Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: uTl1AQlJG7I7aNfV22DMevXXJeBxokSq5Xfa1aev/3U=
Subject key identifier: 6A:DF:B2:87:AE:D3:FE:D2:6A:5D:94:4A:9C:67:7E:E1:E6:1F:4C:57
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019A4F2B2A045D3B4C1185EE7EEBFC13B319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0B52
Signing time: Tue 04 Nov 2025 14:00:20 +0000
Manifest this update: Tue 04 Nov 2025 14:00:20 +0000
Manifest next update: Wed 05 Nov 2025 14:00:20 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: hvH1lUFj1VAFusb_pQJRTraQJ4U.roa (hash: AJ2AV5CVSEoSqNl0zVVSMcCjH1TLixfyv1cSlmQnkz0=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: rbiq9qV1VMjCN4GtE9MQt5ihH1RLJSh8I+l16C8aSCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2a:04:5d:3b:4c:11:85:ee:7e:eb:fc:13:b3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 4 14:00:20 2025 GMT
Not After : Nov 5 14:00:20 2025 GMT
Subject: CN=6adfb287aed3fed26a5d944a9c677ee1e61f4c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:8c:e0:59:fe:ee:a7:a1:32:bd:78:9c:56:
dc:f8:48:20:a4:c5:fd:62:28:35:3f:be:35:14:e6:
32:ff:aa:a9:e1:b7:7d:5d:b5:62:b9:8a:b9:86:b6:
4f:f7:d0:13:7e:1c:8b:0b:7a:05:aa:6d:75:09:86:
27:b0:7c:f7:91:df:81:ed:e8:bb:ba:d3:69:ef:b8:
b5:85:ed:99:26:80:5c:6b:d1:c6:88:09:49:06:45:
af:b3:5c:3c:df:09:22:0b:cc:1f:95:0e:e7:16:bb:
28:91:37:73:da:63:cb:c7:68:ef:19:6c:d1:20:2d:
e7:20:05:a1:ea:eb:aa:35:f1:07:8e:cd:49:6d:6a:
b0:68:2d:b6:7c:cc:98:f5:0d:a2:92:89:23:73:e8:
53:a9:7a:22:e2:a8:af:ad:21:7c:f2:83:3e:07:7b:
a9:ed:91:55:a3:d1:76:0f:6a:ea:a1:7a:3c:a9:fa:
71:5d:60:f0:b9:9f:6d:15:06:b8:fc:6d:bb:3c:e0:
1c:8d:01:8f:6d:c4:ea:23:20:45:db:bb:68:a0:7e:
47:80:e8:a6:43:e5:51:c2:cc:97:1a:9a:df:0d:d6:
24:9e:10:4c:83:2d:f3:0a:b8:29:eb:0c:4f:18:b7:
58:3f:36:a4:17:e5:b4:41:9f:60:f6:8e:ee:47:a4:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:B2:87:AE:D3:FE:D2:6A:5D:94:4A:9C:67:7E:E1:E6:1F:4C:57
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:e1:e3:b3:df:3e:6f:6f:46:4d:3c:26:1b:ee:3c:d6:5c:
51:45:b1:ca:30:f1:dd:f2:b0:2b:f8:9a:4f:6d:e6:59:aa:f2:
d2:31:5f:56:0a:66:d1:91:ea:9b:a6:97:f9:c5:70:55:8b:3d:
48:c6:25:a1:31:b7:b6:ac:d4:3a:3c:f6:a2:9e:3c:73:33:be:
ff:8d:47:25:d3:64:3f:40:f8:c8:52:9f:b3:5e:e8:e3:c8:c1:
31:49:5d:36:3f:2f:43:4e:24:dc:e3:79:dd:ff:ca:8b:9d:f9:
bc:a5:d6:53:6e:39:63:25:60:11:3c:0a:71:34:36:f1:88:9f:
58:58:02:33:b8:bd:27:1c:c7:83:bc:f9:42:48:c1:50:02:59:
53:23:c7:69:e0:81:3a:af:77:38:47:ba:55:ba:46:d5:c3:c9:
f8:f9:26:0b:91:27:f8:64:d2:23:54:89:df:26:a5:18:8f:eb:
83:c9:e7:29:04:36:18:4c:c4:4c:42:c1:b5:2b:61:07:b9:35:
36:13:d2:87:ea:ce:5a:34:98:5b:7f:d8:f2:c4:15:6f:03:04:
13:a9:fe:43:61:7c:5d:46:8f:38:39:2a:9d:c1:f0:16:35:33:
08:d3:7d:b5:e2:72:b1:c0:07:68:1b:e4:f4:dd:cc:16:e9:b1:
24:ce:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:30 2025 by rpki-client