Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: fdO3Oy3JO86faJaOlFZA4w2bIcc18WJhMrkWdtFVBC4=
Subject key identifier: 56:F9:56:5B:5A:13:80:C3:1E:8F:5A:74:AD:70:AC:72:34:E3:23:C5
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019A4F98D7C1F963EF78D311C757F576D54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 103B
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: PwYa2O0c3ztOgY8PuRciBgSeoSy4FBGWCRq2yl20Scg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d7:c1:f9:63:ef:78:d3:11:c7:57:f5:76:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=56f9565b5a1380c31e8f5a74ad70ac7234e323c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:24:e4:59:44:65:cc:6b:37:07:dc:6d:94:
d5:19:e8:23:86:f6:ce:2d:10:5e:27:5a:41:e5:84:
32:4d:d2:08:05:33:67:0b:3d:b3:4f:ba:6a:60:b3:
47:88:ce:fd:2c:15:81:b8:6c:be:fb:86:76:23:de:
29:0e:95:0d:9b:57:b8:8b:b5:a5:e1:56:c1:01:da:
63:99:0b:3a:6b:3b:ae:bf:c6:57:8e:43:c9:93:73:
7e:f0:4d:a7:7b:10:ab:a2:cf:41:e9:c4:fe:f7:55:
d9:8e:93:66:a8:11:78:a9:f0:e6:32:89:11:5a:5c:
0b:09:94:01:c3:81:e0:d0:d7:2b:b2:83:02:a3:ca:
94:a0:9b:4a:6a:ee:3d:79:dd:9c:42:99:81:72:dc:
2a:5a:e0:3f:cb:bd:8a:f0:9d:f5:f1:bb:d4:1a:a6:
4d:a7:16:39:bb:e2:55:a4:2d:5d:e3:3e:4a:05:7d:
71:cf:f4:6e:c7:39:cf:f5:32:8a:6e:b3:77:84:27:
92:4e:90:de:30:59:5e:58:20:dd:04:0a:6a:00:8b:
3f:f9:65:37:8c:42:45:c3:bb:26:18:65:e1:bf:09:
b7:ab:dd:c3:53:a4:f2:91:0a:66:0d:bc:60:ae:73:
f8:83:ac:68:e4:a3:96:4a:b6:16:d3:be:e6:4f:f4:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:56:5B:5A:13:80:C3:1E:8F:5A:74:AD:70:AC:72:34:E3:23:C5
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f7:23:23:64:32:36:7a:d6:de:3e:fd:a6:91:c5:be:8b:8f:
0e:ac:05:45:f4:a0:d0:46:aa:58:16:36:34:b6:86:c3:38:92:
20:e3:ed:d9:bc:db:af:2b:01:cd:22:ac:43:03:56:48:3a:65:
c1:8a:1b:e4:38:af:01:cd:e4:fb:da:aa:6a:ac:38:20:12:6a:
00:46:a4:ac:80:0f:47:ab:a3:4a:cc:a8:ac:4f:91:b3:57:ea:
22:bf:6a:88:40:50:d1:a8:29:ce:8c:79:bd:66:09:38:74:ea:
cf:06:1e:87:94:83:5a:94:27:13:ec:6b:aa:f5:27:6b:71:6e:
9a:f6:26:74:48:63:df:71:dc:bc:86:33:35:a0:b2:3c:1a:90:
0e:a7:58:cc:50:e7:69:ea:03:50:af:96:0d:88:f9:33:81:b7:
c7:9a:d6:a5:a3:6b:9d:f1:ca:1d:4c:a0:e4:d7:da:6c:13:31:
79:95:21:18:cc:76:c2:f8:39:ee:83:12:ab:3b:80:05:d2:97:
dd:8e:a8:7a:c9:9c:44:94:c2:96:cb:cf:22:e9:fe:07:c7:9b:
16:81:62:c8:33:e7:1e:3a:da:d3:9f:ad:a7:d4:cc:71:47:bc:
c6:03:6b:af:9c:27:a2:c8:f4:31:5b:70:a9:cf:a8:c0:86:a5:
44:ec:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:14 2025 by rpki-client