Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: OYU5B1d04DcXs4F74VyG62TMuNjZojREpB83gA93O9s=
Subject key identifier: B3:6E:D1:D0:0B:4B:45:E1:A0:51:EA:B4:33:65:ED:B7:38:28:84:E1
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019922558AED7089BA3BE2DF3C4E4C9C6375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0EA5
Signing time: Sun 07 Sep 2025 04:00:55 +0000
Manifest this update: Sun 07 Sep 2025 04:00:55 +0000
Manifest next update: Mon 08 Sep 2025 04:00:55 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: vSYKxfK12hDMBx906vckwpKpofcuANEJoqAoFfTvwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:8a:ed:70:89:ba:3b:e2:df:3c:4e:4c:9c:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Sep 7 04:00:55 2025 GMT
Not After : Sep 8 04:00:55 2025 GMT
Subject: CN=b36ed1d00b4b45e1a051eab43365edb7382884e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:d6:dc:d8:72:a7:16:8b:4c:07:e8:99:e8:
1b:8a:8f:98:df:d4:c0:76:71:36:a1:2f:da:2a:b6:
9d:70:ce:16:b0:3c:a8:56:89:c9:6f:b5:f8:23:63:
75:03:82:03:bb:dc:db:ef:21:6d:79:39:0e:e8:c8:
22:c3:df:20:fc:b4:a3:68:e8:a6:b3:fb:fd:a6:89:
ce:e5:c4:ef:9e:d3:1e:c7:03:f9:dc:af:4b:b6:5f:
0a:5b:f3:bb:5b:ab:71:8c:49:33:f8:5f:61:28:89:
bc:f1:a6:71:d2:dc:db:79:56:70:c3:87:72:39:da:
01:7c:f4:37:b9:47:13:30:63:37:d2:6e:3f:39:34:
49:a7:6e:18:ce:09:98:e1:69:f5:e1:86:36:a1:03:
d2:74:9e:8d:52:c3:b8:67:1f:af:46:be:d2:b6:e2:
4b:c5:4b:9c:15:21:2d:c2:38:cb:88:47:b6:94:8d:
2d:85:ba:a8:ee:dd:ed:42:31:80:26:6b:3c:39:19:
82:23:44:e4:50:91:72:cf:9e:12:29:a4:43:1c:d3:
1b:23:89:1f:cf:46:85:f4:40:31:66:7d:a4:3d:5b:
4b:2a:a5:0f:00:5a:83:45:60:8e:15:05:5c:3a:57:
c5:9b:45:8c:f7:c4:8a:df:ed:d4:7f:50:5b:80:d0:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:D1:D0:0B:4B:45:E1:A0:51:EA:B4:33:65:ED:B7:38:28:84:E1
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9b:15:63:fc:12:a8:b4:6d:ec:f2:43:7e:25:42:a6:a5:eb:
5f:0e:ef:dc:83:7f:1f:ef:b5:ea:ee:29:a6:b4:04:b3:f9:b4:
c8:35:58:aa:c4:cc:46:bd:7c:4a:c4:af:df:6b:00:46:a0:28:
ea:5a:0d:7a:4b:b1:a7:60:65:ec:4e:ab:7a:18:0b:46:a4:18:
9d:a4:1d:0a:32:c3:98:2c:5a:ef:ca:86:c3:0d:b3:d2:62:f8:
18:18:7f:3e:38:e5:e2:a1:25:52:91:5f:d6:53:fd:f7:b8:16:
a1:f7:83:b9:29:1f:dc:cf:c5:f8:20:ce:75:49:21:6c:b5:36:
2b:ed:f6:e2:d1:4c:93:5e:76:8a:50:1d:34:37:04:93:d9:50:
55:17:6d:4b:4e:75:5e:97:11:86:8b:0b:d7:e3:59:4e:d1:9b:
d0:84:92:83:0b:0e:42:1d:e7:a2:37:ab:67:26:54:2c:ca:95:
68:94:c7:aa:b9:8c:f2:f1:13:88:75:6a:cb:aa:ae:b4:cb:f5:
5b:12:ea:f3:7c:62:df:61:8b:67:8f:89:a9:11:3a:09:a5:d8:
3e:4f:dd:6f:56:fb:0a:02:00:6c:61:61:3d:e0:e6:3a:db:52:
ce:f5:77:63:05:72:b5:35:38:81:2e:6e:88:78:fe:bc:62:02:
7c:4f:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:07 2025 by rpki-client