Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: +DrUzoH28iXvr+riBeN8iia9FMtB0RsaABf6dl36pp4=
Subject key identifier: 08:31:AD:3A:09:2F:71:48:34:E3:71:33:95:1A:4F:1D:A1:6D:88:8B
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019A4D74763BF1845D9535A98EBF5860ADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 144E
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: nUcHmQCswNKYdyZSa0RGAkfUcuTCDsvXccOGNYt/YKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:76:3b:f1:84:5d:95:35:a9:8e:bf:58:60:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=0831ad3a092f714834e37133951a4f1da16d888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:a3:b5:84:47:73:91:74:36:fd:68:0f:fe:
f9:eb:25:ef:e0:69:cf:96:dd:a1:b0:0e:5e:bc:ea:
e7:c0:af:63:6e:34:c1:be:7a:ee:40:49:67:e8:db:
fe:71:15:5f:6c:36:5a:b0:b7:27:4f:da:2f:9b:30:
96:40:a9:94:5c:a8:c7:56:00:e3:f2:54:7f:96:ad:
ec:60:f0:3d:3c:7c:9c:d9:fa:b1:db:8c:c2:37:02:
99:d0:b3:02:5b:a6:b0:d4:fb:d9:eb:ff:8e:f2:51:
84:42:0b:3c:a7:3c:d2:87:bb:4a:33:12:b4:8b:0a:
f2:b6:8d:19:6f:53:3a:97:18:1c:9d:9f:69:6d:c3:
b5:2b:df:8b:eb:3b:f2:ea:df:dc:13:71:eb:ec:3d:
51:68:50:be:81:c7:68:a8:36:f7:87:b5:03:be:ea:
c7:b3:ac:8b:1c:bd:bc:ac:c0:5d:ed:da:da:7d:68:
c2:1a:1c:2f:59:15:8d:f9:7a:5b:12:2e:2c:06:cf:
9b:b2:f5:4f:2b:12:52:b5:23:4c:cf:41:53:62:e3:
29:d9:11:1e:b0:d0:ca:27:8f:7b:b0:e8:39:54:26:
e8:3f:df:38:59:5a:0b:91:0b:be:21:77:a2:b4:1b:
00:b5:7d:f4:af:78:6f:68:18:0a:95:fe:0b:a6:3b:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:AD:3A:09:2F:71:48:34:E3:71:33:95:1A:4F:1D:A1:6D:88:8B
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:17:de:d8:02:c1:0a:67:7b:0d:7c:c7:d2:f7:ad:aa:f3:
11:7b:32:d4:9b:24:78:55:c9:35:6c:f5:a5:ee:9c:af:9f:2d:
6c:6e:b0:49:36:29:57:d3:6b:49:3d:05:60:44:bc:85:f4:53:
c9:fe:62:ca:eb:b2:52:44:08:d6:be:d9:46:fb:6d:0d:b1:4d:
0c:b7:df:7e:e2:c9:ac:82:ad:0b:a7:70:8e:a3:de:6f:35:01:
1d:a7:3f:09:f5:eb:73:ce:64:29:36:c8:6d:2c:8a:1d:0b:f2:
7e:40:87:03:47:ae:04:95:55:c8:0b:7a:72:03:45:31:0a:65:
d8:1b:3e:20:d3:34:68:53:f4:00:c6:e8:2c:08:fe:ac:7d:c9:
1b:4d:4d:41:19:89:ed:69:61:b0:b0:76:bb:34:b5:f2:50:a1:
83:7b:e7:73:e8:ea:f0:be:c4:06:8b:29:34:26:44:ec:e4:61:
e9:7e:51:7f:8f:8d:6f:74:05:4d:0f:f7:cc:a2:57:d1:64:4a:
f0:94:ee:de:52:a4:85:10:1e:79:15:fb:22:fe:7c:8d:18:58:
5c:81:1f:1c:28:a4:25:dc:a7:f7:1d:f6:7f:9e:ef:88:e5:69:
58:24:64:9e:8d:47:69:3a:53:c2:8a:85:a2:11:24:87:f9:a0:
35:24:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:38 2025 by rpki-client