Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: u2wX6VkOIWI63/OpkdLPPgtjwokmHHxeGk4i9tsPddg=
Subject key identifier: 86:C1:81:5D:9A:D0:FF:67:17:09:21:A9:40:EE:69:F0:D2:F8:2C:5C
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 01988F5A16DB2BDD9F45D906394E61EC3E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0A11
Signing time: Sat 09 Aug 2025 15:01:42 +0000
Manifest this update: Sat 09 Aug 2025 15:01:42 +0000
Manifest next update: Sun 10 Aug 2025 15:01:42 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: iD56wxEGmzoCaKgoJiOD9oeyN8JeHZo1+NAqcBXRK/M=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:5a:16:db:2b:dd:9f:45:d9:06:39:4e:61:ec:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Aug 9 15:01:42 2025 GMT
Not After : Aug 10 15:01:42 2025 GMT
Subject: CN=86c1815d9ad0ff67170921a940ee69f0d2f82c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:53:9d:a9:9c:89:20:f8:33:6d:32:5a:ea:
51:ba:3e:20:70:02:37:c6:c4:37:8a:27:30:df:16:
a2:1d:ef:7a:95:0d:85:16:3b:65:3b:80:20:e9:61:
d4:78:e0:4e:0e:38:2b:36:46:f8:d2:ca:62:3c:3a:
23:51:16:73:93:ea:89:ca:93:26:65:42:c3:f9:d6:
d0:3f:ad:c5:89:02:7d:15:86:82:9a:5f:a2:bd:e4:
92:3f:86:ad:97:06:6c:38:53:5e:09:fe:f0:04:22:
3b:6a:a2:ce:e3:e4:87:73:8f:f3:9f:24:32:e5:17:
0e:2c:f3:87:b8:3b:5e:64:ef:bd:33:2a:38:a4:3f:
22:df:f0:dd:e4:2a:39:90:81:b4:3c:47:11:7f:5b:
26:4b:55:e6:f7:b4:6e:5c:6c:c1:57:91:d8:50:4f:
c8:8f:17:d7:2d:ea:10:7e:1d:dc:45:f2:bd:6e:53:
9f:68:bc:1d:63:42:86:4f:cb:56:79:cb:36:82:57:
98:30:b0:fa:07:27:44:b4:f5:18:5a:cb:50:a7:73:
e8:a9:a3:71:e2:2b:38:f0:ce:b9:aa:ff:b1:2e:65:
f4:ce:41:8a:f2:a7:c1:c9:72:c7:69:90:68:c7:b2:
05:a7:68:0f:85:4b:6b:15:05:16:ee:af:2a:52:9b:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:81:5D:9A:D0:FF:67:17:09:21:A9:40:EE:69:F0:D2:F8:2C:5C
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:10:aa:b7:fb:68:31:51:97:d4:70:22:d7:bb:4e:20:9a:
f1:7c:09:8f:2c:bd:e9:81:82:69:56:ec:5f:f1:eb:b7:97:42:
08:2c:c7:b7:cf:30:d5:22:c9:ce:6e:9c:9b:d3:75:7a:5f:9f:
12:3a:29:80:31:c9:a4:94:2c:3b:bc:bc:93:4f:d4:b1:c8:e6:
36:3f:5d:9f:ad:59:34:e1:6d:3f:04:c7:fb:5f:6f:be:f8:90:
92:aa:2d:23:65:4b:76:7b:1a:0b:ef:fb:84:f0:f1:98:01:49:
25:97:d5:c6:e1:2f:9c:57:3c:e9:23:a4:c1:c5:3c:75:d8:50:
8c:fd:b2:74:59:a5:ec:66:36:48:bb:66:24:11:96:2b:a3:1a:
58:ec:31:84:bc:ed:aa:40:90:5b:ac:0a:a2:6f:06:93:56:7b:
e1:9f:d8:e4:dd:c3:64:e7:69:0b:18:ff:d9:31:ba:ee:5c:14:
c2:7d:75:de:12:de:c1:b3:bb:7b:0a:bc:bf:6a:05:fa:b7:02:
56:fa:3c:c0:d8:3a:c9:b1:78:ca:1c:a4:dc:17:98:c8:a9:88:
58:ac:fd:b1:40:03:57:0a:8f:f7:ec:d9:1e:ea:22:b9:5f:84:
a4:4a:fa:45:2d:5a:62:3a:c1:00:ce:d6:e7:3e:40:d2:bc:8e:
8b:f0:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:18 2025 by rpki-client