Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: fMPHTO0zlERA6Cv+Vumm9oxycpupSrjUVBywKhJ2haY=
Subject key identifier: E4:5C:A2:C8:82:B2:1D:3D:EE:31:38:B5:40:F6:05:64:0A:79:A4:F8
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019A5074F0E9290467B5DEA372858C032874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 075F
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: cDIPbZdWUH0AL5xT2rVUzwJ9J30l2x2UxRlieYxtcz4=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f0:e9:29:04:67:b5:de:a3:72:85:8c:03:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=e45ca2c882b21d3dee3138b540f605640a79a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:54:8a:78:11:dd:c7:41:b1:fd:b7:1a:ee:
51:8b:f3:cc:58:7e:ca:41:da:32:dd:ec:4c:d7:e0:
1f:c0:8b:90:dd:36:17:2c:97:04:4c:9e:38:06:7c:
5e:c4:31:2d:e7:f8:14:55:12:78:82:e3:d3:d6:0e:
72:e9:2a:d7:bb:b4:ac:06:ee:da:95:91:5f:ef:dd:
81:3b:8f:a9:27:a5:93:ea:fd:21:21:95:79:25:df:
ab:c0:57:f8:48:b2:cc:36:0d:22:d2:d3:ec:e8:91:
f3:09:6e:21:7f:13:09:34:9c:6d:07:1f:df:00:6b:
8c:8d:5a:27:cd:7b:3c:b5:43:bd:2e:24:c6:2b:3f:
37:8d:da:21:b4:96:a2:1e:f9:8f:6c:17:b6:df:81:
7d:cd:85:1f:d8:4f:5c:38:21:67:3c:8e:a6:b4:b6:
10:f1:f7:4b:45:07:9a:f5:01:44:0d:35:28:47:22:
b5:10:cf:fd:06:28:3e:6c:56:61:48:2a:b3:4c:b5:
aa:a7:a7:03:44:21:74:1e:b8:a1:f7:3f:01:a9:fc:
bd:6f:55:6f:c2:c3:b4:99:d3:0f:29:ad:be:ee:7d:
a3:96:75:c2:a4:2a:81:a8:a3:b1:f5:02:5f:b7:4d:
5a:b2:3e:91:ab:36:90:eb:bd:57:a7:20:0e:9d:52:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:A2:C8:82:B2:1D:3D:EE:31:38:B5:40:F6:05:64:0A:79:A4:F8
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:57:a6:51:24:c9:bf:dd:64:5a:8a:7a:27:6b:c8:2b:58:
4e:3f:28:77:a3:7e:69:31:ff:fa:9e:49:e3:7b:39:7e:b6:7e:
de:25:69:fe:97:5d:01:af:b5:eb:fa:55:9a:06:8f:44:41:19:
14:f3:d5:0a:e7:c6:76:5d:3b:da:e7:91:a2:2b:8c:ff:7b:75:
92:12:aa:2d:27:f4:46:e5:24:c0:4c:4b:47:11:8c:1c:b9:60:
8a:dc:ac:47:65:91:f8:9c:f0:6e:30:33:67:01:60:bc:95:0f:
0f:48:d7:d2:cc:43:5d:71:21:93:e2:23:40:c2:fe:91:3f:5a:
4d:6e:97:5e:13:f7:ed:4d:6d:2b:79:48:07:fe:ee:73:bc:a2:
84:f5:e6:0f:b4:00:10:6b:9e:98:f9:b3:97:7c:3f:58:c3:29:
d7:cc:56:cd:c6:fb:e8:b0:15:98:f5:d9:41:b8:7d:63:53:d6:
48:5c:6b:0d:d1:a3:ee:d4:89:7e:50:15:de:cd:13:b8:24:f7:
fb:02:fb:c9:ca:67:d4:76:b2:59:76:1f:f8:38:2b:9b:3a:2d:
1c:da:22:ac:14:3f:ad:33:43:06:4e:4b:a9:41:03:8b:c4:a5:
1c:48:ef:1a:db:43:48:d0:18:06:c0:86:bd:3f:f6:19:4f:85:
1d:a6:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:16 2025 by rpki-client