Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: q74g74WKyfOpPuIVtGJOd2isjD65Xr4+wq2oOS8Z9n4=
Subject key identifier: 77:93:73:CA:1F:5E:4E:85:5D:4B:1D:BA:74:92:C3:64:98:FC:85:33
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0197488C4E47B9131E25E7188AFA175BF90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 09BC
Signing time: Sat 07 Jun 2025 04:00:44 +0000
Manifest this update: Sat 07 Jun 2025 04:00:44 +0000
Manifest next update: Sun 08 Jun 2025 04:00:44 +0000
Files and hashes: 1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: kB1FVmV27lEog2kHIzAhyUeW7PPas4CCU8KY+Rqq64g=)
4: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (hash: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4e:47:b9:13:1e:25:e7:18:8a:fa:17:5b:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 7 04:00:44 2025 GMT
Not After : Jun 8 04:00:44 2025 GMT
Subject: CN=779373ca1f5e4e855d4b1dba7492c36498fc8533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:f2:a8:59:ee:df:56:79:c8:8e:37:46:88:
39:c7:b5:db:c4:ed:59:a5:de:21:25:28:9d:c2:49:
2f:94:9a:fa:2d:2b:dd:7d:00:ad:c6:05:ca:67:87:
46:1b:3c:ee:2b:87:8a:99:52:fa:8e:a4:30:f7:a4:
59:1e:d2:c4:88:ab:49:dc:2a:13:6c:b5:5f:8b:cb:
d5:62:b8:ff:3e:e8:03:f0:df:5b:f7:08:7b:28:48:
b5:26:8d:aa:cb:d6:14:25:ab:64:d8:62:c9:76:55:
dd:e9:18:f3:71:23:48:58:65:94:de:b5:57:c6:59:
21:6b:75:75:0f:f4:e3:23:df:e1:50:12:d6:cf:86:
9d:91:4e:92:8a:7d:31:40:52:ac:d3:7b:8d:59:04:
e2:d6:61:dd:9a:2a:cc:bc:66:7c:7b:13:d6:45:7e:
fd:36:d6:79:57:d1:d3:96:03:88:65:0a:8c:38:c6:
e0:18:a2:eb:0f:2b:41:c2:ab:18:ca:4a:d3:88:cb:
69:36:dd:91:a6:49:b3:ee:b6:9f:fb:da:f2:08:8b:
4a:a3:8a:50:41:00:31:31:7c:7d:5d:e6:49:34:56:
c4:a5:f3:71:1f:3e:45:72:81:7e:7e:b3:02:f6:ec:
58:9c:04:4f:b0:60:48:78:6e:3e:c5:d3:ec:66:68:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:73:CA:1F:5E:4E:85:5D:4B:1D:BA:74:92:C3:64:98:FC:85:33
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e4:24:fb:f6:a7:5e:1c:b4:d3:0e:24:d4:1c:2c:f1:23:f0:
6e:5e:90:f7:68:d0:fb:55:2b:ca:94:d5:37:46:22:cf:1e:33:
23:ab:f0:b0:a0:09:d2:92:95:9e:e1:32:d0:32:a3:bc:1f:32:
45:19:71:0d:89:f3:f5:57:ee:9f:da:e5:12:7e:ca:a7:89:7e:
1c:1a:3a:21:1a:1b:d7:ae:4a:a9:90:df:e1:1a:92:fe:85:90:
56:b5:e6:43:a7:21:26:ee:84:97:1b:c4:96:b5:7e:c9:1d:38:
58:52:c8:a1:e8:51:0e:a4:27:46:d8:99:96:98:f3:14:c8:7d:
8d:9a:48:82:11:de:a7:b2:12:9d:a0:4d:1d:ec:c8:f8:3a:27:
12:c8:9a:03:42:8f:66:a2:b2:b8:83:1e:ee:aa:ad:c9:10:5a:
b2:a5:f4:61:ce:53:b0:83:d5:5e:59:4a:5f:a9:90:02:ae:8b:
ee:c3:a9:fd:5b:00:17:fd:4e:64:06:6b:4c:0b:0b:65:7a:aa:
cb:e2:44:58:7a:f6:4c:2c:80:e8:7c:09:ee:e5:f3:6e:55:09:
f3:ed:e1:b1:28:9c:6b:ee:e0:be:3e:b8:21:f6:f7:bf:39:4f:
73:91:96:bf:15:de:cd:e3:73:c3:81:cc:cb:d5:f5:19:ab:00:
fd:b3:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:57 2025 by rpki-client