Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: MM8tyrdhii0NTxSXjv0iyEob845/IAUQs64poF6DG2E=
Subject key identifier: 70:B4:0F:97:6B:B2:30:01:3D:B4:A7:FD:F4:35:F7:44:FB:8D:60:1C
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019A56E4FE6747071C302C91F89BDE7337C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0A84
Signing time: Thu 06 Nov 2025 02:00:39 +0000
Manifest this update: Thu 06 Nov 2025 02:00:39 +0000
Manifest next update: Fri 07 Nov 2025 02:00:39 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: AaS2kTQHsVdRAl7YXDgt/rqHsZD/xL19t5Um3TxPqTQ=)
2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=)
3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:fe:67:47:07:1c:30:2c:91:f8:9b:de:73:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Nov 6 02:00:39 2025 GMT
Not After : Nov 7 02:00:39 2025 GMT
Subject: CN=70b40f976bb230013db4a7fdf435f744fb8d601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:e8:87:bb:f7:8e:8d:34:c3:9e:a1:9e:41:
92:93:08:01:0c:43:2e:fb:79:37:82:52:ef:dc:fd:
18:88:97:44:7a:e4:1b:3c:d2:0d:2c:83:15:73:9c:
ac:c1:ee:01:ae:71:f0:62:b6:9e:44:75:42:4b:12:
06:0e:71:04:28:7a:d0:0c:67:db:e0:a5:9e:10:5a:
68:ba:4d:fe:81:54:30:f0:08:24:d9:4b:a1:84:ef:
6b:10:72:8d:7f:d3:98:48:c6:48:c6:bd:6d:10:42:
1c:5c:f5:b0:a4:da:46:ab:55:57:84:7e:c5:17:a9:
fb:9b:f0:a6:66:7e:87:28:ad:df:8b:31:64:21:ed:
3b:c2:e1:4c:7d:d1:a9:72:45:b2:bc:43:35:7f:ff:
14:26:3f:65:fe:b6:11:94:5d:0e:de:22:d2:39:7e:
27:c6:72:8e:5e:ad:96:0d:20:bd:db:a8:75:73:41:
ef:68:ba:5a:b0:b3:e1:41:09:28:df:a9:4a:3c:50:
60:4a:83:5a:1c:3b:58:79:ea:a0:66:b5:ba:2b:d8:
9b:d7:fa:8f:42:87:66:0e:10:66:99:e5:c8:14:25:
70:d6:cc:0f:80:17:76:fa:28:7b:ae:f7:8c:a0:c1:
4e:77:1d:95:ee:df:fd:95:02:96:ee:75:a1:28:56:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:0F:97:6B:B2:30:01:3D:B4:A7:FD:F4:35:F7:44:FB:8D:60:1C
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:54:cc:2b:91:c0:29:a4:87:a2:d1:d7:ca:30:05:02:b4:
97:eb:a4:ee:58:57:ce:ff:fc:a9:74:ad:f9:bd:e0:25:1f:f2:
5d:ed:5b:2c:b5:99:c1:49:fc:50:62:a2:1c:d6:37:86:bb:a0:
73:fe:e1:e7:aa:d7:9b:59:de:80:88:5e:59:c3:25:79:13:77:
e1:9c:91:33:42:79:bc:77:a4:09:65:7d:e8:ef:7f:05:90:b9:
f4:08:fb:99:aa:8b:87:91:99:b3:a7:c5:40:5b:1a:39:11:d0:
80:fa:9b:01:75:e1:6a:26:4e:9d:22:33:fd:1b:12:ee:09:a3:
5b:f1:86:4f:83:db:5e:22:fb:7f:f4:77:3f:ee:25:88:39:84:
d8:f4:2e:53:b3:9d:52:99:db:b9:cf:0e:1e:55:1b:da:55:10:
ba:58:99:1a:00:d0:ea:2c:21:b1:d6:5c:5d:9f:c8:75:94:98:
03:55:a5:dd:6f:b3:5f:d5:19:7a:b0:91:1e:67:66:d3:16:c5:
6d:c8:82:9f:2f:2b:22:ca:61:33:f8:00:98:70:9c:66:bc:9c:
74:c6:4f:2e:ac:80:27:d5:7d:66:8f:de:f4:c6:b9:98:7e:a7:
dd:c3:45:2a:cd:26:e8:33:63:4b:d0:c6:0b:72:57:24:f6:36:
33:75:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:40:11 2025 by rpki-client