Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: Dugb9ui3kCi65nhnuuE1vnjpAl1qddGaIezaLuY6QF4=
Subject key identifier: 81:69:2F:1D:02:30:6A:99:7A:BE:58:C2:69:E0:04:7E:C6:11:DD:3B
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 019A006BFAA10B3DFD48378CF1245EEA1640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 089F
Signing time: Mon 20 Oct 2025 07:01:07 +0000
Manifest this update: Mon 20 Oct 2025 07:01:07 +0000
Manifest next update: Tue 21 Oct 2025 07:01:07 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: Jh3FimMlghzGfyikukwNdh4kS+bhkb1MfnwyjshxlNk=)
2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fa:a1:0b:3d:fd:48:37:8c:f1:24:5e:ea:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Oct 20 07:01:07 2025 GMT
Not After : Oct 21 07:01:07 2025 GMT
Subject: CN=81692f1d02306a997abe58c269e0047ec611dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:e7:a1:11:f2:2b:ec:47:ae:b1:bb:93:c7:
c7:89:30:41:a2:ee:e8:9b:f1:8e:c0:60:32:f9:04:
69:48:7c:eb:9e:5f:fb:d5:58:c7:71:c8:c6:b1:94:
b8:6f:5b:06:59:85:12:e6:0d:8f:d5:55:c0:85:c2:
53:c3:98:67:2f:5c:af:72:c0:a8:ec:63:7a:e6:31:
00:fa:48:f8:de:ef:c0:0b:d8:cd:20:c7:25:ef:0b:
c1:f9:6c:d9:87:7c:1e:7e:d4:fb:f8:f3:68:f7:18:
2e:47:45:5b:0a:d3:24:8f:67:ef:cc:0f:a1:01:f8:
d7:7d:7f:58:4c:83:07:80:16:39:c0:75:b3:cf:47:
16:3d:44:80:8f:45:4f:ac:9f:43:58:a1:1b:c2:d9:
be:b8:5e:76:9c:24:19:f6:55:69:61:05:d1:5a:bd:
42:75:94:6c:94:ca:d9:a2:af:07:76:f7:21:a0:10:
ed:b8:67:55:9f:b4:3a:57:04:53:f6:f7:b0:a9:74:
c5:a9:97:a9:c9:cc:68:11:4b:23:ed:45:13:b0:c3:
15:53:70:e6:ba:2d:81:e0:c6:20:db:49:65:01:27:
87:e5:5a:1a:b5:40:21:09:db:15:20:85:a6:38:8d:
36:7b:5a:fc:90:3d:8b:9a:08:6f:33:53:94:6c:76:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:2F:1D:02:30:6A:99:7A:BE:58:C2:69:E0:04:7E:C6:11:DD:3B
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:aa:02:a4:eb:cc:f2:6e:f7:47:ce:2c:13:d4:5a:fc:49:c2:
03:85:3e:d8:d0:b8:fd:3e:8e:3e:bc:e4:ac:22:a0:d3:1d:59:
83:45:49:a7:aa:bd:6f:c0:9b:79:ed:63:f7:ae:d2:01:19:43:
b3:65:be:4b:63:bb:39:d2:10:3c:cb:58:c9:e4:ef:e3:4c:ab:
4e:3b:4e:23:a8:2c:f4:22:00:df:cf:60:2a:8f:15:1b:61:e9:
61:dd:05:97:d8:5d:32:92:7f:5b:10:78:c7:c0:6d:bb:75:74:
3b:bf:c5:bd:5f:2f:b3:87:e9:68:1b:f1:8f:16:a9:5f:c5:b1:
db:a3:05:85:b1:33:d5:5d:06:9b:0f:0f:81:87:6e:6c:2f:7b:
92:2a:c4:41:c6:c6:fd:7d:4f:41:3d:c2:b3:35:21:3e:cb:36:
42:2c:39:c0:47:65:18:93:9b:8f:84:27:49:90:83:80:6d:03:
ce:f4:92:d8:d5:95:6f:b4:85:22:c0:f6:dd:a3:54:84:db:65:
1d:6a:0d:47:09:a1:f2:95:78:f1:0b:bd:3a:8a:8c:27:11:88:
36:73:fe:59:61:82:b2:27:aa:b9:ed:8e:cc:b3:70:ba:3f:27:
bc:da:47:fc:74:20:2e:33:37:b7:fb:b8:23:d7:02:6b:0a:6f:
8c:8d:57:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa/qhCz39SDeM8SRe6hZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjUxMDIwMDcwMTA3WhcNMjUxMDIxMDcwMTA3WjAzMTEwLwYDVQQD
Eyg4MTY5MmYxZDAyMzA2YTk5N2FiZTU4YzI2OWUwMDQ3ZWM2MTFkZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BPnoRHyK+xHrrG7k8fHiTBBou7o
m/GOwGAy+QRpSHzrnl/71VjHccjGsZS4b1sGWYUS5g2P1VXAhcJTw5hnL1yvcsCo
7GN65jEA+kj43u/AC9jNIMcl7wvB+WzZh3weftT7+PNo9xguR0VbCtMkj2fvzA+h
AfjXfX9YTIMHgBY5wHWzz0cWPUSAj0VPrJ9DWKEbwtm+uF52nCQZ9lVpYQXRWr1C
dZRslMrZoq8HdvchoBDtuGdVn7Q6VwRT9vewqXTFqZepycxoEUsj7UUTsMMVU3Dm
ui2B4MYg20llASeH5VoatUAhCdsVIIWmOI02e1r8kD2LmghvM1OUbHZ3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFpLx0CMGqZer5YwmngBH7GEd07MB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKoCpOvM
8m73R84sE9Ra/EnCA4U+2NC4/T6OPrzkrCKg0x1Zg0VJp6q9b8Cbee1j967SARlD
s2W+S2O7OdIQPMtYyeTv40yrTjtOI6gs9CIA389gKo8VG2HpYd0Fl9hdMpJ/WxB4
x8Btu3V0O7/FvV8vs4fpaBvxjxapX8Wx26MFhbEz1V0Gmw8PgYdubC97kirEQcbG
/X1PQT3CszUhPss2Qiw5wEdlGJObj4QnSZCDgG0DzvSS2NWVb7SFIsD23aNUhNtl
HWoNRwmh8pV48Qu9OoqMJxGINnP+WWGCsieque2OzLNwuj8nvNpH/HQgLjM3t/u4
I9cCawpvjI1XvA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:45 2025 by rpki-client