Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: 5ne3lvby3SMC1Co6ZE2axzGDBV1i2S+PNQ98Kojv718=
Subject key identifier: AB:55:F8:AF:CD:B0:04:22:EB:35:62:11:19:31:45:6B:06:DE:2B:18
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019A53081BD098F3FA21A228B8CEA261718F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0A82
Signing time: Wed 05 Nov 2025 08:00:31 +0000
Manifest this update: Wed 05 Nov 2025 08:00:31 +0000
Manifest next update: Thu 06 Nov 2025 08:00:31 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: jAQgxf2uL67yP5Qz6XVMvMVucuusVUNGFOabaWUvu5Y=)
2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=)
3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:1b:d0:98:f3:fa:21:a2:28:b8:ce:a2:61:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Nov 5 08:00:31 2025 GMT
Not After : Nov 6 08:00:31 2025 GMT
Subject: CN=ab55f8afcdb00422eb3562111931456b06de2b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:51:67:2c:66:14:6d:97:a5:fe:b2:24:fb:
5d:aa:e7:e8:79:e3:a6:92:ae:70:c1:c3:32:6a:50:
a4:e4:f4:11:d0:e8:26:a6:4a:03:41:c8:c0:f8:7c:
1d:94:46:68:b6:5b:5d:8c:eb:ba:be:8c:4d:fb:38:
99:69:53:54:c7:c5:a4:aa:1b:cb:f6:ae:4f:69:b4:
ae:90:93:26:ae:a4:0b:16:1d:36:73:1e:01:3c:ce:
06:ff:6a:08:ee:92:e7:4d:d2:54:23:df:67:a4:44:
e2:22:2d:fe:69:7c:bb:c3:e0:4f:e5:28:99:ab:37:
48:1b:a7:f6:91:44:5d:2b:ba:a5:e2:65:9f:29:21:
a1:b9:a3:f3:f5:0c:e6:81:59:46:85:06:b9:c3:39:
5d:21:82:d1:ed:21:35:34:4c:7f:2a:4f:5f:c8:bf:
67:70:11:a9:db:26:f4:c7:47:96:3a:fe:70:be:a6:
0e:78:66:2c:b6:cb:b7:28:60:c5:08:35:5a:05:43:
66:c8:60:0b:6f:ce:a9:f5:30:75:b4:27:4f:be:d1:
d2:22:28:69:5b:62:f8:22:65:bf:9b:0b:98:3e:6b:
6d:a0:b3:c6:f9:0a:f5:d0:5b:28:5c:e6:70:f9:f3:
56:cf:a3:f1:f5:8f:f2:b0:1a:dc:72:f7:b6:7f:d5:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:F8:AF:CD:B0:04:22:EB:35:62:11:19:31:45:6B:06:DE:2B:18
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4f:01:56:ce:91:8c:4b:04:21:9c:95:54:49:61:bf:46:87:
a4:d1:51:b9:d7:10:1e:f2:12:78:ab:69:c7:f6:1c:44:ae:c8:
90:d8:e8:6d:66:3f:d8:b4:12:5b:86:59:92:f6:a8:5b:8e:c5:
ae:61:59:a7:cb:ee:bb:58:ed:d3:49:a2:5b:57:1b:79:c4:a2:
32:37:77:c5:98:f0:f6:0f:14:a8:e4:54:e3:9f:7d:1c:fb:c8:
ad:63:33:52:98:8c:3c:68:d3:24:b8:09:ce:e4:c1:17:fb:55:
97:35:1f:1b:34:93:da:d2:43:40:d0:61:d0:e7:7a:cd:5c:d5:
76:64:b3:31:65:74:ad:81:95:c2:b3:a3:b4:1a:4b:6f:c4:69:
41:40:68:f4:4b:0d:61:06:6d:cc:0f:13:56:d4:64:d7:4e:c0:
62:78:91:15:dd:f8:2a:23:94:2e:6d:ee:6e:1e:b9:f8:2f:32:
5d:9e:fd:e6:e8:1e:17:12:27:f4:ff:64:c0:38:b7:16:7e:8b:
b6:e7:2e:85:89:39:18:6d:82:52:25:55:69:c5:20:61:5f:1d:
e3:cf:ad:2b:fd:0d:19:e9:14:e0:0b:21:88:38:00:b8:f8:75:
4b:a9:12:4d:4d:9d:7e:9e:70:a2:01:80:64:ac:9b:be:26:7e:
a8:2e:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:59 2025 by rpki-client