Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: mJiyK2CmiJ8CS/v7VBKGLCac0JojmTfFBdt+mGwtC44=
Subject key identifier: DA:C5:6F:8C:87:ED:B3:AD:F6:B5:8E:7C:BE:74:E9:B4:6E:74:69:84
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019A202D58F676521CF533733FFDFE145E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0746
Signing time: Sun 26 Oct 2025 11:00:34 +0000
Manifest this update: Sun 26 Oct 2025 11:00:34 +0000
Manifest next update: Mon 27 Oct 2025 11:00:34 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: VILhnpoh3QjQNT3MYwDUQCAHXzcU0uSQ+54QiHPwrbw=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:58:f6:76:52:1c:f5:33:73:3f:fd:fe:14:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Oct 26 11:00:34 2025 GMT
Not After : Oct 27 11:00:34 2025 GMT
Subject: CN=dac56f8c87edb3adf6b58e7cbe74e9b46e746984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:3e:4d:ee:9e:0f:f6:0d:b7:5c:6a:28:0a:
7d:8a:2e:ad:c6:4e:1a:3c:58:df:9d:12:7d:37:e1:
58:4d:a3:46:a0:e8:8c:3e:bc:fe:34:73:36:aa:52:
4b:4d:85:97:58:2f:94:e1:8e:60:50:4b:3c:fb:7e:
4a:ba:76:34:70:67:d9:3e:62:74:82:6b:45:e0:d9:
56:03:06:bb:d0:3c:2d:3d:0c:fa:b7:fd:19:80:1f:
0b:96:01:f8:71:5c:35:1d:44:57:81:c7:90:13:15:
d2:60:3c:17:91:08:90:c2:0c:f0:2f:c3:0a:22:45:
b1:65:19:86:13:8c:54:ee:8c:61:4d:8e:a5:b2:96:
31:fc:17:67:37:6b:c4:a4:3c:84:75:10:bc:1c:97:
c7:03:c2:12:2f:ad:57:89:df:d2:62:72:09:73:aa:
23:9b:33:b8:59:2a:83:22:6c:83:0a:4d:d5:76:d4:
96:86:81:50:95:e0:01:7d:6c:56:36:63:36:bd:2a:
4c:50:3d:a9:0d:42:34:d9:1a:b6:9b:5e:ff:71:c5:
f2:cc:41:f8:9f:48:e8:80:31:ae:72:28:9f:f4:f2:
86:eb:e1:0e:46:57:1f:b2:f2:12:40:93:46:d4:df:
06:5d:29:cf:ea:01:aa:92:68:ae:e4:a6:51:c8:ca:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:6F:8C:87:ED:B3:AD:F6:B5:8E:7C:BE:74:E9:B4:6E:74:69:84
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:45:77:97:00:36:9a:86:31:93:30:af:e0:bc:4b:29:b9:
3f:c2:5d:f9:2b:31:a6:3f:21:7d:0f:24:d3:26:b5:4c:c2:eb:
7c:e7:a1:06:66:14:18:c5:b7:56:95:7e:a2:f5:62:33:61:69:
b9:22:1b:90:67:c6:81:86:7e:e7:25:fb:1b:b9:08:f5:98:37:
37:30:cb:a9:7e:0c:ff:e0:00:e6:8f:bd:a2:b7:fa:9a:7d:55:
83:3b:59:b8:1a:5d:bc:43:c5:0b:1f:90:be:81:1b:e7:b8:ab:
79:c2:33:8b:03:10:13:57:46:5f:a7:16:a6:67:0a:36:9e:7e:
96:b3:a3:88:58:ae:c5:47:a8:4b:4e:6e:47:c4:71:6d:bc:7b:
75:b6:c3:91:3a:29:1d:b3:32:03:19:8e:12:5b:a8:17:4e:c4:
bc:87:69:b0:e1:74:ed:b5:4e:8e:53:4e:bb:48:2d:7f:de:a3:
7b:e5:86:69:5a:38:ab:0d:d0:c0:57:07:0c:96:f0:b3:73:a1:
b1:e4:a0:ef:95:09:b7:d9:a9:26:2d:f0:f7:0a:d3:2d:f3:9a:
ef:20:8d:44:b3:f8:fd:9b:02:dd:c9:d5:b6:76:29:09:66:ac:
6f:29:b4:b5:a5:fe:76:80:e0:c4:a5:e2:11:cf:ea:be:b5:c8:
b3:76:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:05:45 2025 by rpki-client