Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: bywMlxv5snvJl28Re5wMh4kTIPcve+mc4wF0k/CYiFU=
Subject key identifier: 79:65:97:41:BC:8D:F7:B9:B1:C5:BF:7F:05:2B:4D:77:35:BC:4E:41
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019A71EE7D884DB2543BFFB18353E10B280E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0B64
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: hvH1lUFj1VAFusb_pQJRTraQJ4U.roa (hash: AJ2AV5CVSEoSqNl0zVVSMcCjH1TLixfyv1cSlmQnkz0=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: vWJ8pu9RvEUwnBcIf9CI5Sq+vK4F6vfMf9EFduM8+HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7d:88:4d:b2:54:3b:ff:b1:83:53:e1:0b:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=79659741bc8df7b9b1c5bf7f052b4d7735bc4e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:d5:58:57:1d:76:07:20:08:de:7d:45:54:
a4:52:99:72:56:a0:62:52:45:b8:2f:81:dd:a3:0a:
ae:f1:de:69:00:1c:04:00:01:01:25:42:47:5c:be:
b3:19:b8:a8:ce:72:f6:6c:74:9f:da:f8:98:4e:e0:
f9:d5:02:96:2d:ef:6b:52:4c:7e:6e:82:26:13:fd:
5c:da:d7:4c:b2:6f:85:b8:06:7f:60:cd:7f:e4:b2:
0f:ce:0e:c0:eb:a6:98:a5:32:95:3d:67:8a:2d:79:
90:38:08:88:e8:3e:f2:40:7e:cb:f8:13:c4:ce:dc:
42:47:16:ba:41:ae:71:3e:9a:a9:ab:9e:46:9b:1a:
47:bf:62:23:9e:b2:e0:89:26:07:70:39:88:15:7b:
e3:58:0d:c3:4f:27:22:5a:8c:a1:d8:de:48:cd:89:
e6:c2:dd:fc:ce:96:09:87:ed:07:32:37:07:3e:ab:
81:a4:fa:e1:d2:88:04:40:0e:b6:ab:2e:57:3c:bd:
93:66:6c:16:56:c7:99:a4:3c:3c:03:05:72:57:55:
a5:37:60:26:4a:f7:d8:9f:aa:b5:5d:58:ea:99:0c:
77:5c:e8:5f:8f:71:4f:fd:7f:24:d3:bc:92:25:f1:
73:67:02:26:a8:59:cc:6e:54:64:64:30:12:fe:d8:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:97:41:BC:8D:F7:B9:B1:C5:BF:7F:05:2B:4D:77:35:BC:4E:41
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3b:2f:6b:c7:1f:11:9a:af:f1:aa:f4:74:0a:15:68:8a:ca:
3b:f5:7f:03:f6:41:56:e6:fd:ee:80:b1:0a:75:c8:68:45:0a:
be:15:a9:9f:b8:fa:51:5b:bd:89:54:1c:ed:69:4e:01:27:45:
e5:ea:d6:06:cd:92:30:f9:cc:8a:fc:e8:31:91:0a:08:bb:0b:
e4:be:31:56:91:5f:49:83:93:60:52:d2:6f:fc:24:25:87:96:
72:68:c4:61:97:59:7c:51:4e:bd:7f:ed:41:48:a2:88:ed:96:
82:d5:f1:3e:ff:8d:10:65:99:9d:3d:91:4a:7d:55:c1:34:e4:
63:89:17:05:98:2f:01:4f:08:b8:3b:40:be:e4:4b:1e:5c:32:
80:b3:e5:0d:6a:ef:ed:a6:60:0b:ac:1c:00:e7:e8:b7:b7:5f:
18:4e:8b:77:d2:32:bd:db:69:78:4b:ba:2e:37:59:80:39:c3:
b7:83:ff:14:44:74:50:bb:a9:d7:15:41:05:63:19:97:a0:99:
af:63:54:77:cc:d1:3b:3d:9b:28:09:4e:b3:8a:32:53:44:4c:
5a:57:01:b3:9a:be:49:94:30:06:fe:d0:3b:3f:d2:ab:c4:d7:
ca:33:6d:22:58:b7:bf:bf:d4:04:53:72:9c:a0:9c:99:40:ec:
8e:50:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client