Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: 7dsZHyCR+J6YtU7xtPm+rTKAlo01z4OA0galJY1N9Dg=
Subject key identifier: 44:BF:C2:5C:C4:C8:39:F4:46:D6:8C:6A:9D:1A:C8:B4:7D:8B:E2:E7
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 019A52D27FEE75BBAFEE1DEC67D0B9BCED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 08BD
Signing time: Wed 05 Nov 2025 07:01:58 +0000
Manifest this update: Wed 05 Nov 2025 07:01:58 +0000
Manifest next update: Thu 06 Nov 2025 07:01:58 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: MOQHV6GYEKK+LoqOtIxYPIl9azOBVig28OKiUdxbg5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7f:ee:75:bb:af:ee:1d:ec:67:d0:b9:bc:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Nov 5 07:01:58 2025 GMT
Not After : Nov 6 07:01:58 2025 GMT
Subject: CN=44bfc25cc4c839f446d68c6a9d1ac8b47d8be2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:22:58:4d:b0:cc:c8:99:81:74:13:da:f5:
c6:c9:94:a1:f0:06:86:0b:81:8d:26:90:89:98:fc:
c7:8f:1e:0c:79:c6:99:4e:ff:38:66:3b:9a:51:47:
ef:1f:63:45:23:1e:fb:37:86:06:98:a5:74:be:df:
fa:8b:f5:88:67:b8:94:18:2e:2d:5b:4b:12:fb:78:
7c:7b:62:5e:25:55:c1:3c:b1:96:b7:0b:d1:fc:d9:
65:41:ff:77:5a:94:2d:fb:69:07:7e:6a:5c:c3:99:
a5:11:01:cd:ae:ce:1d:b5:8a:61:7b:fe:f2:88:8a:
61:7b:02:65:fd:fb:5f:99:c5:ca:9b:50:42:b4:74:
00:75:66:a7:ba:c2:98:a6:14:18:49:8b:63:54:db:
ff:8d:4e:30:51:36:6c:30:22:56:05:2b:10:46:a8:
6b:c9:92:37:f4:e7:b6:98:4d:03:c1:d6:8c:83:95:
f0:e6:f6:e7:03:06:1c:a9:27:cd:80:10:62:35:1b:
d1:96:d5:01:58:6b:0d:f4:80:3d:be:ab:49:7e:0e:
56:5d:a8:3f:a6:02:9b:f2:61:65:53:9d:21:c8:e6:
c8:a0:df:d9:b9:c1:7d:e0:1a:e7:84:c2:29:b0:e2:
3e:f5:c1:28:f1:7b:45:2a:5d:b5:b7:cf:e9:aa:a8:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:C2:5C:C4:C8:39:F4:46:D6:8C:6A:9D:1A:C8:B4:7D:8B:E2:E7
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:69:22:f8:33:cb:16:8e:98:3d:e1:d6:b5:23:3b:37:ed:98:
83:ae:e9:d8:c7:5a:e4:82:87:0f:d4:bd:db:ee:44:3a:2a:c7:
56:1b:f4:d2:3b:cb:92:82:53:9e:06:03:f4:d9:e6:b6:79:2b:
ee:6e:72:3c:62:a1:79:3e:8f:37:f1:c0:a7:a2:8f:77:07:eb:
f0:79:a4:4d:78:c2:7a:11:01:68:f6:1e:13:59:6e:7a:44:b6:
1d:42:87:31:94:b5:45:b3:87:7f:03:7c:66:52:ee:7c:71:fd:
11:de:04:d7:52:79:50:f2:2c:7c:0c:8c:87:5b:fc:cd:f8:e6:
c2:03:d5:69:45:a3:d3:1b:82:33:5a:40:c0:92:dc:c5:8c:f1:
2f:87:a2:e7:af:da:07:eb:9c:4d:3d:4d:a2:5a:19:2f:16:93:
86:71:11:27:40:76:ae:82:de:34:49:95:82:3a:e3:db:d5:7a:
76:8b:a7:4f:f8:db:41:56:9c:d1:2a:a6:8b:39:f9:93:ee:36:
2f:cc:1f:2d:3b:5c:d7:d4:8e:3f:ed:0b:9c:00:81:e3:d9:3a:
bc:09:86:60:a9:4e:74:61:d9:df:2d:e5:8b:75:2e:86:98:f1:
b9:0f:9a:9b:2e:70:5a:ef:a6:8d:57:57:54:14:b8:1e:a0:6b:
ed:2c:b7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0n/udbuv7h3sZ9C5vO1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZTBiZDRmZWMyOGM0MWM3ZGY4MjE0OGYwOTFlYzNmMzkx
YmRiNzAwHhcNMjUxMTA1MDcwMTU4WhcNMjUxMTA2MDcwMTU4WjAzMTEwLwYDVQQD
Eyg0NGJmYzI1Y2M0YzgzOWY0NDZkNjhjNmE5ZDFhYzhiNDdkOGJlMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V8iWE2wzMiZgXQT2vXGyZSh8AaG
C4GNJpCJmPzHjx4MecaZTv84ZjuaUUfvH2NFIx77N4YGmKV0vt/6i/WIZ7iUGC4t
W0sS+3h8e2JeJVXBPLGWtwvR/NllQf93WpQt+2kHfmpcw5mlEQHNrs4dtYphe/7y
iIphewJl/ftfmcXKm1BCtHQAdWanusKYphQYSYtjVNv/jU4wUTZsMCJWBSsQRqhr
yZI39Oe2mE0DwdaMg5Xw5vbnAwYcqSfNgBBiNRvRltUBWGsN9IA9vqtJfg5WXag/
pgKb8mFlU50hyObIoN/ZucF94BrnhMIpsOI+9cEo8XtFKl21t8/pqqhIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES/wlzEyDn0RtaMap0ayLR9i+LnMB8GA1UdIwQY
MBaAFJ7gvU/sKMQcffghSPCR7D85G9twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYt
ZWRmYmFiMzM2MWJiLzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYtZWRmYmFiMzM2MWJi
LzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmki+DPL
Fo6YPeHWtSM7N+2Yg67p2Mda5IKHD9S92+5EOirHVhv00jvLkoJTngYD9Nnmtnkr
7m5yPGKheT6PN/HAp6KPdwfr8HmkTXjCehEBaPYeE1luekS2HUKHMZS1RbOHfwN8
ZlLufHH9Ed4E11J5UPIsfAyMh1v8zfjmwgPVaUWj0xuCM1pAwJLcxYzxL4ei56/a
B+ucTT1NoloZLxaThnERJ0B2roLeNEmVgjrj29V6dounT/jbQVac0Sqmizn5k+42
L8wfLTtc19SOP+0LnACB49k6vAmGYKlOdGHZ3y3li3UuhpjxuQ+amy5wWu+mjVdX
VBS4HqBr7Sy3Iw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:57 2025 by rpki-client