Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: QWxZ1A/tFPOBAvBnVojurBHdJHPjcwvqRWpPxiLP4j0=
Subject key identifier: 02:A1:DB:64:6D:4C:AF:D2:C3:5E:4F:A6:DD:F0:97:73:18:96:E5:A1
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0198944903B016A96B4FA085E804BECC3117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0679
Signing time: Sun 10 Aug 2025 14:01:09 +0000
Manifest this update: Sun 10 Aug 2025 14:01:09 +0000
Manifest next update: Mon 11 Aug 2025 14:01:09 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: z9rnKXFdqx4IQVgQx0tUc2wuiq1i0SgVh3okRm4dF4w=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:49:03:b0:16:a9:6b:4f:a0:85:e8:04:be:cc:31:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Aug 10 14:01:09 2025 GMT
Not After : Aug 11 14:01:09 2025 GMT
Subject: CN=02a1db646d4cafd2c35e4fa6ddf097731896e5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:b3:42:7b:10:f3:f4:ef:33:cf:c8:99:05:
98:ba:96:7d:c4:d3:7f:b3:0b:c5:90:a0:d7:98:b3:
be:1e:68:05:a2:b9:75:4b:29:a2:4c:70:fc:d4:88:
e5:3c:ae:65:b0:60:16:e5:85:17:66:28:75:5b:83:
d7:a1:cc:66:9f:87:1e:9f:f9:4c:9a:87:6c:59:1f:
0e:ca:27:91:0b:39:48:35:48:d1:8a:50:b0:50:15:
a9:4f:75:61:6c:1a:ad:05:4b:84:f7:21:f1:fb:a6:
11:41:1a:0c:8c:9a:75:4b:f1:63:06:55:63:09:ce:
df:1a:4f:da:22:c3:b0:31:41:76:92:ec:e2:37:43:
6f:b0:e5:a9:a0:61:50:9c:53:51:b8:e4:e3:50:a9:
c0:d4:c7:06:99:31:f0:f6:ae:9a:76:12:b9:ab:31:
2a:87:85:35:08:27:f0:bb:b8:4e:86:cc:46:b6:4a:
fb:7b:49:36:22:4d:c3:e6:25:18:1c:e4:da:06:5d:
0e:fb:20:1e:57:dd:ac:9d:d0:df:5d:02:79:fa:9a:
98:28:b6:9e:35:67:fc:06:f4:71:8e:5b:f4:29:74:
55:44:a3:81:5e:c6:8f:bb:41:c5:e0:b5:62:62:54:
4f:ce:ca:d9:9e:bc:91:58:fe:17:74:09:63:00:62:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:DB:64:6D:4C:AF:D2:C3:5E:4F:A6:DD:F0:97:73:18:96:E5:A1
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:42:be:e0:4c:c3:1c:d7:05:96:a5:94:a2:b9:27:20:e1:
c2:5e:32:5b:64:04:ae:b3:52:5f:6c:c0:12:4e:48:68:07:31:
4e:ae:37:4c:44:0c:2f:85:eb:d1:18:1e:d9:b4:ac:2a:2c:d1:
8f:a8:a4:29:de:94:d6:24:58:94:3d:d4:dd:4d:38:05:e2:dc:
34:8c:bc:02:68:57:55:44:7b:88:c1:9a:8b:35:bb:33:9f:6d:
e1:b1:7b:90:a4:dc:42:95:d2:df:50:58:22:7b:d0:39:20:61:
79:f1:1f:dd:16:62:19:8d:a0:b4:8c:84:16:f8:f1:b7:6e:9e:
8c:61:1d:37:5b:11:2f:26:d7:ef:2c:85:03:ef:28:de:e0:6a:
4b:e2:7f:cc:37:49:4b:83:8c:d6:1d:21:56:ca:86:95:a3:9c:
58:3a:07:0b:83:4b:a0:e2:07:b1:21:9e:82:40:9b:0a:35:ea:
e9:e4:f2:8f:46:43:44:4f:7c:d4:e9:6b:02:4d:64:12:37:45:
c8:fb:0a:5f:f1:30:d6:d2:42:df:b3:31:4c:0c:fc:20:c2:20:
18:ea:49:9c:e1:8a:b1:57:d3:e6:d2:12:4b:62:6f:12:a5:f6:
24:8b:a4:87:9d:8f:29:5c:54:39:40:af:51:b3:19:97:20:39:
94:23:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:33 2025 by rpki-client