Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: MxewlwNouwNbgLr1ofZyJGw3ZxUyrHgZItAwbrZ0oC4=
Subject key identifier: 5E:BE:04:8A:0D:75:B7:86:4A:7B:7B:3F:19:BB:CE:EF:39:B8:8C:9F
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019A51F5C71B4D0F3298E0D4AF53FAAAA836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0F43
Signing time: Wed 05 Nov 2025 03:00:52 +0000
Manifest this update: Wed 05 Nov 2025 03:00:52 +0000
Manifest next update: Thu 06 Nov 2025 03:00:52 +0000
Files and hashes: 1: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (hash: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: vhXmYDTfykIbHvzXp7wkvTzYuxVGtWAOCee2E0gOntU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c7:1b:4d:0f:32:98:e0:d4:af:53:fa:aa:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Nov 5 03:00:52 2025 GMT
Not After : Nov 6 03:00:52 2025 GMT
Subject: CN=5ebe048a0d75b7864a7b7b3f19bbceef39b88c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:c3:1f:ad:fc:59:e3:9d:c3:91:ce:76:8f:
35:bb:2d:76:80:e2:c2:c6:75:40:da:2e:18:b7:8d:
38:69:00:cb:14:4d:31:cd:b5:82:1e:5e:ac:dc:e3:
db:2d:15:66:2f:07:54:d3:58:e0:98:d1:4b:46:d4:
2d:ca:1c:d7:b7:a7:65:87:0e:24:a5:2c:4c:69:0b:
99:d1:57:00:7b:16:0e:99:aa:cf:85:2d:df:fa:70:
48:5a:5a:44:29:51:e5:2b:1d:94:1a:45:68:72:11:
37:2b:45:f8:58:d5:3a:64:a0:59:70:77:37:14:fd:
2b:bc:05:f9:40:e2:0c:9b:12:78:c7:8f:b2:c1:b8:
1c:6f:b4:88:58:39:e7:32:43:5a:fc:94:c9:fb:15:
82:8d:f6:bf:52:49:b2:07:76:64:c4:0b:b0:13:ef:
4a:39:39:55:75:fe:22:68:a7:01:f7:1d:b6:f6:f0:
d0:fe:fa:6b:67:04:b7:ad:66:58:67:4d:2c:62:33:
ce:87:93:a6:c4:64:fc:3e:e7:f7:3e:fc:b2:05:d3:
2d:ed:1d:60:7b:fb:aa:a7:3e:cb:31:22:fe:85:f8:
2f:69:16:18:81:df:cf:7b:76:56:ac:12:86:d6:58:
53:29:28:5b:90:ec:2e:59:fd:a0:9b:75:c8:2d:47:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:04:8A:0D:75:B7:86:4A:7B:7B:3F:19:BB:CE:EF:39:B8:8C:9F
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:04:ff:ed:62:9d:5b:29:84:da:2c:05:b7:83:f4:10:de:82:
64:c7:d7:ec:a2:4b:0c:41:83:7e:8d:f7:71:01:83:e0:ff:26:
a3:48:86:c7:b3:ed:b1:a1:61:bc:9c:d5:34:ed:ea:5a:a7:af:
90:92:df:c3:df:dc:4b:36:c5:61:b5:7e:cf:de:b7:e8:01:3e:
61:87:65:0c:d7:38:6f:4a:49:6c:fb:26:09:28:a9:04:ad:c3:
03:b6:e9:8b:f4:25:0c:d2:31:a9:2e:fb:0f:3f:a1:33:d7:e9:
db:04:f2:f8:0d:54:ae:3f:5f:3d:63:ed:98:f4:bf:92:2b:52:
4a:0d:af:e4:4d:fe:67:22:ee:96:2a:8e:3e:5b:b2:91:28:1a:
bf:a9:90:6c:80:54:fa:c4:3f:15:5b:28:21:e3:11:c4:82:70:
bd:0c:99:db:e5:c9:59:fb:4b:b9:6e:08:11:fb:c5:d4:8a:9a:
d4:6b:14:b1:23:4e:00:90:84:cb:fe:13:66:1c:f1:59:c2:d4:
11:dd:db:7e:72:07:13:77:5e:ea:d5:79:18:4a:1a:c3:b1:ba:
98:f3:8f:65:1f:f2:ad:a0:93:57:8a:9d:4d:b9:a1:7b:70:7a:
77:24:2d:3e:fd:bd:5d:e6:88:ac:fa:99:ea:d8:87:a2:1b:1a:
37:59:be:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9ccbTQ8ymODUr1P6qqg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh
ZDNkZGQwHhcNMjUxMTA1MDMwMDUyWhcNMjUxMTA2MDMwMDUyWjAzMTEwLwYDVQQD
Eyg1ZWJlMDQ4YTBkNzViNzg2NGE3YjdiM2YxOWJiY2VlZjM5Yjg4YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW3DH638WeOdw5HOdo81uy12gOLC
xnVA2i4Yt404aQDLFE0xzbWCHl6s3OPbLRVmLwdU01jgmNFLRtQtyhzXt6dlhw4k
pSxMaQuZ0VcAexYOmarPhS3f+nBIWlpEKVHlKx2UGkVochE3K0X4WNU6ZKBZcHc3
FP0rvAX5QOIMmxJ4x4+ywbgcb7SIWDnnMkNa/JTJ+xWCjfa/UkmyB3ZkxAuwE+9K
OTlVdf4iaKcB9x229vDQ/vprZwS3rWZYZ00sYjPOh5OmxGT8Puf3PvyyBdMt7R1g
e/uqpz7LMSL+hfgvaRYYgd/Pe3ZWrBKG1lhTKShbkOwuWf2gm3XILUfh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6+BIoNdbeGSnt7Pxm7zu85uIyfMB8GA1UdIwQY
MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt
NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl
LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgT/7WKd
WymE2iwFt4P0EN6CZMfX7KJLDEGDfo33cQGD4P8mo0iGx7PtsaFhvJzVNO3qWqev
kJLfw9/cSzbFYbV+z9636AE+YYdlDNc4b0pJbPsmCSipBK3DA7bpi/QlDNIxqS77
Dz+hM9fp2wTy+A1Urj9fPWPtmPS/kitSSg2v5E3+ZyLuliqOPluykSgav6mQbIBU
+sQ/FVsoIeMRxIJwvQyZ2+XJWftLuW4IEfvF1Iqa1GsUsSNOAJCEy/4TZhzxWcLU
Ed3bfnIHE3de6tV5GEoaw7G6mPOPZR/yraCTV4qdTbmhe3B6dyQtPv29XeaIrPqZ
6tiHohsaN1m+qA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:19:51 2025 by rpki-client