Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File: nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier: ULhlO5/pr6BZCUeieUFB3wE1tXvSShMaWB7N2nPA+MY=
Subject key identifier: AE:FB:E6:32:77:19:12:44:A2:CE:66:11:8E:85:36:E5:93:42:BF:52
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer: /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial: 019A71EEF0B665ECFCE34460523690F400CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number: 0605
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: 5UEtfvRsTfz+kyKyWSzYvA3z7N4EtfYc5gPG+wyDrOE=)
2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:b6:65:ec:fc:e3:44:60:52:36:90:f4:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=aefbe63277191244a2ce66118e8536e59342bf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:27:a3:d3:c4:5b:58:0c:0b:e4:67:c1:f8:
25:f9:82:eb:9f:34:3b:5e:66:0d:fd:42:98:9a:3b:
a0:9d:10:b7:5c:54:66:04:47:1c:fe:07:0f:ff:fe:
d3:a0:95:a3:e6:db:2d:90:dc:cc:f0:14:5f:2d:25:
0b:af:2b:0b:8d:03:6b:51:0e:21:18:55:b3:c0:00:
13:72:12:15:3b:87:82:30:c6:29:b9:97:1a:9e:6e:
24:fb:f1:5c:32:31:5f:c8:d9:16:1b:f2:0d:2d:92:
cd:05:55:64:4e:4b:34:ac:4e:32:b2:5c:07:e6:cc:
17:72:1f:8e:5b:b6:e3:1c:55:6b:53:0c:5e:7b:96:
3b:1a:85:0b:13:cb:84:30:83:cc:4a:62:ad:df:19:
82:8d:47:51:da:b9:f3:06:00:ea:0b:8d:52:72:d9:
6b:f6:98:ab:c8:21:fd:f0:c4:5f:64:84:ea:21:ba:
02:ea:79:b9:e2:b5:7b:fb:b6:fb:18:ae:5b:94:ce:
5b:fa:68:7c:57:e4:6b:5d:b4:88:7d:85:2d:d0:ac:
c8:56:ec:1e:a8:50:a5:15:73:e4:5d:da:3c:83:b3:
56:7c:80:12:6d:06:a1:89:91:20:99:bf:f6:07:07:
b2:8d:e5:34:2f:47:5c:92:f0:14:64:ff:a3:9c:76:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FB:E6:32:77:19:12:44:A2:CE:66:11:8E:85:36:E5:93:42:BF:52
X509v3 Authority Key Identifier:
keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:25:2a:e2:19:40:5b:fb:37:25:82:15:c5:d1:07:54:da:
62:63:9d:13:7d:c9:95:76:cb:37:1e:b4:9d:ec:60:b2:26:a5:
66:fb:0c:25:ef:02:eb:74:ba:ef:2c:d3:ec:03:61:0a:2c:46:
57:5b:f1:8a:b9:d1:02:c3:ff:f9:39:56:ec:45:5e:db:0a:96:
18:df:07:11:7b:d4:39:03:9f:8e:e1:25:68:f6:57:aa:80:aa:
a1:6e:50:2c:ad:f6:fa:35:d4:2e:d5:eb:ca:de:18:65:ba:0f:
77:f1:d9:4c:67:36:4f:3c:ed:9d:c1:57:5c:22:85:dc:64:c9:
2c:68:92:7a:1a:ed:76:2a:9c:4b:47:60:17:af:93:4e:fa:ac:
7e:03:b3:51:74:d0:09:1a:f0:82:e0:1f:e4:48:ff:30:91:75:
d1:2c:7e:85:57:05:92:e7:4b:e0:90:05:b7:94:f7:bb:7a:86:
ad:f8:2e:1e:b9:17:78:23:14:23:2f:20:a9:e9:4e:5e:f0:e0:
81:eb:b1:e2:89:15:5d:99:11:e3:bc:ff:fb:6f:ea:b1:79:2e:
4f:46:14:8a:6d:70:4f:d3:6a:6e:22:1e:f5:65:ff:69:f5:81:
40:15:9e:5e:30:22:44:a9:60:dd:e4:3c:4c:db:59:64:c4:3b:
00:09:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:16 2025 by rpki-client