Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier: CFumPENVGLR2gUbqr2KodEcFPnjFha9uz1NhDzRgxrY=
Subject key identifier: CF:3B:90:A3:8F:31:D5:AA:CE:04:15:D5:94:4F:85:DC:DF:CD:FF:38
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial: 019A71B78AC553F03B22CDE3DA492C7A79FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: kYNz+ZpdVcjKjtM1b7/n78i6wg/pnqpbQzQMHPy+M3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8a:c5:53:f0:3b:22:cd:e3:da:49:2c:7a:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=cf3b90a38f31d5aace0415d5944f85dcdfcdff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:c2:48:9c:5b:b8:0f:6d:55:3b:16:41:5e:
8f:9d:51:ea:c5:17:b1:a8:2b:2f:20:04:7d:f5:6b:
69:33:ad:d2:dd:84:93:55:fa:33:34:b2:4a:bf:73:
a8:ba:18:82:a9:a1:bf:f3:27:4a:f1:2e:aa:68:5e:
2f:6f:fa:c1:ab:7f:8e:a2:97:47:e9:60:88:3d:49:
98:d1:3b:73:21:05:cf:cc:19:8c:29:3c:a1:b0:68:
9b:1d:e8:7a:4b:30:f6:e1:6a:cf:85:7d:15:ce:b0:
74:bb:32:d1:a8:9a:3c:46:d1:28:11:04:ee:9b:18:
fc:6e:2d:b8:53:5b:00:7b:00:48:ed:16:c0:c3:d8:
6e:53:96:d9:0d:8b:a4:7e:2f:71:ec:d3:27:80:48:
99:7c:9f:0d:16:26:70:70:5b:85:c8:fb:4a:01:d6:
6c:5a:24:c8:e9:86:d1:77:f2:39:33:40:99:e6:dd:
1e:d2:d3:ba:77:5f:cb:8a:54:0d:eb:de:8e:35:db:
e3:b1:89:45:3b:b1:47:2d:16:d5:99:15:2e:f8:24:
e7:6a:ef:be:43:ce:71:9a:5e:c6:b1:8c:10:89:38:
a7:96:53:77:7a:27:07:a5:84:47:b6:e0:db:bc:52:
c7:f7:30:58:cc:df:66:61:da:44:ba:13:da:eb:d8:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:90:A3:8F:31:D5:AA:CE:04:15:D5:94:4F:85:DC:DF:CD:FF:38
X509v3 Authority Key Identifier:
keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:87:80:0b:29:65:4f:83:7d:56:19:80:89:6e:87:c2:20:
68:d0:49:aa:85:80:4e:83:39:c0:94:94:19:b1:2b:1b:9d:9a:
aa:31:91:d4:45:fa:84:2c:8a:a0:ec:8e:6a:63:04:b1:b9:bb:
54:ad:e3:3c:fa:ea:12:81:48:17:30:5f:da:07:62:b7:af:bd:
af:2d:37:1a:a1:96:b4:73:8a:90:01:b5:2c:d6:29:01:d7:05:
c2:a0:7e:c6:15:67:da:d3:d4:a5:28:0e:8a:58:3d:41:3e:a7:
c4:eb:34:4a:f0:e6:d0:9f:00:fa:6e:54:2b:db:b1:72:f6:7b:
b3:35:fa:2e:d8:6c:fb:1e:71:d1:bf:cb:b4:1d:cd:44:2e:39:
d5:64:66:5e:d9:e7:b0:cf:5e:a0:33:90:31:e3:d6:7e:a8:83:
49:48:e8:3b:62:5d:77:eb:a9:04:d1:13:d9:c7:1e:cc:b9:25:
ea:22:1f:50:aa:67:67:84:c3:6d:33:1e:47:bd:e0:a5:b4:51:
04:e1:81:1a:95:f1:3a:7a:e6:c9:3b:ec:c8:c8:89:75:76:02:
59:57:8e:6c:6d:e1:e0:24:44:a7:06:23:c6:ce:c4:28:7e:42:
bd:e0:bc:f7:90:7c:ae:1c:c4:f3:f9:8e:7c:3f:7f:95:f2:a5:
49:0b:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client