Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: HKggDu0XU15OZjRo5VwHLHHYJJalNzTcxPM4SG3YIdw=
Subject key identifier: 02:B9:29:61:27:2D:8A:62:58:C7:AB:53:E4:CF:15:DC:DE:3A:FD:04
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 0199240D1EFC8433C442F50E9517273073B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0C3E
Signing time: Sun 07 Sep 2025 12:01:03 +0000
Manifest this update: Sun 07 Sep 2025 12:01:03 +0000
Manifest next update: Mon 08 Sep 2025 12:01:03 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: mZZnBCTeHu7aVeZh/YoG2D09lM9uZw8DdBjAOfZXih4=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:1e:fc:84:33:c4:42:f5:0e:95:17:27:30:73:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Sep 7 12:01:03 2025 GMT
Not After : Sep 8 12:01:03 2025 GMT
Subject: CN=02b92961272d8a6258c7ab53e4cf15dcde3afd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:e9:32:38:c0:40:84:0c:17:b4:c4:a3:b7:
99:11:51:f8:a9:65:7e:8d:4e:d0:f3:15:75:aa:ea:
1f:0f:34:6b:ca:15:f4:3b:fb:a5:ce:d5:fe:df:8c:
fd:5f:df:23:d5:81:48:11:92:33:2e:be:87:c9:49:
a4:20:0c:5a:49:86:a3:c4:44:dd:1d:f8:f9:32:6c:
13:cc:02:8d:c2:c4:57:21:c3:be:98:05:87:52:02:
e6:06:9b:61:c9:8f:b6:19:c5:ab:be:03:4f:62:f2:
4c:03:84:17:81:b8:3e:00:35:58:5f:0d:72:80:d4:
af:4c:43:a6:f7:6e:a1:91:6c:1d:7d:97:12:2c:6f:
6b:af:70:73:5c:33:71:2d:89:b8:6d:8d:bc:41:30:
50:1e:92:6f:21:88:ad:97:36:94:17:b9:b4:3c:0e:
d4:92:a5:3c:0b:d9:9e:f2:5c:f4:8c:29:a6:ea:9d:
52:4e:68:76:fa:7b:53:24:1b:9f:6e:c9:d4:ae:99:
51:a2:94:4e:29:94:e3:bc:d9:8e:fd:43:a9:53:ab:
1f:cf:05:54:46:c5:72:16:2e:d4:54:ad:fe:20:99:
e6:8a:1c:e5:7c:c9:6e:88:4d:da:30:53:82:04:57:
35:e8:d8:77:b1:45:0b:63:fa:c9:d2:69:a3:61:a5:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:29:61:27:2D:8A:62:58:C7:AB:53:E4:CF:15:DC:DE:3A:FD:04
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:af:25:6d:e2:10:f8:2f:5f:60:91:f1:6a:0f:60:64:f6:
08:4c:b3:35:5b:02:c6:17:78:24:3b:72:73:63:2f:6a:9d:2d:
ba:5b:f3:58:be:65:f7:1d:ca:ba:37:c2:52:ea:69:54:47:3f:
f9:e2:03:dc:40:b1:2d:49:c6:06:c9:80:7b:f4:b1:91:79:e1:
d4:4c:cf:80:81:cf:a8:40:6f:4d:1b:9f:e3:30:1d:d8:50:3d:
67:60:6e:93:c3:f5:7e:a7:4c:38:4a:f1:61:df:55:09:21:0c:
70:4e:fa:87:95:28:fa:8f:ca:27:16:39:cf:8e:d5:06:69:9b:
61:7f:fb:0c:8b:ba:30:9f:4c:44:33:85:1a:5d:4f:1f:0a:f0:
7d:f3:d4:08:85:86:19:ad:e1:a6:43:58:c6:04:4a:78:5b:98:
d1:4d:8e:a6:c2:61:da:9d:18:f0:1a:32:70:5c:26:4a:93:4a:
77:f7:96:de:dd:09:f5:63:09:29:31:f7:aa:ee:57:23:46:80:
18:ab:d6:67:26:14:3b:a7:5a:ae:98:fc:06:8e:53:05:05:96:
a5:3a:b8:bf:05:57:d9:95:db:99:de:96:82:85:e6:c2:58:5a:
d4:25:8c:11:2c:1a:9c:a4:b1:20:2f:61:4f:c1:d5:7d:0e:86:
e4:a9:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:08 2025 by rpki-client