
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: Tb+WMhlFJ1Xay8BKCsNZ27UG7M5+tEGT0SINeTfXkfg=
Subject key identifier: 04:85:F3:05:EC:DF:44:E4:92:8F:55:34:20:E7:9C:47:09:DA:41:23
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019881D4BCED35C7B38C7250A0E5DED8BB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0991
Signing time: Thu 07 Aug 2025 00:00:59 +0000
Manifest this update: Thu 07 Aug 2025 00:00:59 +0000
Manifest next update: Fri 08 Aug 2025 00:00:59 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 9W+0E5Q3pSwtRhI1nS0bVDYCAHXLTcsvQWmDRJ5TnGA=)
2: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:bc:ed:35:c7:b3:8c:72:50:a0:e5:de:d8:bb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Aug 7 00:00:59 2025 GMT
Not After : Aug 8 00:00:59 2025 GMT
Subject: CN=0485f305ecdf44e4928f553420e79c4709da4123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:b8:28:f8:c0:50:fe:78:00:ce:0b:72:21:
75:ce:1b:6a:03:7b:ef:59:45:2c:09:47:1b:4e:b0:
c2:86:60:6a:4e:89:fa:1a:c9:8a:e1:a3:ce:a9:65:
7b:a2:a5:68:b5:89:e9:0b:2b:de:dc:ff:6f:ae:6c:
82:39:47:de:1c:9f:23:78:80:0f:60:00:bd:62:27:
42:7a:3e:39:f2:da:0f:6c:16:e1:45:3a:c3:f4:70:
ea:e8:d8:e4:73:55:f8:1f:eb:03:95:0a:67:93:75:
a9:c2:51:22:7b:f8:18:9b:d1:11:d7:df:b8:6c:a4:
19:ca:14:0c:93:3c:6e:2b:c7:48:f3:76:fe:ee:8a:
3a:60:36:09:77:fe:f7:4a:e9:2a:c4:1f:af:60:38:
6d:a2:97:ae:dd:53:fe:44:2f:d4:62:ca:32:4f:ce:
30:98:eb:f0:91:fa:b3:4a:ff:56:48:27:da:4e:f9:
86:cf:39:64:7a:0f:ea:0d:52:78:e1:90:62:ff:23:
ad:9f:40:9c:65:e3:8a:55:21:7d:53:84:c3:50:f1:
17:ab:e6:c6:0e:04:ed:39:12:10:dd:d5:a2:ae:ed:
53:1f:b3:db:78:e5:e9:af:14:c6:0d:7c:cb:99:74:
56:89:e2:13:b6:48:19:e2:f0:ee:af:6d:7b:c8:e7:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:F3:05:EC:DF:44:E4:92:8F:55:34:20:E7:9C:47:09:DA:41:23
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:22:0e:8c:05:a6:ad:14:a9:a3:15:84:ca:34:b3:cd:dd:88:
bc:da:dc:43:90:60:d7:c9:dd:a2:84:52:81:40:9b:f3:16:45:
cc:34:73:11:ab:94:a6:6b:c4:e2:68:05:ec:0f:5a:9c:88:c4:
a1:33:8e:d5:86:a5:ab:12:55:2e:57:fe:62:c8:e6:b1:0d:6a:
f3:f5:cd:48:37:89:b4:94:95:94:a5:40:86:f2:48:93:d7:38:
53:dd:c3:ad:60:00:f9:6e:1f:98:23:17:93:8f:9a:79:70:00:
87:30:bf:04:95:72:0c:fa:5e:6f:a1:24:40:c5:22:f7:0d:fe:
9b:8f:b2:6b:c4:dc:d9:53:2a:44:ff:77:e2:76:81:92:c0:76:
0e:f8:ba:06:be:04:e4:95:70:be:55:02:43:de:29:6d:7a:ec:
aa:fc:75:9d:07:87:84:b9:00:08:df:e1:03:e9:1a:af:ab:07:
8d:ce:26:ea:88:e5:06:b9:b1:6a:a1:f8:60:e8:05:3b:82:38:
3f:3b:04:d3:1c:a7:48:6b:4e:b8:66:39:5c:17:50:4d:36:48:
9b:9d:92:07:2a:42:8b:56:b3:32:70:e3:f0:24:d4:be:29:6a:
a0:11:3b:62:63:2b:82:f4:53:35:33:b8:17:dd:61:96:62:93:
bf:f6:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:34 2025 by rpki-client