Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: X8rbAOoLPYnNazJJxXEfoYCuyROqNP/yNzyweah5/iU=
Subject key identifier: 58:5B:80:D6:10:B6:F1:6B:CA:23:11:97:F5:86:E5:AC:07:C6:68:F1
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01983A28EC83CBC3F96F18E0F7A22FB8BAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0A3C
Signing time: Thu 24 Jul 2025 02:00:17 +0000
Manifest this update: Thu 24 Jul 2025 02:00:17 +0000
Manifest next update: Fri 25 Jul 2025 02:00:17 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: Yi-_AOBIegyZbx8uOcbaz9DwrKE.roa (hash: ER3+63xjq9p3EvqNEllUUZfmGZVR+0lO0rze97XuPy0=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: 30U+imSGr/eE5yePn+oNoXmewuxCsunP2I+WoeN5TJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:28:ec:83:cb:c3:f9:6f:18:e0:f7:a2:2f:b8:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 24 02:00:17 2025 GMT
Not After : Jul 25 02:00:17 2025 GMT
Subject: CN=585b80d610b6f16bca231197f586e5ac07c668f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:e4:fc:26:4c:bc:b9:de:ba:6f:c5:c5:7d:
13:4e:2c:b7:bb:e4:76:63:51:f7:bf:b8:c5:82:ca:
70:d7:b8:08:30:a2:f7:f2:23:34:d6:db:b6:3a:ad:
e2:2a:dc:c5:28:97:01:87:ef:73:ea:db:7f:1c:ca:
06:86:ee:59:ba:f8:4d:38:8b:53:9e:23:44:d7:5a:
7b:8d:63:14:82:d0:52:1d:a0:0c:a2:81:0d:ae:80:
7a:16:16:00:ae:61:4f:0f:d3:2c:44:5a:7f:84:a4:
57:fe:0e:71:3e:c1:a4:bf:35:32:6b:29:03:36:4d:
5d:91:1e:fa:78:16:8d:99:3d:55:93:df:cf:09:7c:
7b:06:f2:ad:2c:e6:0e:86:9f:36:51:fa:18:12:7f:
9f:dd:39:ab:c9:e7:d7:b5:5f:b8:f3:11:78:69:0f:
51:00:21:41:94:c2:da:c2:7f:22:bd:17:0b:60:c4:
44:72:53:03:26:09:41:6f:b2:9b:84:a6:39:b6:61:
9c:29:1b:28:40:2b:0c:c0:5d:bf:65:11:93:9e:ab:
d8:07:d2:44:7a:cc:83:ee:c5:b4:c4:a3:2c:da:47:
ed:83:de:b2:bb:91:6b:cf:1a:6d:d7:6a:21:94:05:
9b:8f:b1:90:48:8c:07:56:1f:62:7d:3a:fc:3f:0d:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:80:D6:10:B6:F1:6B:CA:23:11:97:F5:86:E5:AC:07:C6:68:F1
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:28:cd:62:7c:74:4c:81:61:09:f0:ba:06:b2:8c:c1:e8:
47:5e:5d:d0:5d:97:83:02:26:1a:98:fa:ab:a5:8d:cd:07:17:
00:1a:a8:12:dd:20:9f:8f:db:c6:47:fb:d0:e5:98:05:9b:94:
cc:50:ed:57:f4:ac:f8:ff:a6:c7:ea:18:39:e2:df:b2:e3:f7:
e0:b2:f8:62:7d:85:2b:83:0f:ee:3d:32:02:d8:15:33:ee:8f:
6b:ce:49:ff:fb:ec:23:8c:72:f9:d8:5f:07:60:f8:88:16:8a:
6b:a0:27:0a:15:48:16:8a:d9:61:e3:8c:0e:84:cb:f0:e3:af:
36:fe:b5:ab:04:53:d0:b6:bf:e9:23:d7:4d:9f:c1:b8:cb:45:
cd:aa:c8:7d:28:42:71:96:62:87:d9:4f:70:df:52:26:c1:48:
b7:fb:16:1b:7b:62:49:8a:69:ef:33:c7:3f:d7:62:78:94:c1:
f0:62:80:6e:77:99:ae:8d:f8:54:f5:3f:ff:03:db:f7:9f:1f:
87:e4:56:c3:3b:e0:d4:0c:ee:e6:02:61:54:a8:11:11:7f:79:
9b:1e:44:26:58:64:04:a6:97:1f:17:08:72:06:9d:bd:e3:6c:
6f:59:cf:3e:b5:26:42:dd:ca:29:8b:64:4c:a1:11:98:70:7d:
ac:1e:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:49:08 2025 by rpki-client