Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: diwGwZo0qVe2mEvtDY/KfKAup+LO11wzP66Xa3vW/P4=
Subject key identifier: 6D:21:58:3B:BE:91:97:95:00:73:DB:1A:5D:A7:42:2B:21:DC:D1:75
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01976D3E86517943AA4B5D6B93F4ACA3B7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 09CF
Signing time: Sat 14 Jun 2025 07:01:43 +0000
Manifest this update: Sat 14 Jun 2025 07:01:43 +0000
Manifest next update: Sun 15 Jun 2025 07:01:43 +0000
Files and hashes: 1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: Zm18FWwnVm0MiJ6JbSPy9AKvZB+Lh4vxAZK9B4GfFz4=)
4: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (hash: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:86:51:79:43:aa:4b:5d:6b:93:f4:ac:a3:b7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 14 07:01:43 2025 GMT
Not After : Jun 15 07:01:43 2025 GMT
Subject: CN=6d21583bbe9197950073db1a5da7422b21dcd175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:e4:26:48:60:ff:9e:d7:de:98:a4:83:6a:
12:c8:59:fc:5c:c5:7a:c2:29:fd:46:0a:46:7a:00:
dd:f3:d9:c1:37:13:db:41:00:00:ed:9a:9e:96:4a:
83:2c:25:b9:80:58:f9:2d:e6:c6:51:48:2b:f9:22:
99:c6:cc:2b:18:32:bc:30:7b:88:52:71:e4:63:56:
8f:77:1c:7c:f1:de:05:df:33:7e:69:22:c3:66:40:
07:c9:27:e5:22:69:5d:38:b7:23:b0:73:b5:bd:58:
65:63:15:c5:d8:4f:1a:e1:26:de:c5:ff:cf:4c:10:
ae:eb:9f:cd:34:ff:54:d2:87:3c:0a:b6:5d:8d:15:
73:e9:54:d9:18:c1:e2:2e:95:ca:5b:46:e9:e6:a1:
82:e2:86:df:22:52:3f:e0:cc:a1:6d:80:a4:c3:c3:
69:57:2e:ec:2b:70:5a:23:c6:e0:f9:00:ed:e9:c5:
fa:0d:f6:cf:c6:ce:71:48:52:1b:31:16:d5:71:af:
43:fd:71:6d:cb:dc:4e:ab:a6:c3:8b:92:8e:98:7b:
eb:48:b7:7b:01:08:e6:bd:1c:32:7a:c0:af:ef:58:
46:f4:9a:f2:c8:bb:28:a4:b8:ff:38:ad:fc:15:99:
2a:b5:83:24:64:08:16:ee:17:d2:e9:00:3a:4c:fb:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:58:3B:BE:91:97:95:00:73:DB:1A:5D:A7:42:2B:21:DC:D1:75
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:d4:c0:49:58:27:25:52:7b:9e:be:0a:ea:3b:aa:9a:a0:12:
5b:14:10:b4:2c:78:5b:95:fc:9e:e6:6a:f9:24:d7:4d:dc:92:
96:2c:13:e4:41:14:3f:f3:80:1f:73:3f:c5:f7:84:e9:f9:ad:
34:c9:7a:0b:16:98:29:2b:45:c6:e0:3f:b0:c7:68:9d:d1:f8:
8c:90:d5:aa:1e:a3:6b:f0:b6:63:08:82:9e:42:d6:39:b9:98:
ac:8b:7b:71:c8:90:97:da:fd:88:5d:0e:db:0b:cb:af:72:a8:
a0:f9:3a:bd:f0:ee:bf:29:18:2d:ff:e6:6d:4f:bb:4c:9e:3a:
99:8f:b8:51:e7:46:68:0f:b0:04:f7:9d:9f:70:90:ac:73:29:
6a:32:6d:71:b8:49:05:86:41:f1:87:ac:28:0a:44:a4:e8:89:
38:84:6f:73:8a:f7:5f:23:03:fa:9b:ea:72:43:1e:9f:59:65:
59:0d:7a:23:30:e8:54:ce:42:c7:e8:71:c2:37:7e:1d:35:8c:
4c:54:0e:cf:04:b6:4c:86:82:69:ad:b7:6b:11:3d:3e:6c:d1:
dd:4b:ad:89:0f:37:c1:98:03:65:c8:a0:6c:66:c7:00:ed:30:
34:85:f4:df:24:60:1c:31:f4:f5:bb:dd:8f:a1:ca:7a:a7:4d:
0b:5c:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:04 2025 by rpki-client