Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: BInT/FwnV8/ck5TGZlCDwPkTd9UEpg4DC0Ebrwryanw=
Subject key identifier: 36:88:68:A8:06:98:78:48:3F:63:89:1A:61:17:A4:35:92:34:5D:BC
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019A7225B4741DE1FB744CCF73CC181C80EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: GYY5ccNjD+v9bIYG7cQblEKi4jP5N2n6T0a6MWJBtII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:74:1d:e1:fb:74:4c:cf:73:cc:18:1c:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=368868a8069878483f63891a6117a43592345dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:45:d9:ce:b1:6c:88:21:ca:7f:e0:b5:43:
ef:d5:d0:64:80:6b:dd:c4:d9:c0:06:3a:d7:74:dd:
14:e7:04:88:3d:f5:41:21:d4:46:85:47:0e:c4:bb:
73:5c:57:12:f4:71:fd:db:3c:c9:d8:db:19:b7:48:
96:4a:e3:05:51:55:b1:84:8c:df:bb:ef:df:f4:db:
d6:09:be:e0:b5:95:b5:b7:76:39:7d:ed:08:a1:e5:
d3:5d:52:bb:87:82:84:df:a9:53:b2:f9:82:a7:66:
ac:f4:be:1b:a9:38:ec:73:1b:62:1a:89:89:aa:72:
a1:e3:b0:e9:bf:62:ea:b8:d4:c1:cf:e6:f7:38:ef:
63:aa:61:91:4b:60:66:bf:7b:b4:fe:7b:8a:9e:d6:
0b:a9:89:a9:c1:65:b2:13:7c:86:8b:12:71:db:95:
93:e0:9d:91:51:cf:15:c2:c9:cd:80:8d:67:ae:ef:
4f:59:ae:fe:58:9c:36:46:a6:63:44:e0:80:df:75:
7c:c1:9c:0c:94:35:6b:a5:87:8f:68:30:a1:db:bb:
03:08:a0:0e:cc:99:c8:cd:77:d4:a5:7b:55:a8:40:
d2:ce:12:b1:07:c5:70:ee:0d:8a:3c:e2:84:28:0d:
16:4c:6f:e9:ba:f4:71:89:39:70:53:60:ba:5e:fa:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:68:A8:06:98:78:48:3F:63:89:1A:61:17:A4:35:92:34:5D:BC
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:37:ce:e0:b3:82:8b:78:58:4e:5b:14:05:f2:81:c8:1d:ed:
cf:1d:38:6c:a1:a0:33:15:b1:13:a9:86:5d:b1:bf:45:3b:11:
6a:23:cd:b0:3d:4e:ff:94:a2:04:30:71:f4:07:11:c3:b5:5b:
43:9e:bf:cc:1c:87:1c:6e:d1:41:a8:ae:23:3d:af:02:a2:43:
d9:eb:5f:99:23:81:a9:27:8d:a9:1a:30:5b:15:c6:b9:7b:1a:
c5:7e:69:05:aa:02:3f:1a:14:60:54:e4:a4:be:7f:6b:a9:77:
4f:84:ed:ef:96:53:89:b7:3b:01:3c:8f:57:36:e7:2f:ad:e7:
53:24:49:94:0d:ae:13:a2:7b:2a:c4:75:0d:4d:ec:e6:f9:43:
32:2d:ae:7c:f8:ee:5a:13:2a:08:96:23:54:d0:d8:de:82:cd:
be:d9:11:64:97:16:5e:f3:22:56:96:f6:8a:32:31:72:50:2c:
c2:25:ce:89:5d:a5:b3:43:09:47:5f:d0:4f:d0:9e:08:fc:a7:
13:7a:d1:dc:8e:55:75:af:83:d5:11:6c:d2:44:c1:2f:54:22:
6d:ab:b0:06:77:b3:59:77:9b:7e:e7:d2:2a:e4:83:35:fa:44:
e8:63:59:64:f2:03:61:59:dc:f0:8a:b8:b7:e6:c8:13:42:74:
ca:e9:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:01 2025 by rpki-client