Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: MZifmBj42YAiY5N6Vi9yTQsojMAAG+ZoZAttjc4jWd0=
Subject key identifier: 03:69:2C:79:61:33:50:E1:27:7F:E7:07:04:CE:F9:A1:B5:77:8F:E9
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0199387058F868B5DD00400B59DE4E1C7EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 06CE
Signing time: Thu 11 Sep 2025 11:01:50 +0000
Manifest this update: Thu 11 Sep 2025 11:01:50 +0000
Manifest next update: Fri 12 Sep 2025 11:01:50 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: VoGwks24H7UUoii32JxbprFTF4mYbolQ8NejComjpZo=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:58:f8:68:b5:dd:00:40:0b:59:de:4e:1c:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Sep 11 11:01:50 2025 GMT
Not After : Sep 12 11:01:50 2025 GMT
Subject: CN=03692c79613350e1277fe70704cef9a1b5778fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:6b:4e:a1:22:de:59:eb:3b:83:3b:76:e1:
7e:25:14:b5:77:98:a8:3d:2d:e5:07:92:01:30:fc:
84:2d:94:96:8f:4b:ba:24:94:29:85:7f:26:ab:2f:
9e:2e:64:25:bf:59:e7:1a:e3:89:50:fc:54:d9:d1:
de:ff:2d:33:ba:dc:b9:38:7f:a7:3d:97:53:d4:f5:
32:76:e7:44:29:f8:e9:3a:8d:67:20:a2:57:2a:c7:
98:05:29:35:c4:c0:f8:38:dc:b6:6b:cb:dc:69:21:
73:b7:32:d9:f1:91:7a:25:cc:34:53:96:a2:d5:9d:
2c:e2:22:e4:eb:7b:55:1b:d6:3c:91:d2:2e:a8:ef:
f9:8d:3f:4c:f2:73:5c:48:4e:6d:37:11:61:b3:6e:
b8:08:ae:3d:55:90:94:30:b3:14:3e:b5:88:db:68:
e6:4a:8c:ab:43:33:41:55:cc:d9:27:52:d7:35:d2:
f6:26:16:48:cb:28:1a:29:6f:12:ed:22:ae:fe:3d:
1b:c8:81:da:27:f3:10:32:60:69:fb:a4:98:3c:8c:
5d:ac:f3:83:a9:db:40:75:01:2d:c8:44:01:eb:b9:
e3:33:28:cf:c4:19:c2:0d:ef:c4:d5:06:5c:66:d7:
03:ad:68:c2:fa:77:be:56:2f:c1:f8:4c:18:c2:e8:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:2C:79:61:33:50:E1:27:7F:E7:07:04:CE:F9:A1:B5:77:8F:E9
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ae:50:a0:e1:ce:04:d1:55:ab:91:42:4a:8e:45:54:4d:34:
23:88:48:a6:87:b7:40:7b:ed:8f:96:3d:96:74:3d:7b:9d:7d:
b0:b3:98:10:9b:0c:3c:9f:13:9e:08:66:03:a0:13:28:d4:9c:
f0:ba:01:b2:6e:56:91:41:e5:82:24:fb:38:3d:ac:a8:87:0e:
31:f1:b0:3d:db:df:3a:67:4c:fc:84:b7:46:6e:58:ad:d2:5d:
2d:4e:26:54:42:ae:22:a9:58:08:42:00:26:39:63:f4:94:02:
24:5a:e9:87:95:21:8f:bd:bd:e3:94:55:03:a5:e0:83:59:c0:
12:fe:93:d0:0c:46:b7:48:8b:d8:8f:1d:e2:d4:d8:b0:e6:13:
02:e8:5b:ab:d0:b4:8e:de:e9:43:a6:95:1f:fb:ab:9d:8a:c2:
54:e6:39:7b:9d:d8:b3:ad:ec:de:a9:31:b6:7f:52:70:95:9f:
96:4e:63:12:5b:f2:7f:a7:a5:8f:9a:73:14:cf:b1:10:f3:bc:
cd:a9:88:76:c4:b9:a9:d1:91:bc:e2:36:53:2b:e1:55:a3:97:
ae:e9:dd:ad:30:44:b0:68:69:1b:10:a2:4f:5f:a9:d3:05:46:
6e:71:0e:27:ac:da:1b:3e:42:58:ce:c2:6c:a2:20:21:ce:66:
b3:f6:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:01:16 2025 by rpki-client