Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: BWVu6KwcxBgv4WvdvcRh57nnEENvY3NC5TGURSV9/jU=
Subject key identifier: 47:99:22:02:26:6C:77:0F:85:32:5A:EC:FF:05:F8:EE:6E:FB:B3:0D
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 019A4F629FE230D369CD184CD78212C421B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 075D
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: zl2dsakOIMZzjtCJziPSwCiXBc9tLUb3f11lhNtozog=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:e2:30:d3:69:cd:18:4c:d7:82:12:c4:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=47992202266c770f85325aecff05f8ee6efbb30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:cf:f6:18:0e:8b:20:fd:a5:25:ba:14:c1:
4b:c1:79:ce:ba:c1:cf:b0:f8:1d:e9:c4:9a:d0:80:
84:d3:cb:eb:15:55:1b:ef:4a:8e:59:a0:fa:e6:ee:
7b:5b:02:97:c0:48:b8:db:dc:87:de:c3:2c:b7:ee:
97:35:9e:65:03:a3:37:7b:5e:ed:03:43:04:17:2e:
31:bd:e0:7e:83:33:ef:77:e4:92:59:9b:a8:d5:ed:
74:ca:40:db:13:82:80:cc:67:7e:0a:5e:49:6e:67:
84:96:08:47:d1:18:8a:c2:dc:6c:3e:21:90:53:7e:
89:ed:19:2a:74:ce:8e:0b:27:39:2a:fd:f1:fb:41:
03:18:71:b0:e7:fa:26:00:b6:4f:da:95:93:83:27:
3a:21:5f:39:a8:ad:b9:84:9a:06:76:3b:2d:3a:81:
37:83:8e:ac:d3:9e:69:08:1e:92:33:bb:a6:04:5b:
0a:ab:e3:a1:7a:51:da:dc:fb:bf:ad:23:38:b1:6d:
aa:28:61:f7:b2:a8:4e:16:5b:20:22:00:a8:b2:0f:
40:6c:6e:56:c4:57:bd:47:00:eb:77:5d:a6:02:1e:
4d:1f:82:d7:13:d4:22:c6:e4:25:0a:f3:3e:ee:88:
91:a2:7d:9d:9f:9e:bb:d3:e6:5e:62:fa:d6:4c:82:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:22:02:26:6C:77:0F:85:32:5A:EC:FF:05:F8:EE:6E:FB:B3:0D
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:09:a6:84:4c:bf:86:5b:b8:18:90:69:9b:89:75:df:71:
9c:56:57:1f:ac:ff:15:bf:3c:39:73:b0:5b:cf:c1:27:97:3c:
f4:97:33:7d:35:6c:ff:a9:f1:2e:ab:b8:bb:4b:14:f7:f2:43:
e5:63:22:ab:8b:f6:4d:1c:67:df:51:92:71:30:31:a5:46:d3:
e9:42:7f:38:e0:8b:b5:b6:52:5e:3e:ae:eb:41:30:4b:56:e7:
d7:39:1f:89:e9:87:7d:5f:01:be:04:6f:7e:95:f3:ca:91:6b:
fa:59:42:39:3e:e5:ba:46:0c:6e:8b:00:2d:09:2e:d9:19:5a:
e2:d5:f4:0f:a2:07:f2:48:d3:16:46:ae:0b:0e:65:77:8d:b8:
5c:e5:77:b7:e0:7d:04:39:a1:05:6c:93:37:d6:9e:e6:88:86:
7d:03:16:81:57:9c:3c:a0:d7:75:37:3e:1d:9f:ac:89:24:7a:
86:28:4f:f6:86:d5:66:9d:51:06:72:7a:e7:b2:e0:56:0f:b6:
82:54:33:8e:ab:eb:77:7d:c5:f5:39:01:1a:b6:fe:ea:1b:8e:
b3:0d:06:50:ca:b4:f6:40:ab:e8:82:5f:f2:70:a7:eb:e1:3f:
77:0d:0e:31:f5:61:4b:57:5b:22:3c:91:59:06:91:d2:69:63:
57:9a:2a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYp/iMNNpzRhM14ISxCGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTEzYWYzZjM2YmI5MmEwZjJmYmRhZmUzYjY3MWY2Yjlm
Y2VmYTgwHhcNMjUxMTA0MTUwMDU0WhcNMjUxMTA1MTUwMDU0WjAzMTEwLwYDVQQD
Eyg0Nzk5MjIwMjI2NmM3NzBmODUzMjVhZWNmZjA1ZjhlZTZlZmJiMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfP9hgOiyD9pSW6FMFLwXnOusHP
sPgd6cSa0ICE08vrFVUb70qOWaD65u57WwKXwEi429yH3sMst+6XNZ5lA6M3e17t
A0MEFy4xveB+gzPvd+SSWZuo1e10ykDbE4KAzGd+Cl5JbmeElghH0RiKwtxsPiGQ
U36J7RkqdM6OCyc5Kv3x+0EDGHGw5/omALZP2pWTgyc6IV85qK25hJoGdjstOoE3
g46s055pCB6SM7umBFsKq+OhelHa3Pu/rSM4sW2qKGH3sqhOFlsgIgCosg9AbG5W
xFe9RwDrd12mAh5NH4LXE9QixuQlCvM+7oiRon2dn5670+ZeYvrWTIK80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeZIgImbHcPhTJa7P8F+O5u+7MNMB8GA1UdIwQY
MBaAFNEROvPza7kqDy+9r+O2cfa5/O+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmIt
MDBjZTlmMDhhZDgzLzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmItMDBjZTlmMDhhZDgz
LzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj4JpoRM
v4ZbuBiQaZuJdd9xnFZXH6z/Fb88OXOwW8/BJ5c89JczfTVs/6nxLqu4u0sU9/JD
5WMiq4v2TRxn31GScTAxpUbT6UJ/OOCLtbZSXj6u60EwS1bn1zkfiemHfV8BvgRv
fpXzypFr+llCOT7lukYMbosALQku2Rla4tX0D6IH8kjTFkauCw5ld424XOV3t+B9
BDmhBWyTN9ae5oiGfQMWgVecPKDXdTc+HZ+siSR6hihP9obVZp1RBnJ657LgVg+2
glQzjqvrd33F9TkBGrb+6huOsw0GUMq09kCr6IJf8nCn6+E/dw0OMfVhS1dbIjyR
WQaR0mljV5oqbw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:48 2025 by rpki-client