Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: RQLD6CsN4TAsWK5CLFoBah72EDW9j7eCsZgO6OiYLoM=
Subject key identifier: D1:C2:0C:9D:C8:DA:BD:56:FC:5C:00:85:1C:B8:34:E6:10:6A:36:93
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0199221E3867B5EEEDF12EDE9801289D8420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0A5D
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: Sn0DCx8+bnjkY00lYrGXds6OlRk7xw0dk6tiytlyfRE=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:38:67:b5:ee:ed:f1:2e:de:98:01:28:9d:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=d1c20c9dc8dabd56fc5c00851cb834e6106a3693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:b2:a0:f2:4a:7b:f5:db:a6:e0:ea:3f:0f:
4a:06:48:3f:0f:5d:ac:46:3a:5c:65:a7:74:db:52:
ab:fd:12:6b:57:91:6a:f1:e4:c8:7f:b7:ca:20:cc:
d1:d7:80:a7:68:71:7f:96:dd:d9:5e:a9:82:1f:18:
81:74:bf:5f:ae:d4:42:3b:3f:e1:37:56:a2:11:59:
3b:9e:2b:e9:de:16:4e:ad:30:54:3a:db:96:af:1b:
08:63:a5:8a:ae:8a:f4:41:1f:97:98:5e:33:55:3c:
5d:13:ee:c1:ee:87:82:b6:41:58:ad:b5:9e:f9:1e:
7a:cb:f2:a6:bf:bb:58:2e:c4:e8:f7:e0:de:ab:db:
5f:03:49:5d:fe:68:5b:93:6e:0c:4b:da:4f:5c:46:
ce:2f:9e:3f:99:88:55:c4:91:27:4b:0f:88:8b:9c:
d8:e8:5a:85:ab:db:3f:2c:ae:41:87:df:b5:f4:8c:
5b:16:7a:51:8d:c5:37:3e:bd:cb:c3:4b:28:70:08:
37:ed:8a:7b:cd:10:de:48:ed:a0:c1:a0:88:72:87:
55:22:8b:49:17:a9:6a:dc:d8:99:5d:a6:c6:28:97:
53:47:d6:a9:3a:69:e5:2d:05:bf:b7:2f:20:8a:63:
20:c4:93:3f:88:ca:05:ee:2c:b0:b6:b3:20:4d:1b:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:0C:9D:C8:DA:BD:56:FC:5C:00:85:1C:B8:34:E6:10:6A:36:93
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:82:cc:b7:cd:ed:bf:33:6b:b8:db:3e:ff:0e:5b:24:a2:37:
40:ba:cd:6b:b1:42:8f:16:40:49:c1:89:3a:fe:8e:ca:80:28:
7c:73:16:0d:b9:59:d8:6a:28:e0:46:08:63:54:7b:85:3c:39:
63:76:26:4d:7a:af:49:be:dd:b3:a8:3e:e0:9c:15:05:87:d7:
6f:e4:65:4d:ad:95:f5:9d:50:28:54:8e:58:26:08:9c:9b:49:
0a:af:fd:a3:62:f9:22:38:a0:d0:f5:02:30:5a:c7:b5:77:55:
69:69:ec:db:b2:28:59:5c:03:13:3d:30:5d:66:b5:dd:7a:73:
1d:d0:f1:39:29:11:d2:83:30:e4:7f:74:ad:ec:e7:d5:97:9e:
9c:01:20:e4:fd:15:27:e1:31:29:01:15:27:07:03:7e:33:d7:
e7:ec:f2:d0:25:ee:c1:55:cf:53:13:01:c5:58:bf:22:99:5d:
eb:03:75:44:7a:42:f8:3a:1b:b5:da:3b:ea:a1:88:28:17:e6:
cc:cf:5e:34:52:13:b3:2a:ae:dd:03:4e:cc:be:5d:58:b9:ab:
35:a6:39:11:88:55:cc:5e:b2:ea:6d:74:80:09:c5:ea:da:5a:
ad:13:d4:d2:a0:63:53:d6:ae:fd:8e:99:a1:3c:ee:57:87:f1:
72:45:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:56 2025 by rpki-client