Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: 4VXVnIZs0bYGyVkWPERSSSe+JNA3b3Y67m2Qjl2xpYo=
Subject key identifier: 20:FE:FD:6C:78:F1:32:03:1C:C2:40:CB:2B:58:B3:BE:48:49:41:CD
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 019A4F98EEBAE8BEAC65A0B87B2EFC8AE2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 08C8
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: Kj7UhCxOzv30Uxb06MhbpbrLPv61yzullKBMAuuXSNY=)
2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ee:ba:e8:be:ac:65:a0:b8:7b:2e:fc:8a:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=20fefd6c78f132031cc240cb2b58b3be484941cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:ac:0c:47:36:80:92:71:c2:57:12:53:88:
ef:fe:f6:c9:cf:19:39:21:a1:d4:4e:36:bb:7e:89:
5a:86:9c:93:77:bf:67:6d:41:bc:81:57:d1:4a:66:
78:7e:60:4c:05:d3:60:78:ef:25:14:1b:71:87:e7:
b8:8d:58:e2:c7:d5:d3:69:57:01:0a:10:12:82:b8:
c7:2f:97:1e:dd:93:bd:46:c8:86:82:85:f5:5d:38:
d3:73:8a:23:47:91:05:46:14:81:b1:dd:f4:c4:be:
93:9c:ae:04:1f:b5:db:16:d9:0b:9b:43:c9:ae:45:
42:96:77:62:9d:db:cf:21:ca:1e:e1:56:a0:e0:ff:
67:b7:27:ec:5f:91:69:71:be:85:f2:af:40:33:9e:
13:24:d5:13:6d:f2:d8:7b:c5:c9:eb:ed:35:99:2c:
2e:63:93:65:fd:4a:39:92:0e:f3:26:39:9a:02:ea:
be:9b:5e:5c:08:4e:07:e9:56:0d:4c:14:de:d0:1a:
48:ea:77:a5:d9:b7:aa:de:bf:65:91:6b:dc:30:6a:
98:1a:25:15:0e:f6:b3:24:04:7d:26:c0:e5:24:38:
83:e4:4e:2b:0a:3a:08:37:b1:c6:ba:19:ae:b6:25:
2a:2c:33:bb:df:ad:ef:78:93:f1:a0:4d:12:3b:1d:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FE:FD:6C:78:F1:32:03:1C:C2:40:CB:2B:58:B3:BE:48:49:41:CD
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:82:1c:14:a3:a0:0a:8a:27:97:d7:44:78:b4:b2:ff:38:db:
a4:0b:b0:e1:ae:f0:91:2d:48:aa:34:38:bb:53:68:03:88:ff:
54:8a:47:2b:8a:2a:33:05:cc:55:a4:f9:32:51:cb:9f:28:4c:
aa:f4:44:78:f9:3e:c6:37:4e:3b:08:3a:3a:19:b1:12:0f:04:
6d:93:c9:7b:b3:54:c4:f5:55:a4:a0:c8:e5:4f:c9:99:01:b4:
d9:b9:d2:52:71:14:29:7e:a6:82:c4:3c:e8:ec:12:da:d9:87:
d9:de:8b:9c:34:83:84:1f:bb:91:a1:46:1b:16:ac:70:c5:97:
ee:0c:53:ea:31:c4:7e:ec:0f:a5:8b:bc:7c:11:d4:4c:c5:35:
e8:5b:bf:d7:85:cd:e1:1a:c4:da:cb:a1:92:ad:31:b5:85:a3:
8c:18:70:42:cd:18:f8:c5:8c:9b:5d:b6:c0:1c:ea:f8:47:eb:
b1:3d:72:b5:4e:6f:82:84:96:15:95:56:cb:e5:f2:1a:62:b6:
47:4d:86:92:90:1a:7f:17:54:e7:97:d7:30:5e:53:3d:58:7e:
a1:ca:8d:0a:f3:f2:ba:c2:d3:4a:e5:3b:35:31:a0:c8:2c:76:
9b:5b:fa:ba:e3:19:b2:39:fc:dd:d1:ce:ba:32:2d:42:3d:ac:
8a:d5:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:40 2025 by rpki-client