Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: nrUD87E26Wao8Jw3O5wV+AM5jkmNCTh115szprMsHIw=
Subject key identifier: 76:FE:3A:E7:C0:41:E1:1C:A9:F0:12:5B:42:6E:57:24:88:E7:B2:B3
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019770ACAF389C1F422044A7D4D2BBDA5801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 05E2
Signing time: Sat 14 Jun 2025 23:00:54 +0000
Manifest this update: Sat 14 Jun 2025 23:00:54 +0000
Manifest next update: Sun 15 Jun 2025 23:00:54 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: XXzR9iRWhvd6TMWIXybPnBbapzFhTczYn453H02lbGQ=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:af:38:9c:1f:42:20:44:a7:d4:d2:bb:da:58:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jun 14 23:00:54 2025 GMT
Not After : Jun 15 23:00:54 2025 GMT
Subject: CN=76fe3ae7c041e11ca9f0125b426e572488e7b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:13:07:b6:0c:51:ab:d0:94:88:f7:25:b7:
c9:2e:11:6d:27:34:3c:41:41:25:f0:d7:9b:c8:3d:
b9:5c:2a:cc:8e:15:13:e3:4d:ef:a6:2a:f6:59:db:
8a:92:67:1d:ae:b7:b5:87:36:e5:3c:f2:84:a4:8f:
c0:64:82:55:fa:aa:2f:c1:2d:cf:b8:6a:91:25:05:
2a:4f:53:90:fa:0d:57:4d:7f:03:f0:de:09:1d:dc:
67:68:dc:d6:f9:15:d6:21:7e:2b:1c:7b:9b:47:c7:
d5:8c:dc:44:31:41:92:c4:d1:77:ca:d8:69:2b:2d:
4d:c5:4a:f1:8f:bc:0e:7d:a8:cf:50:39:5a:48:7e:
b6:be:e3:ee:e0:8a:e7:72:52:49:97:ca:cf:d3:8d:
42:fc:e1:69:12:8b:02:5d:e7:96:12:e6:f6:dc:83:
98:0e:b6:0a:b7:ec:5d:26:b8:b6:89:83:71:d9:bd:
dc:a7:53:58:7d:91:3b:3d:f6:df:37:d7:be:1a:36:
2e:2f:a6:c5:d5:dd:87:c0:ab:9d:bb:de:f2:80:6c:
4c:8a:9f:5d:27:1d:14:bd:da:e4:73:10:86:e0:45:
f1:27:0b:65:81:d3:5b:82:eb:0a:9f:a3:89:39:f3:
a0:9e:ca:de:6f:f4:7e:95:8f:f5:27:0d:76:95:33:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:3A:E7:C0:41:E1:1C:A9:F0:12:5B:42:6E:57:24:88:E7:B2:B3
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:2a:df:66:e9:e5:fb:9a:54:c2:54:e5:ac:55:ad:c4:68:
33:72:a9:0d:0d:bb:61:ef:c7:8e:e1:19:d4:cc:2a:02:cb:90:
c9:7e:4c:9b:55:20:71:6f:7e:a8:f3:bd:64:6f:44:6a:33:8b:
7d:86:1b:19:48:4c:eb:c2:02:af:bd:ca:33:b1:94:38:fc:cb:
10:31:f7:95:be:2a:73:7f:d0:17:e8:29:73:88:df:f2:dc:4f:
f5:db:26:df:40:e0:f8:79:2a:91:e2:c3:25:e8:55:1d:45:4b:
40:2c:27:04:03:b2:18:d4:f1:62:9a:0f:30:41:ab:6d:dc:91:
70:c7:54:3c:fb:21:5e:70:b4:8e:df:85:1e:4a:cd:2d:aa:a4:
13:58:da:47:55:01:52:df:ec:e0:63:36:4f:cb:e9:42:27:7e:
b9:7b:21:ba:74:57:5d:96:bd:e4:99:b1:3c:27:6e:46:0a:33:
d3:ea:5a:59:bf:a9:34:c8:c6:aa:2a:af:06:f8:c2:9f:aa:04:
68:64:ec:e7:11:84:04:e7:c0:2b:6e:b1:df:32:5b:8d:ab:ea:
01:0d:21:a6:50:24:5a:ac:c6:0e:5c:81:ae:7d:19:6c:6f:36:
89:f5:eb:40:06:55:7c:e8:0a:c9:a4:7a:b6:b5:2b:a0:fe:2c:
fc:9a:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:48:51 2025 by rpki-client