Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: LGgdNDAX08DbWVh4VC5xWccJr6CmfubtFOdGikgxZ0w=
Subject key identifier: 38:2A:2D:7F:EA:FC:7B:15:9C:51:E6:EA:E2:80:C2:60:94:43:89:CF
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 019A72267B7257E5720C2C1B7170B80B848C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0B0B
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: 2S41/q/KYOH0W2F3cM73tWkN7v8wXVf8G/jXIV2saZo=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7b:72:57:e5:72:0c:2c:1b:71:70:b8:0b:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=382a2d7feafc7b159c51e6eae280c260944389cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:87:33:fc:f9:0d:b3:ee:ce:02:c4:ff:67:
41:42:be:d1:26:a9:e7:17:f4:4a:cf:56:4a:a0:d8:
da:ec:e7:77:99:ab:12:72:78:f6:b8:00:c5:69:ae:
78:a1:be:a9:a2:b6:28:5b:9f:3e:8a:0e:b4:60:ec:
a7:03:55:82:19:60:1e:cd:01:96:d8:cd:7e:d6:4f:
b9:c0:75:20:ed:14:a4:1d:27:a6:d6:29:e6:8c:c1:
8d:c2:ac:0e:68:aa:e1:07:1b:82:1c:0a:db:75:3d:
71:5b:8b:57:2a:89:b8:71:b3:1b:9c:00:8a:59:20:
64:a4:40:1e:65:38:d5:f6:38:ba:2c:b2:c0:d3:3b:
e9:cf:e9:14:42:1c:9c:7a:57:93:9c:29:eb:1a:35:
4c:49:a3:0a:e3:4c:c5:c8:56:ad:26:9b:91:a1:ef:
dc:22:43:88:a4:79:e7:1c:25:1e:64:dc:ea:4f:1f:
66:d9:8e:e5:80:c7:9b:2f:d6:62:c9:25:a9:17:e3:
10:ef:80:26:e1:09:23:b3:33:00:d9:61:30:0e:5c:
ec:6c:4c:42:db:c5:32:c7:3a:85:48:03:38:48:9b:
06:78:d6:bb:e7:db:66:f1:f4:c8:5c:4b:b2:81:d2:
5d:87:fa:fb:8c:22:90:5b:92:2b:05:cd:60:71:bc:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:2D:7F:EA:FC:7B:15:9C:51:E6:EA:E2:80:C2:60:94:43:89:CF
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:eb:22:75:f2:2f:7a:3e:b8:40:81:50:d1:df:fa:d1:b2:e9:
a7:ff:43:cb:8c:cd:2b:60:34:1f:e8:15:69:2f:73:9d:44:e7:
8c:ee:f7:19:b4:db:ed:d6:ac:46:79:f4:01:4a:4a:13:2f:fe:
d0:51:96:db:d1:4d:3a:55:33:d9:dc:d7:5c:37:d1:f5:58:97:
2e:40:4d:6c:9e:e2:c6:2d:d5:65:04:f9:43:de:ca:f1:70:4c:
d5:37:39:03:97:98:4d:d3:45:1d:a6:ff:6b:b5:6e:22:b0:df:
a2:f7:97:bb:e9:da:4e:54:09:e8:7b:33:d4:4c:6d:ac:3a:e9:
e6:6c:7f:d8:ed:81:72:88:16:96:3e:ce:4c:2b:00:25:1e:0b:
61:80:a4:29:f9:61:30:c2:5f:37:15:21:9b:a3:fc:f3:81:6b:
dc:36:86:1b:b0:da:36:56:d3:2e:88:64:79:c6:4f:ce:01:b5:
dc:0d:ea:dd:7b:88:fb:bf:2f:be:38:8b:e3:ac:9a:30:37:34:
49:0b:94:77:14:f7:81:3b:a9:41:3f:65:ce:4e:bd:3d:3c:7d:
d5:fd:0f:b4:1d:57:a8:ef:4f:03:12:da:ec:8f:23:36:3e:13:
25:0c:60:0b:f2:83:1d:fd:0a:6d:38:31:be:35:03:73:26:4c:
18:cb:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:34 2025 by rpki-client