Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: Gbc8WdWGnGUTRUXkhs1tE4ogiSThFlQx9zogSd6RDEM=
Subject key identifier: 7A:32:90:C1:74:89:C8:21:E8:76:1F:40:BE:0C:B9:2A:98:39:AA:ED
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01992820F9C512DC708CAE2CA60D7B81C09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0AB8
Signing time: Mon 08 Sep 2025 07:01:13 +0000
Manifest this update: Mon 08 Sep 2025 07:01:13 +0000
Manifest next update: Tue 09 Sep 2025 07:01:13 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
3: jayiXLa-DaCZpHlot-idHVHLJyA.roa (hash: jo6g1mCIBaDKWxl2NtqHQbh3jgZ64Bb6orX/coHjYCw=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: nnBsr9iyJw90wNooeB+U97yb6OqOx8AT3QwrP1uLwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:f9:c5:12:dc:70:8c:ae:2c:a6:0d:7b:81:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Sep 8 07:01:13 2025 GMT
Not After : Sep 9 07:01:13 2025 GMT
Subject: CN=7a3290c17489c821e8761f40be0cb92a9839aaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:e9:0b:b6:a2:66:98:e3:ef:2a:fb:05:2b:
25:d5:02:51:4a:10:ee:31:33:19:82:d8:d9:12:74:
ee:d8:05:df:bc:bb:b0:b5:e3:c9:a0:32:d2:a8:2b:
94:fc:09:66:3c:4d:03:a0:e0:bb:56:89:f4:3b:7c:
83:ea:1a:36:8f:34:16:82:8b:eb:31:03:6b:3d:89:
5d:e8:6f:37:af:0e:c3:05:63:4e:b0:f7:ea:fa:70:
83:fc:02:71:c0:08:f5:72:02:e9:29:ca:fe:3d:5c:
6b:04:eb:96:f9:55:13:65:36:c9:5f:f5:93:a6:12:
e6:4f:43:b0:9a:cc:d1:87:a7:ab:eb:23:02:a2:27:
a0:8a:ab:d1:81:20:82:de:f1:68:9e:8f:e8:70:f8:
72:e3:a5:3a:0f:72:6e:e8:25:69:ec:78:97:1b:a7:
b6:18:dd:c3:e0:89:ee:3e:53:10:15:88:96:e7:cd:
59:0b:4d:3d:c1:aa:90:77:2c:82:78:7c:ac:50:9a:
ff:4c:b7:fd:ed:cc:54:3f:39:04:fd:00:ac:59:ae:
fc:15:7a:91:31:8e:b5:1c:ff:5d:e8:ed:97:82:ee:
a7:19:4d:73:33:ed:a6:86:d7:b6:d7:9b:ab:32:fd:
57:92:5a:71:52:57:fe:88:23:77:97:92:2f:5c:4d:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:90:C1:74:89:C8:21:E8:76:1F:40:BE:0C:B9:2A:98:39:AA:ED
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:9f:b1:4a:98:43:42:db:2a:e6:66:83:06:11:e1:6d:8e:
67:97:af:8a:d8:c0:fd:63:46:f0:44:57:17:a3:cd:2a:38:a6:
89:d7:5b:8d:7e:c5:3a:3a:a7:66:3d:45:b9:19:0d:d1:43:99:
08:ab:fd:5f:5a:0f:e9:b7:8a:7a:9f:45:3a:fd:ec:ad:3c:2b:
cd:50:cd:c6:14:ba:b7:e4:d0:66:ca:f1:80:3a:5f:74:16:50:
cd:51:2d:e4:3a:81:8c:eb:cc:96:d1:97:ae:a6:a0:3a:6c:1c:
14:a7:70:78:29:fc:04:ed:28:e5:fb:4f:0d:96:e7:f0:30:eb:
91:7b:0b:28:7f:67:5b:37:10:33:64:d5:a0:1e:06:82:79:a7:
74:97:d6:79:d5:fd:16:ab:0e:39:69:af:65:54:03:1a:28:8c:
96:df:d2:97:a0:2f:10:b4:f2:22:1f:c8:d1:42:2a:09:9f:af:
f8:90:36:e4:07:0b:d3:34:50:ec:10:e0:c6:a5:99:05:de:01:
01:e3:e8:a1:3e:eb:7b:b8:88:be:f6:8a:f0:ec:8b:94:c5:ee:
72:c9:28:18:05:df:58:76:5f:e7:97:cf:0d:b8:49:d3:12:f7:
72:5a:65:33:98:c7:ff:77:7d:c9:33:94:36:65:94:21:b3:7d:
50:d9:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:38:53 2025 by rpki-client