Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: 3YTryQcMFQlQ5w66ZNEnr1sLdQRPXnqM3KWcCsep5RI=
Subject key identifier: 11:20:B7:DD:41:E9:8E:92:6C:83:7D:37:B2:F9:AF:0D:E7:AC:B3:03
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019A2F326C7278961C75B747701E3E788ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0F31
Signing time: Wed 29 Oct 2025 09:00:24 +0000
Manifest this update: Wed 29 Oct 2025 09:00:24 +0000
Manifest next update: Thu 30 Oct 2025 09:00:24 +0000
Files and hashes: 1: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (hash: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: YnxAZt5q8jkHoa3s/SR6xDfnk7wDEKEk5rW9Fhztorw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:6c:72:78:96:1c:75:b7:47:70:1e:3e:78:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Oct 29 09:00:24 2025 GMT
Not After : Oct 30 09:00:24 2025 GMT
Subject: CN=1120b7dd41e98e926c837d37b2f9af0de7acb303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:a6:e8:18:49:59:e8:24:5e:2a:9e:73:75:
09:7e:e4:b9:23:f7:5e:c4:a2:1f:0d:e0:82:63:38:
fd:93:e1:88:b8:84:66:d0:29:4e:27:2b:c6:76:a1:
e7:f1:64:12:83:38:f2:8e:f5:0f:94:e2:79:fb:c0:
3a:78:43:cc:0c:4b:90:7e:fd:ac:8a:c5:d8:4f:ee:
ce:56:9b:95:35:02:3c:a8:91:f4:84:c3:98:e5:a2:
e5:eb:28:a0:83:bf:6f:c6:3d:54:70:fc:bd:63:f3:
58:fb:ce:33:7a:82:4e:f8:20:32:2c:3d:c1:f3:03:
82:32:c1:e4:d2:0c:0e:df:d8:9b:2c:2f:a5:65:d3:
ee:44:d8:b0:a0:1a:30:79:28:d7:82:30:28:33:96:
cb:e6:4e:af:8c:f0:0f:c5:c9:ec:f0:07:96:33:cc:
44:6e:6e:4a:5e:4f:d7:f5:1c:22:f9:f9:d1:27:60:
92:85:3d:f4:d0:85:50:c9:4c:f1:7b:8f:3b:11:7a:
e3:46:7c:d4:af:c3:87:f5:aa:8b:4c:f2:5f:42:8a:
f6:83:ac:ac:62:a6:63:b4:8c:86:89:05:71:d2:68:
2d:d0:0b:e2:5e:6f:bc:51:ba:17:cc:5b:52:c8:51:
0f:3e:88:b0:e4:0b:67:32:0f:c0:85:dd:de:c0:d0:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:B7:DD:41:E9:8E:92:6C:83:7D:37:B2:F9:AF:0D:E7:AC:B3:03
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:49:4b:e9:d1:83:58:7d:7b:4b:61:96:59:11:3d:0d:67:
72:f3:2b:25:a6:9f:27:79:4a:c8:22:5a:10:bd:74:d2:bf:fa:
dc:75:00:07:02:3c:af:88:4c:66:86:9a:ef:09:ab:4a:86:2e:
f6:8d:f7:47:e5:a9:28:be:6e:52:39:a0:7e:26:9e:d6:0e:c7:
c0:2e:d0:d4:b1:dc:a9:d6:a8:de:b5:45:6b:80:34:26:04:09:
14:04:8f:7e:39:3f:61:f2:0f:fe:41:a6:e7:f9:a2:52:3c:6a:
3e:e2:b3:b9:6f:04:bd:04:c0:b1:6e:93:d1:42:d6:5b:9b:f4:
df:fa:cd:d3:49:12:0a:25:be:85:ae:06:b7:3c:1b:78:c1:3c:
fe:0c:5a:ed:1e:2b:02:82:85:90:a1:5f:ed:61:bc:73:a3:aa:
b4:b5:8e:b5:ae:b9:a8:61:ae:04:d2:1a:4c:4d:57:9c:63:3f:
2f:c4:d3:17:4a:3c:81:a2:63:e8:82:8a:14:19:52:67:d1:48:
55:fd:48:e1:e3:ae:ab:35:37:54:d9:32:f9:90:c1:4e:40:77:
10:13:72:e8:6d:06:4f:5d:11:ca:8e:45:b3:6e:92:f6:10:91:
c8:a9:fd:31:a0:3a:6f:f0:30:0d:02:74:77:4a:2a:0f:9e:34:
e1:fd:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:39:57 2025 by rpki-client