07:3f:02:e3:b2:
e6:8f:3c:11:dc:aa:4d:0d:c1:cc:6a:c4:bb:92:a2:
28:4d:3c:ac:d8:22:bf:60:3f:70:9e:82:ae:9f:bc:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:A6:83:B2:0C:97:AC:29:AE:0F:94:74:5B:DF:A2:69:E5:5F:C3
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:af:9f:1c:c0:de:bf:60:a4:c2:78:92:82:51:3d:a5:05:
34:5f:11:55:c9:40:5b:0c:e1:22:23:c9:73:38:42:63:83:08:
c8:b8:47:ce:ae:f5:1c:41:ff:f5:15:77:e1:cf:2f:f1:39:2e:
a1:96:11:82:a3:2e:0e:41:42:5b:42:db:9f:0d:70:75:4f:09:
43:6c:b0:75:f7:ba:54:63:6b:80:eb:a7:fd:0a:ac:da:34:c1:
98:da:4e:6e:b0:77:d8:91:38:3c:92:b8:fb:19:77:2b:38:dd:
8c:5b:63:ab:57:30:0d:ce:c1:1f:f7:c1:f2:c2:0d:c2:f1:fc:
93:22:67:83:7d:6b:15:d2:9f:4c:72:79:34:94:3d:6b:4b:48:
c3:56:00:15:f5:4a:c7:66:a1:7d:fc:ea:98:56:90:bb:8d:35:
e5:87:8e:cb:6b:5c:f5:cc:06:ba:70:3c:5a:2b:49:5c:f7:23:
a3:3d:88:f4:9a:67:27:d1:18:94:48:93:f0:e0:48:b6:0c:e0:
c8:21:fa:bb:09:8c:52:82:73:1a:7a:43:59:48:85:6d:f0:8b:
68:e6:a1:30:aa:a6:1f:52:0b:bf:be:9f:e3:6b:4b:92:8b:7c:
99:af:52:79:16:5d:e4:24:d9:17:28:be:1e:99:13:72:9e:53:
6e:1a:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:07 2025 by rpki-client