Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: 4rZYQHA/poSiNSNC5VJ6FyAme7BpckOalJf8Bv82UCc=
Subject key identifier: 79:44:CF:80:B8:BD:33:E7:F1:41:7B:67:55:AF:87:DF:AF:6F:DC:D2
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019848F719CE726038E93D1FEA6E389E8111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0652
Signing time: Sat 26 Jul 2025 23:00:10 +0000
Manifest this update: Sat 26 Jul 2025 23:00:10 +0000
Manifest next update: Sun 27 Jul 2025 23:00:10 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: 9eqlK8zbdSNznbVGVJmWW3qvXty9gZzlvQQRg9YV4q4=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:19:ce:72:60:38:e9:3d:1f:ea:6e:38:9e:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jul 26 23:00:10 2025 GMT
Not After : Jul 27 23:00:10 2025 GMT
Subject: CN=7944cf80b8bd33e7f1417b6755af87dfaf6fdcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:ae:b1:ce:4d:c8:eb:a8:29:d8:fe:76:87:
ad:0d:1f:79:0b:b9:a1:39:27:b5:97:f4:a4:12:95:
46:bf:4d:dc:94:88:6b:5b:d3:9c:a9:39:c5:09:8e:
e2:92:6d:03:f7:0f:c5:4c:29:5e:f1:6d:1b:10:8b:
66:6d:a7:48:23:f7:cd:8c:9f:33:fa:c5:02:08:b4:
e9:ad:2f:ba:ce:fe:c6:7b:87:62:31:25:81:ac:d6:
56:cf:67:d9:66:42:bc:20:60:21:9f:d4:c2:83:31:
2c:5d:dc:cc:a8:38:b9:81:88:86:46:54:04:bb:5d:
a8:a6:b9:77:e4:26:09:10:66:ad:09:69:d9:fc:a9:
35:f7:26:aa:ae:01:3d:dc:21:55:59:ea:1a:00:e8:
b5:bc:33:0b:e6:c3:43:1a:48:1e:fe:89:27:1b:79:
37:54:78:8f:c6:89:76:f6:78:97:f8:59:a4:69:41:
0d:6a:d1:d5:2d:b2:25:90:f0:d3:a9:df:f4:fe:4f:
f2:3f:82:99:e7:33:00:5e:34:b9:80:3f:6f:cd:0c:
04:2b:9f:8b:6d:fb:a0:2f:31:75:61:dc:5f:11:2a:
36:84:b8:b7:b2:98:eb:7e:32:ed:2a:b3:31:3b:d0:
8d:2a:5f:0e:e5:fc:1f:ed:95:39:1d:aa:53:17:b8:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:CF:80:B8:BD:33:E7:F1:41:7B:67:55:AF:87:DF:AF:6F:DC:D2
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:4c:26:c6:46:23:68:94:ec:36:b6:84:09:f9:3c:2e:91:
b1:67:59:61:84:2c:1c:7a:2d:78:74:1a:23:44:85:67:48:ca:
0b:c6:be:50:31:6c:e4:ef:53:a4:70:e1:40:94:da:85:ca:97:
b3:b6:76:1f:69:1a:68:9d:d3:0e:29:6a:ce:47:49:bb:4f:d7:
27:eb:9e:7d:f9:d4:59:b1:10:74:b8:15:51:fc:54:a7:09:16:
27:e1:32:c1:70:39:01:06:d1:90:c8:b3:c9:28:c2:c3:f6:68:
93:d2:37:21:f7:82:9a:ae:89:69:18:59:51:98:c8:f2:a3:f5:
82:73:65:9a:7b:a9:e3:73:d8:45:c3:ff:7c:0a:d4:7e:3b:24:
86:2a:da:70:4c:37:c9:cc:54:b0:c5:5c:ac:7d:bc:e9:57:95:
24:4a:eb:9d:d1:d9:1c:1f:92:05:67:db:f5:2c:63:61:2e:66:
2e:8a:7d:f5:96:d3:9b:0e:fa:33:75:57:53:5f:17:c1:21:e9:
40:9e:58:93:d0:81:ea:3e:1f:ee:b1:0d:50:e1:e1:20:ea:6e:
30:ad:77:63:d7:9e:28:db:a8:dd:d0:c1:53:e4:b2:96:95:09:
a0:6e:13:a8:2f:8f:82:0a:de:3b:cd:0c:b4:0c:8f:18:c5:59:
36:43:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:33 2025 by rpki-client