Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: PwStikdbmR6TSKim6w+J7wMAmiBUDr+jVMAVhMb/vBk=
Subject key identifier: E0:59:E2:05:33:00:9C:7E:39:B8:FF:9B:3E:1F:DB:57:3A:72:91:3F
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 019A725CF06543D394005762A25FC57D3E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 0349
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: KEO/ox8XvzarfE2P0YAG24fHu4OLu3TeOfSVBsOJLXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f0:65:43:d3:94:00:57:62:a2:5f:c5:7d:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=e059e20533009c7e39b8ff9b3e1fdb573a72913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:d6:9a:13:73:09:b6:c3:a3:a9:cb:ac:57:
d8:f5:95:8e:31:e3:ff:b5:d2:e0:99:dc:78:a9:58:
49:71:23:24:e0:f3:c7:28:32:72:de:4f:d3:be:93:
8b:1d:9a:51:5e:43:fd:ae:bc:4d:4f:38:9c:c4:10:
cd:ec:25:df:f4:d1:86:4f:b2:60:31:45:ff:a9:3b:
97:45:f9:21:96:42:40:d1:fb:ce:71:90:5f:1a:68:
9e:f0:69:48:d8:c4:7d:08:17:51:2d:53:75:25:fc:
8a:ac:6d:00:f7:1a:4d:0f:06:8e:2e:32:61:00:5e:
31:70:f8:d4:67:03:5b:75:33:af:e7:27:51:aa:f2:
b2:97:5f:1a:5d:05:91:85:ca:d7:39:d8:f5:1e:b7:
78:1b:f4:de:49:85:b4:d1:ee:9f:fa:70:8d:3b:2a:
49:af:1c:f4:d0:ab:b4:d5:1e:86:71:e7:b0:1e:c0:
de:0f:60:c4:18:ad:19:ff:42:45:b7:69:6d:b4:93:
34:14:c8:02:28:82:8a:3b:19:cc:56:e3:99:1e:54:
7d:98:8b:31:c0:1a:73:09:8b:6c:0e:5b:c2:c9:39:
f1:91:ff:47:51:6c:66:32:de:e4:64:e4:15:10:a0:
fd:13:78:30:ae:bb:45:2d:95:03:e7:00:35:b7:07:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:E2:05:33:00:9C:7E:39:B8:FF:9B:3E:1F:DB:57:3A:72:91:3F
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:fa:07:2a:ee:86:68:14:8d:47:26:6e:64:77:7f:0f:3e:
d4:83:44:85:4f:b4:d0:7f:b4:0c:3a:d8:e3:8d:f5:19:71:69:
2e:b0:24:2e:dd:ae:36:fc:09:9c:7e:6e:58:07:83:ad:95:c0:
62:4f:75:ae:e3:26:63:ea:30:96:cc:09:6f:2b:c3:a0:50:d9:
5d:9d:3d:2b:55:f7:ca:ae:6d:aa:25:18:63:ea:04:59:4b:6c:
d3:5d:d7:7f:01:8c:85:b6:93:bd:37:25:3e:8e:91:af:61:31:
eb:0f:18:6d:1c:2a:91:15:43:4d:2f:e8:41:95:0f:5d:2c:af:
4f:47:bc:f0:ca:8f:44:51:84:6e:b6:3b:85:51:78:f1:dc:8c:
bf:08:7f:dd:7b:c4:c7:9f:69:c8:70:0e:0a:20:19:68:80:8c:
78:62:19:13:9e:5b:eb:0e:e6:52:5f:13:68:39:04:58:38:07:
96:28:31:e8:b6:67:28:39:c1:18:6d:9d:df:13:c3:fb:e8:e7:
02:46:48:41:6f:e2:87:67:51:1c:88:2b:43:ca:a5:09:fc:20:
fa:5e:b0:58:bd:cf:5e:e8:ed:68:9d:fd:0f:e0:7f:c3:ce:a0:
ea:f6:aa:95:62:19:a9:31:5b:07:bd:a1:3e:b4:ed:23:9c:ca:
9a:e0:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:26 2025 by rpki-client