Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: DaMDggivVNtL9aTgixuppBNrTWTv44Z9jlMucorD6O4=
Subject key identifier: 1A:14:E7:D1:40:33:7D:EB:C8:EA:8C:DE:A1:23:B5:21:5B:56:71:13
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019A706E6BD60B859C69A81DBC1F4B8F4586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 104C
Signing time: Tue 11 Nov 2025 01:01:15 +0000
Manifest this update: Tue 11 Nov 2025 01:01:15 +0000
Manifest next update: Wed 12 Nov 2025 01:01:15 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: eQhkSZXwTRA4CPnKMAuNJng7fHwP1Zwzu0JNuhZGPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6b:d6:0b:85:9c:69:a8:1d:bc:1f:4b:8f:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Nov 11 01:01:15 2025 GMT
Not After : Nov 12 01:01:15 2025 GMT
Subject: CN=1a14e7d140337debc8ea8cdea123b5215b567113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:13:dd:77:9f:65:e8:9d:22:f0:8d:80:1d:
7b:15:03:75:dc:a8:f1:a6:e6:19:c6:ce:7f:60:9e:
99:80:02:78:81:fb:8f:be:4d:fd:23:59:c1:e7:6d:
f1:2d:d2:24:12:24:17:5e:2e:34:60:98:7e:2d:73:
45:6b:2c:89:6b:70:ed:5f:3a:98:67:17:c0:e2:df:
6f:a9:10:ba:71:5a:85:9e:58:f0:b9:06:16:dc:05:
f5:2c:cb:a3:f5:66:39:cd:54:45:5e:43:92:71:07:
32:9b:fb:83:0e:46:d0:34:74:34:13:bd:4a:a0:41:
64:2f:d7:cf:b0:eb:cf:e6:a6:34:80:7a:90:74:a5:
3f:13:ac:ad:a0:07:61:cc:f6:78:ce:6a:34:06:24:
37:7a:c6:b9:8a:c1:12:92:a3:50:a0:71:69:93:79:
e7:b9:57:af:03:c9:70:7b:18:d6:ef:d6:6e:39:09:
86:3c:dd:e6:a5:18:30:91:20:64:7b:5a:cf:30:fe:
84:29:47:90:8c:98:c1:21:5f:e6:ff:84:41:20:74:
f8:b5:58:2f:e2:f2:23:d3:ab:37:bd:79:4e:ea:7e:
72:b8:52:20:4a:de:fd:26:90:be:fd:7c:ce:cf:f5:
92:04:f7:c1:7c:fc:26:53:da:2a:63:35:eb:88:b7:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:E7:D1:40:33:7D:EB:C8:EA:8C:DE:A1:23:B5:21:5B:56:71:13
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d6:1c:d8:17:40:44:27:c4:49:62:1d:ed:56:27:8e:fd:25:
13:4c:37:59:33:35:9f:e8:61:25:9b:cb:9a:fc:d7:07:5b:20:
79:13:58:47:65:0f:7a:da:aa:cc:16:2b:8f:70:51:94:99:b2:
9c:6e:3b:40:29:f8:d0:bb:7e:45:51:21:c7:6a:a4:89:50:27:
75:cc:5b:1f:e6:c0:0d:b5:e2:76:91:57:a6:ad:87:bf:12:dc:
7f:6e:ac:6f:bd:da:6b:ee:72:54:e8:87:f4:4a:86:4e:3c:f5:
1e:85:f2:87:65:c8:22:8c:f4:e7:b7:99:2d:24:fa:49:68:b4:
86:5c:93:e6:5f:5e:8e:22:44:7a:95:0c:44:1f:80:fd:75:94:
ae:c2:fd:74:23:b5:53:6c:33:a9:36:6c:78:28:fc:27:8a:8e:
6f:99:7e:a3:b8:52:88:50:a9:0e:45:5c:5f:bf:d1:a2:51:50:
7f:e3:0b:de:af:11:e6:7d:bc:a5:69:00:c0:35:c7:44:71:d7:
94:1a:69:6e:dd:46:ac:a1:c5:ee:42:6d:cf:f2:4c:3c:79:f1:
52:03:d3:a9:fc:75:b3:22:98:4b:af:8f:dc:26:8c:d2:83:e6:
e8:29:5c:98:48:8a:3f:d6:24:4c:6b:31:ae:86:48:00:e4:34:
6c:57:d5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbmvWC4WcaagdvB9Lj0WGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWI4OWU2ZWFjNjExZmQ1MzMyZDcwZWJhZjUzMTFmYWQ2
NTEyYjgwHhcNMjUxMTExMDEwMTE1WhcNMjUxMTEyMDEwMTE1WjAzMTEwLwYDVQQD
EygxYTE0ZTdkMTQwMzM3ZGViYzhlYThjZGVhMTIzYjUyMTViNTY3MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrcT3XefZeidIvCNgB17FQN13Kjx
puYZxs5/YJ6ZgAJ4gfuPvk39I1nB523xLdIkEiQXXi40YJh+LXNFayyJa3DtXzqY
ZxfA4t9vqRC6cVqFnljwuQYW3AX1LMuj9WY5zVRFXkOScQcym/uDDkbQNHQ0E71K
oEFkL9fPsOvP5qY0gHqQdKU/E6ytoAdhzPZ4zmo0BiQ3esa5isESkqNQoHFpk3nn
uVevA8lwexjW79ZuOQmGPN3mpRgwkSBke1rPMP6EKUeQjJjBIV/m/4RBIHT4tVgv
4vIj06s3vXlO6n5yuFIgSt79JpC+/XzOz/WSBPfBfPwmU9oqYzXriLeQ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoU59FAM33ryOqM3qEjtSFbVnETMB8GA1UdIwQY
MBaAFJ8biebqxhH9UzLXDrr1MR+tZRK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2It
NzQ0ZmIyMWI1NTk4LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2ItNzQ0ZmIyMWI1NTk4
LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNYc2BdA
RCfESWId7VYnjv0lE0w3WTM1n+hhJZvLmvzXB1sgeRNYR2UPetqqzBYrj3BRlJmy
nG47QCn40Lt+RVEhx2qkiVAndcxbH+bADbXidpFXpq2HvxLcf26sb73aa+5yVOiH
9EqGTjz1HoXyh2XIIoz057eZLST6SWi0hlyT5l9ejiJEepUMRB+A/XWUrsL9dCO1
U2wzqTZseCj8J4qOb5l+o7hSiFCpDkVcX7/RolFQf+ML3q8R5n28pWkAwDXHRHHX
lBppbt1GrKHF7kJtz/JMPHnxUgPTqfx1syKYS6+P3CaM0oPm6ClcmEiKP9YkTGsx
roZIAOQ0bFfVnw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:58 2025 by rpki-client