Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: 6uShxerQE5lZBBuGd0KDWqXh0csZ2FSQFBCxW9l9Cd0=
Subject key identifier: 85:1A:AC:4B:B4:12:7A:7F:05:64:A8:03:A4:0C:40:64:36:54:EF:11
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 0198A04DE2863F175D8A3C75745FD46EC833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 07DC
Signing time: Tue 12 Aug 2025 22:01:55 +0000
Manifest this update: Tue 12 Aug 2025 22:01:55 +0000
Manifest next update: Wed 13 Aug 2025 22:01:55 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: EMttUEkU33hPdYu/UwS+63tse2XejJUHjzqDyqurlGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:e2:86:3f:17:5d:8a:3c:75:74:5f:d4:6e:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Aug 12 22:01:55 2025 GMT
Not After : Aug 13 22:01:55 2025 GMT
Subject: CN=851aac4bb4127a7f0564a803a40c40643654ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:13:bc:23:2d:c9:75:83:30:b7:7a:55:d1:
e7:6c:a0:a7:16:38:c8:b0:ad:47:c6:15:8f:70:4f:
a1:82:34:2b:ff:f7:4b:19:ea:17:22:a8:8d:32:8c:
b6:cf:16:75:69:5b:be:9b:82:ae:e4:fe:b7:94:4b:
4f:bb:07:6d:f3:0b:c3:d2:d9:da:0f:13:03:1b:44:
53:2d:dc:48:3b:53:c5:df:32:13:fe:3b:58:35:d1:
10:06:7b:69:be:55:2b:80:b6:be:29:92:b1:22:d1:
09:ae:67:b6:3c:40:15:38:a2:65:67:20:be:1f:15:
10:74:e0:da:30:3a:0d:7a:55:3d:81:56:e0:a3:3b:
e5:d3:3f:87:ac:47:10:16:10:77:f1:a4:43:e6:81:
f9:76:5d:7e:87:43:7a:88:a8:1c:e5:42:eb:c5:67:
06:2f:d6:31:94:11:c6:e3:8d:b6:17:70:e6:ab:a4:
b6:e0:53:2f:67:7a:d2:26:d3:13:39:93:8f:1b:48:
49:bc:0d:f7:47:29:3b:b4:ed:e4:a4:c3:20:21:5e:
66:8e:c7:b0:11:fc:5b:1b:87:2d:12:91:15:86:7d:
bd:c9:e8:9e:f2:d8:a4:d8:af:54:de:75:f6:79:0f:
09:db:14:b1:04:46:af:ca:b5:18:e0:de:57:40:bb:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:AC:4B:B4:12:7A:7F:05:64:A8:03:A4:0C:40:64:36:54:EF:11
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:cb:72:77:16:24:8d:0f:10:4f:81:46:51:3b:c2:0c:76:
49:d2:f0:c3:3f:51:41:ab:11:2d:1d:dd:d1:f8:66:6d:ac:9b:
1c:8c:eb:ec:8b:25:41:f2:15:eb:9b:5d:57:06:e2:81:54:95:
ec:27:05:55:36:a6:36:b0:00:97:df:9f:0e:12:51:cc:f0:68:
0c:b5:8b:a5:32:ef:de:e7:f7:29:13:2a:e3:b6:da:28:f3:ae:
94:7e:25:a6:17:45:f0:dc:67:d6:df:c8:7f:ff:aa:bb:92:24:
90:5d:16:25:9c:11:fb:04:84:17:15:5c:58:b1:38:ac:b5:e6:
d8:7c:c7:fd:9f:81:b6:94:37:41:81:45:7f:a4:c6:35:62:84:
78:99:42:76:cb:f6:ef:5c:b6:0d:20:67:82:20:3d:8f:70:93:
87:fc:65:77:1c:3b:b3:de:69:b7:9f:2f:88:ea:e4:0f:04:78:
24:73:46:fd:37:e1:e5:30:ae:d5:56:06:e1:f1:d5:a2:25:81:
f5:5d:8b:d5:a6:9d:01:64:5e:dd:21:55:88:5d:7e:ca:e7:d7:
50:e3:8a:34:23:88:d9:29:29:3c:cd:ee:5e:eb:bb:0a:29:e8:
29:3f:16:ac:9f:00:12:23:7d:31:3e:62:45:9c:45:c1:66:46:
84:97:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:59 2025 by rpki-client