Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: /KCT0bHbg2Kbs0Dy8TzYpxpj+0pAqkVo30i8ZDAc9v4=
Subject key identifier: EC:CF:EE:9E:BE:62:0B:FE:04:E6:D5:06:24:A3:1F:06:A1:EC:D3:A3
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01983E06109BCCA929EB9ECB04FEA98484EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0A3E
Signing time: Thu 24 Jul 2025 20:00:41 +0000
Manifest this update: Thu 24 Jul 2025 20:00:41 +0000
Manifest next update: Fri 25 Jul 2025 20:00:41 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: Yi-_AOBIegyZbx8uOcbaz9DwrKE.roa (hash: ER3+63xjq9p3EvqNEllUUZfmGZVR+0lO0rze97XuPy0=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: jzUyHW8b/cT4TyiL3CT8BuYLtCz5drU7zl570lpR9iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:06:10:9b:cc:a9:29:eb:9e:cb:04:fe:a9:84:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 24 20:00:41 2025 GMT
Not After : Jul 25 20:00:41 2025 GMT
Subject: CN=eccfee9ebe620bfe04e6d50624a31f06a1ecd3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:b8:1a:ee:1c:84:b7:ac:4f:29:10:de:50:
f0:c9:dc:37:2d:6c:85:fc:ca:ae:86:21:4f:c0:16:
1c:b4:f3:fa:11:5f:42:92:d6:96:e8:ee:8b:9b:56:
c4:17:48:2e:1b:14:cb:8a:ee:9e:80:f2:b7:10:4b:
ce:a0:1c:e9:3c:ce:a6:36:6e:5f:6a:6c:db:b5:a1:
70:48:b3:63:5c:32:83:e0:21:65:14:96:75:44:59:
b5:f2:12:37:3d:20:1a:3f:2d:66:cc:31:6f:c4:c5:
90:bd:cd:55:e3:10:3e:c4:e7:45:24:1a:e7:49:5f:
50:8f:37:bb:4a:50:35:8d:97:73:4b:2d:ee:6e:08:
2f:1d:0a:eb:8b:f1:4f:f5:75:0f:cd:c8:17:f1:31:
3e:34:4c:ac:71:59:c6:18:f9:f4:cc:66:3f:39:28:
bc:9c:96:31:2a:96:f1:87:c1:74:64:d4:d9:3c:56:
32:aa:8a:90:96:98:74:89:c2:93:f8:2b:fd:8f:85:
5d:29:32:f5:41:aa:e5:7f:90:1e:e9:7a:95:65:f4:
0a:a2:2c:b1:31:0a:62:d4:58:ce:6e:de:63:c9:7e:
f8:f9:d4:1c:f9:38:30:21:42:d7:65:77:06:07:7e:
4c:41:1f:0e:4e:fb:ef:2f:37:5f:26:b2:38:67:f9:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:EE:9E:BE:62:0B:FE:04:E6:D5:06:24:A3:1F:06:A1:EC:D3:A3
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:8c:79:cb:18:4f:42:fa:ef:94:e9:01:c0:f3:a0:52:dd:
e0:3c:2d:2e:3d:80:4b:e9:70:b1:15:ed:85:60:3a:b4:65:fc:
70:24:70:84:b0:ff:ff:1c:bd:a6:e1:02:0e:15:5f:cd:5b:57:
f5:25:02:5e:cf:2b:cb:c9:88:3e:3b:19:36:43:73:26:10:43:
a7:22:6b:96:2e:33:32:64:24:f5:88:e8:80:f1:8e:cb:a6:5e:
ed:5b:4e:f0:14:87:09:3a:28:18:dd:dd:ad:0e:50:8b:37:0f:
96:aa:f0:f3:09:e7:e8:9b:ec:0b:ca:f7:50:26:03:7d:53:11:
6d:3f:87:16:c3:29:ae:c8:09:d5:33:e3:d9:96:a1:32:1a:48:
69:a9:d8:02:bd:87:54:d3:71:18:e8:c6:7c:79:ce:ee:7d:d9:
06:19:fc:e8:ae:b1:55:8b:71:b5:05:e0:df:f1:0d:ad:8f:94:
a9:29:e1:f8:b0:ba:9f:01:e0:74:8b:7f:51:68:87:0f:5d:ab:
58:13:b3:6f:ce:a7:e2:7d:69:84:9b:23:5f:a7:0d:04:40:16:
53:dc:19:e1:41:5d:79:a6:f6:a8:a5:25:d9:a2:7f:6b:c4:fb:
59:97:e6:a5:dc:bf:33:61:ec:1a:7e:6e:9c:d6:82:c9:88:e4:
18:b2:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:07:02 2025 by rpki-client