Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: GZD1rK938nSPUgyrkE5cZarZ2/RZMyyZ7h9TdC9Jczk=
Subject key identifier: 79:0A:20:22:4E:F0:93:1F:B5:9E:FD:60:BB:40:88:41:D1:64:51:60
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01987450968C9F6824D81D7D551CD0975A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0667
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: 40SJ0mzvaoyEhXRD1H9qmBBCCWDWIH5yt9aHv1coE24=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:96:8c:9f:68:24:d8:1d:7d:55:1c:d0:97:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=790a20224ef0931fb59efd60bb408841d1645160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:13:8e:64:13:b9:c7:5d:0d:be:2a:0d:3a:70:
49:6d:d4:7b:a5:0c:d0:3a:1d:b9:ec:b2:2c:b9:88:
a1:72:d8:87:6d:c2:1d:1a:0b:6e:65:6b:5e:dd:e7:
bf:4d:61:5b:c9:ca:d1:72:bb:29:12:91:4f:0a:f6:
52:fe:52:8f:59:0b:f3:cc:96:40:57:be:76:e3:ad:
c5:59:58:bf:c8:fc:44:76:fb:f4:3f:1b:14:c1:38:
b9:01:11:57:4d:e1:5c:c5:2b:f4:c2:0f:39:f3:e6:
11:24:bb:fc:8e:68:9b:bc:03:de:10:e4:38:bf:33:
c0:6d:bc:c8:64:f0:82:dd:b6:51:85:c8:b3:dd:9c:
7d:4d:a0:db:cb:5d:33:b9:23:dd:a7:c9:23:00:09:
8f:9a:49:fe:66:c6:e3:bf:b3:74:a5:cb:ce:37:1c:
b7:3a:a5:c2:4b:67:f8:4a:ce:93:39:f8:18:a6:fe:
0e:c6:75:80:7f:48:39:3d:2e:b4:79:61:67:46:cd:
b6:f1:42:55:6e:31:50:d8:a1:63:c9:d9:a9:c9:dc:
ab:87:81:66:a3:fc:99:45:ab:4b:55:c6:b9:b1:32:
0f:cb:12:1c:63:e2:37:f4:d6:0c:ff:fc:87:02:e9:
61:19:a1:1d:70:c0:ac:f9:35:f7:73:f8:b2:86:7f:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:20:22:4E:F0:93:1F:B5:9E:FD:60:BB:40:88:41:D1:64:51:60
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:37:c4:17:2d:29:2b:f1:53:f5:76:e2:e2:4c:bb:4a:76:30:
ce:30:b3:1d:2c:97:d0:de:f3:85:18:f6:2c:16:00:50:d2:81:
08:d9:49:a0:35:e1:71:c3:0c:ef:bf:3f:a8:28:d9:76:52:52:
ca:67:a4:36:c9:16:e7:5d:ab:90:0d:1e:e2:03:b6:07:fd:06:
3b:48:36:df:76:cc:42:83:90:b6:25:95:f5:10:c9:a8:88:db:
65:78:83:70:74:e3:fa:68:be:2e:20:fb:bf:00:10:02:9d:6d:
f1:e6:06:13:c2:8f:1b:30:f0:bb:50:90:3d:85:cc:c5:02:1a:
7f:22:16:2c:b4:3d:ea:03:2f:c5:26:a1:19:89:f2:9e:a2:89:
3f:05:ce:71:82:ca:06:a9:32:5b:0c:0c:61:78:1e:1d:53:36:
ae:cd:26:60:16:86:1e:de:8f:dd:a6:ba:0d:30:21:27:8f:19:
3d:c7:b7:87:87:cd:d2:8b:1e:02:f9:20:9c:33:9b:38:67:f0:
a8:8c:53:22:8b:82:02:d0:e6:b1:97:00:b6:bb:16:29:29:fe:
c4:18:03:47:62:0d:e6:7a:30:fb:5a:5c:13:62:28:b4:22:cd:
97:6d:87:95:e2:2f:30:9c:03:c4:8e:ef:14:c2:c3:b9:77:80:
ad:4b:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:34 2025 by rpki-client