Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: K25Ta5EG1gtWGYpL6BKOCxGSBCvzLeXVzShSwDyQ5Ts=
Subject key identifier: 94:F8:51:85:54:31:69:C6:80:C6:62:2C:9E:C5:8F:C8:F7:40:59:BC
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019A5150FE16B233701677CAEC8C10E948E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 10FF
Signing time: Wed 05 Nov 2025 00:00:53 +0000
Manifest this update: Wed 05 Nov 2025 00:00:53 +0000
Manifest next update: Thu 06 Nov 2025 00:00:53 +0000
Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: LHwxta/Meg4RyzRMuKjtwY8VdPfnbFPsB02IkZz7duc=)
2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:fe:16:b2:33:70:16:77:ca:ec:8c:10:e9:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Nov 5 00:00:53 2025 GMT
Not After : Nov 6 00:00:53 2025 GMT
Subject: CN=94f85185543169c680c6622c9ec58fc8f74059bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:31:f6:9a:88:90:3c:e9:58:ee:ae:a7:08:
89:5b:94:cf:4c:ff:62:01:04:9f:ad:48:6c:79:5d:
2e:c6:15:8b:df:ca:f8:24:74:f9:3d:1b:9f:e9:e5:
88:ca:46:7e:2f:88:b5:25:e8:d0:a9:63:58:20:aa:
c1:c3:4a:11:ea:a3:8d:07:e8:f1:0b:35:67:fe:9c:
09:c7:54:7f:b1:c9:b4:a4:63:dd:e9:e5:57:cc:bd:
40:2c:24:cb:02:71:51:29:13:f6:86:1d:43:e6:a7:
31:ac:a1:b5:0f:02:0a:2b:9c:d5:ce:1d:34:0a:aa:
e8:7b:0e:ac:ab:45:1c:a0:fc:61:18:5c:1d:fc:73:
12:d1:82:75:5f:01:00:2d:d1:46:5d:a1:a5:e2:99:
20:c6:87:b6:e9:87:cc:99:4e:77:e8:8a:31:63:eb:
db:1d:5f:2c:b4:28:ba:c7:ce:6d:f9:c4:3b:73:a8:
bb:b5:8f:28:4e:29:c7:66:07:ea:65:7f:59:35:ee:
1c:7f:fe:61:73:9c:4a:25:19:dd:2a:20:97:77:df:
d5:24:44:f8:b0:b7:ab:68:69:42:f0:1e:fd:5b:5f:
21:58:c4:73:9f:1b:b9:c7:48:d8:4c:68:13:37:40:
ce:c4:b5:c8:3c:26:06:88:6c:69:9e:54:89:2a:7b:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:51:85:54:31:69:C6:80:C6:62:2C:9E:C5:8F:C8:F7:40:59:BC
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:51:5d:c8:a6:34:2c:43:9c:81:e0:ed:3b:57:26:d8:83:b7:
7a:49:45:aa:73:9f:96:60:23:dc:fc:16:6a:24:71:b1:75:1f:
e9:f1:a1:63:21:a4:fc:cd:6b:d1:30:e4:42:97:b0:ff:28:a3:
c5:2e:da:5b:77:d0:d9:12:b5:52:b8:f3:e7:4b:2c:62:1a:18:
17:f9:3e:6e:fd:05:95:9b:4a:cd:be:2b:d1:15:5b:77:59:56:
02:87:1f:47:61:ef:50:a7:52:74:67:e9:d1:d4:dc:6d:5f:94:
d7:41:4b:78:d8:a8:12:e5:03:99:7d:cf:3f:08:f5:cc:42:34:
3d:43:d4:1b:67:09:38:31:6c:b5:df:50:5f:c0:33:0d:62:2f:
db:f7:9a:3e:ba:d7:08:91:33:05:82:13:1f:15:8d:3d:db:bf:
65:26:be:f5:b8:7a:9d:86:97:81:26:7b:e6:6a:ea:95:16:5e:
b6:d9:cf:ad:5c:94:26:53:2a:a1:85:e7:b7:f5:75:5f:fb:73:
8e:05:e2:68:3e:9b:64:0a:fe:81:8a:81:47:a0:90:e5:c3:13:
c8:85:e4:70:d5:c4:6d:eb:55:b6:a8:9c:5c:71:92:c2:dd:03:
1e:2d:0b:ca:5b:4f:2c:2e:1c:61:8d:08:71:df:11:ed:ec:2f:
97:38:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:50 2025 by rpki-client