Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: nXWuumvw/ItRj/CHoExTveDEp/VtgPEVMldwS11H58I=
Subject key identifier: 5E:6C:F4:03:0E:0A:8C:75:ED:28:85:02:16:71:BF:0E:F9:01:2E:59
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019A71131CBC9899780AE10ECE987CADD228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: B3
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: HXXYFhjrBSeytwePIx8Zwj8JxNjqcjq4n5uSITl37Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1c:bc:98:99:78:0a:e1:0e:ce:98:7c:ad:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=5e6cf4030e0a8c75ed2885021671bf0ef9012e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:f2:ff:04:5f:38:86:fc:a1:e6:80:22:27:
89:9e:16:9b:bd:52:b6:68:69:37:03:8e:b8:a8:b9:
a6:ea:d2:9d:c9:70:dc:b9:7c:9f:3e:a5:6e:99:ab:
f5:c7:68:ca:a3:e7:67:5f:49:d9:e9:bc:e5:4d:fa:
38:9d:ca:7a:d1:65:54:89:04:f4:f3:26:60:c4:da:
88:47:80:f7:0f:57:64:ac:0a:00:b4:70:45:d3:58:
7a:1b:05:12:6b:be:31:e5:cc:9c:73:f9:99:52:80:
8d:1f:b8:4b:e2:9c:97:28:6c:45:34:fe:12:7f:8f:
ff:f9:54:1c:ba:fe:36:bb:ee:18:d5:72:e1:31:7e:
ae:9f:3d:47:09:8b:59:3f:e9:06:c4:2a:7c:13:50:
9c:df:95:75:19:67:18:27:44:3f:15:8f:19:e5:46:
f3:8e:62:34:ca:aa:0d:c8:ef:c5:41:27:ac:5e:22:
73:ef:1a:b4:1e:51:9b:77:10:a9:b8:8d:f7:4b:54:
3e:81:3e:af:f8:12:7f:6c:a5:38:6e:90:20:ac:8e:
9d:ed:5e:6e:6f:02:5a:12:bf:e8:6f:2c:9c:b8:ea:
0a:b0:42:d6:df:14:bc:2d:9f:9a:dd:9b:7d:df:e3:
0c:c3:78:66:6c:22:6d:0e:f6:39:1d:70:e7:73:88:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:F4:03:0E:0A:8C:75:ED:28:85:02:16:71:BF:0E:F9:01:2E:59
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:10:6f:f3:83:44:37:dd:0d:d8:e7:56:36:db:4c:7a:2a:85:
86:a2:3d:c4:66:d0:b3:2c:21:c3:e8:5f:f0:81:9b:da:92:c3:
6a:1f:27:f3:80:38:3f:73:24:58:ed:c1:f2:c6:cb:f2:5e:4c:
09:6c:0a:74:c2:c0:0f:77:9e:b4:84:85:49:1f:7c:9a:b9:1f:
59:df:97:04:f4:4c:24:a8:c8:03:02:b4:7c:5c:ca:1a:1e:94:
e2:bc:e2:4b:8f:55:5c:7f:c2:56:4c:26:86:86:cf:3f:9f:76:
74:61:5d:25:47:e6:b8:18:c5:a4:30:9e:94:ba:4a:43:af:75:
e9:dc:a5:d4:36:46:40:21:0e:81:8c:09:6d:4c:aa:26:8f:f7:
fb:90:06:9f:02:9c:28:79:a7:ec:0f:4a:36:28:b6:27:bb:84:
5c:3c:04:e3:c8:3f:f2:86:dc:2c:3e:f7:82:4b:3c:6a:dc:82:
48:eb:4d:9b:88:05:c5:7c:2e:02:eb:e3:e4:e6:58:81:b9:cc:
af:36:1f:1f:f5:c6:cb:56:76:b5:bd:02:8c:53:23:cc:21:e0:
d7:3c:51:58:00:90:21:c1:38:72:88:f2:43:c6:9c:16:19:da:
f3:89:a9:eb:a8:e2:cd:35:cd:88:54:f6:1f:8d:b1:fc:c7:45:
2b:56:99:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExy8mJl4CuEOzph8rdIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyMmYwNGI5NDA3OGFhZTAxNWUwMDk1N2IyNzNmZjAz
OGNmMTIwHhcNMjUxMTExMDQwMTA5WhcNMjUxMTEyMDQwMTA5WjAzMTEwLwYDVQQD
Eyg1ZTZjZjQwMzBlMGE4Yzc1ZWQyODg1MDIxNjcxYmYwZWY5MDEyZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nfy/wRfOIb8oeaAIieJnhabvVK2
aGk3A464qLmm6tKdyXDcuXyfPqVumav1x2jKo+dnX0nZ6bzlTfo4ncp60WVUiQT0
8yZgxNqIR4D3D1dkrAoAtHBF01h6GwUSa74x5cycc/mZUoCNH7hL4pyXKGxFNP4S
f4//+VQcuv42u+4Y1XLhMX6unz1HCYtZP+kGxCp8E1Cc35V1GWcYJ0Q/FY8Z5Ubz
jmI0yqoNyO/FQSesXiJz7xq0HlGbdxCpuI33S1Q+gT6v+BJ/bKU4bpAgrI6d7V5u
bwJaEr/obyycuOoKsELW3xS8LZ+a3Zt93+MMw3hmbCJtDvY5HXDnc4iZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5s9AMOCox17SiFAhZxvw75AS5ZMB8GA1UdIwQY
MBaAFDbqIvBLlAeKrgFeAJV7Jz/wOM8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUt
NWMzZjc2ZDExNjA3LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUtNWMzZjc2ZDExNjA3
LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBBv84NE
N90N2OdWNttMeiqFhqI9xGbQsywhw+hf8IGb2pLDah8n84A4P3MkWO3B8sbL8l5M
CWwKdMLAD3eetISFSR98mrkfWd+XBPRMJKjIAwK0fFzKGh6U4rziS49VXH/CVkwm
hobPP592dGFdJUfmuBjFpDCelLpKQ6916dyl1DZGQCEOgYwJbUyqJo/3+5AGnwKc
KHmn7A9KNii2J7uEXDwE48g/8obcLD73gks8atyCSOtNm4gFxXwuAuvj5OZYgbnM
rzYfH/XGy1Z2tb0CjFMjzCHg1zxRWACQIcE4cojyQ8acFhna84mp66jizTXNiFT2
H42x/MdFK1aZTA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:39 2025 by rpki-client