Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: REmwUCxZMUv+WVpYmdbanQKhaxIB8w2xFCAKOGg81xY=
Subject key identifier: BE:91:DB:96:C0:2B:FF:CA:2B:B4:48:0B:6E:8D:80:09:A1:05:6E:54
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0198741947B3483823182BE196E2C2A7D18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0A5A
Signing time: Mon 04 Aug 2025 08:01:10 +0000
Manifest this update: Mon 04 Aug 2025 08:01:10 +0000
Manifest next update: Tue 05 Aug 2025 08:01:10 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: Yi-_AOBIegyZbx8uOcbaz9DwrKE.roa (hash: ER3+63xjq9p3EvqNEllUUZfmGZVR+0lO0rze97XuPy0=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: Gr3OUycsvVjY9qDj0sOnMuugP3Klgb1QCkIEL814An8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:47:b3:48:38:23:18:2b:e1:96:e2:c2:a7:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Aug 4 08:01:10 2025 GMT
Not After : Aug 5 08:01:10 2025 GMT
Subject: CN=be91db96c02bffca2bb4480b6e8d8009a1056e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:1d:e0:cf:d6:69:ff:c0:20:4f:d7:04:f4:
35:f9:9d:8e:5d:24:b6:9b:d6:94:6b:47:55:8e:36:
c4:cb:20:18:d8:9e:b8:65:38:7e:b5:d1:30:5e:8d:
3f:a6:98:e1:bd:53:c2:1e:14:04:0e:8a:d8:f8:49:
e4:1b:3c:70:a6:7f:b2:85:57:4c:fa:fc:62:78:fc:
d5:ae:48:71:64:09:ba:67:7c:3b:58:a3:6f:ae:bb:
26:38:73:b0:da:51:ee:84:2a:e2:7b:01:de:2e:f2:
5e:48:93:6a:28:8b:d1:0e:b9:ba:7c:a8:3d:55:de:
41:47:0a:46:9e:1d:52:92:c1:83:f2:03:79:a6:4c:
87:28:64:0e:25:5e:de:0b:54:c7:38:b5:64:63:1d:
42:dc:ec:9e:56:35:88:54:c4:77:80:5f:7c:d6:ea:
af:ee:71:65:c6:53:b1:cc:c2:95:2d:72:32:10:7a:
bb:ad:50:3b:31:df:35:3d:97:f8:63:a0:79:b6:bb:
42:72:de:62:30:8d:10:c6:38:be:fe:85:5d:b2:d1:
04:fc:15:9e:2d:6a:e6:11:26:af:46:98:31:fc:eb:
e8:fe:98:95:a2:d5:13:81:67:73:9e:da:19:40:b8:
69:28:37:66:fe:e5:43:2d:3f:24:bb:d2:91:a5:bb:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:DB:96:C0:2B:FF:CA:2B:B4:48:0B:6E:8D:80:09:A1:05:6E:54
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:79:b2:e9:7e:58:08:7d:f6:9d:2d:bf:ff:73:f7:94:c5:aa:
ca:5e:e4:64:51:11:35:9c:81:66:29:19:de:18:45:cb:3c:77:
af:fe:df:96:c0:40:37:fb:2d:90:08:25:15:33:a2:d8:e2:cf:
c0:de:16:cb:fa:85:c8:c3:47:8e:54:7c:b5:ee:aa:d9:9b:6a:
04:8a:05:43:b2:85:77:07:24:6e:54:d9:c2:63:81:96:86:0f:
6e:fe:44:2a:8e:f8:03:16:69:65:06:2e:73:bb:9f:89:18:d5:
4b:35:4f:4e:25:7b:a8:1c:ea:f9:6d:52:a8:35:d8:3b:32:88:
1b:8d:e8:b1:a2:22:ca:13:ec:55:e4:df:eb:f2:a0:7e:56:78:
d7:c7:94:66:f1:7f:5c:46:02:ed:55:16:22:18:95:8b:d8:97:
e7:38:82:36:d9:13:dd:58:af:8f:87:9b:ad:8d:5c:1e:7c:8f:
dd:dd:e3:91:da:3e:82:c0:2e:01:95:4d:e2:4c:d7:52:bd:44:
94:4a:c6:9b:e4:a4:8b:33:4e:7b:64:83:2a:c4:5e:ae:a8:57:
72:24:fd:24:eb:1c:af:a0:c7:be:71:56:c2:a8:47:43:b0:30:
25:2d:59:38:5a:b6:46:4a:12:1e:f0:c4:81:fa:2d:7f:9a:50:
14:ab:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:43 2025 by rpki-client