
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: ny3g9788Zr/QSxnoRiSqlYy4bgmQcJw6AyotI6uGbOE=
Subject key identifier: 9F:5C:45:B7:44:29:82:01:C1:97:51:82:BC:D8:4C:A4:97:07:81:68
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 0198D4E0CD844A8D545B944E542E8C12C249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0699
Signing time: Sat 23 Aug 2025 03:02:39 +0000
Manifest this update: Sat 23 Aug 2025 03:02:39 +0000
Manifest next update: Sun 24 Aug 2025 03:02:39 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: svc+iygVhvyf3aY5X8xVhKreMeydYl7h63x3v04+WmI=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cd:84:4a:8d:54:5b:94:4e:54:2e:8c:12:c2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Aug 23 03:02:39 2025 GMT
Not After : Aug 24 03:02:39 2025 GMT
Subject: CN=9f5c45b744298201c1975182bcd84ca497078168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:04:54:36:90:98:14:13:b9:d7:53:ab:72:
55:c8:ee:da:e8:21:6f:68:b8:95:eb:80:57:63:f9:
38:47:3f:a5:9f:3f:4a:51:cd:00:08:72:2d:31:fa:
b1:d8:06:f7:66:c8:d8:af:24:b4:2c:42:ff:f9:a2:
09:d3:90:c4:76:be:24:11:51:65:1a:d4:cc:c5:10:
0c:26:eb:c1:96:86:12:58:bf:f6:93:5a:d4:35:86:
a9:b1:f1:b4:ab:6d:26:b2:31:fc:0d:2b:3e:c0:80:
37:97:3d:26:14:14:31:72:2c:13:df:34:de:fd:8d:
0f:c8:cf:3b:de:d9:cc:68:7a:3e:a5:06:f0:65:02:
4a:bb:a2:0d:2e:a6:6a:1f:e5:49:5e:bc:37:56:12:
24:19:6c:ac:9b:00:d6:de:c6:fa:da:ae:4c:33:d6:
ed:9c:8f:f9:d9:3b:51:72:1c:01:5b:40:2c:d8:f8:
15:25:9e:25:2b:18:b7:89:23:ae:9d:70:0a:ae:9f:
52:01:49:c2:46:4c:4f:76:6b:81:d4:31:62:bd:6f:
75:24:4f:2a:49:dc:22:5b:5f:8b:42:31:a1:44:bd:
3b:b0:bb:74:a5:4f:aa:32:e8:8f:40:c4:b8:2a:71:
67:17:1d:4a:37:ae:77:12:89:c2:65:3b:1a:1c:24:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:45:B7:44:29:82:01:C1:97:51:82:BC:D8:4C:A4:97:07:81:68
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:61:d0:73:fe:84:72:dc:f1:f5:b1:9c:1b:d6:d3:ee:5e:
38:da:2b:c6:35:40:83:ce:71:03:c9:f0:63:12:f7:45:14:94:
00:6b:b3:39:b5:df:55:6c:77:fb:7e:93:a1:67:44:08:56:c5:
88:db:70:ac:8f:e5:ff:74:e2:32:c6:09:4e:de:d3:81:2a:3f:
5e:1a:9a:b8:be:96:e5:58:fa:45:15:f2:7e:5e:0e:b8:ef:2f:
4e:8a:0c:d5:ca:bf:dd:3c:94:23:f6:fd:f0:42:20:1a:ca:d3:
27:b8:91:07:ef:fb:df:42:e5:cf:1f:1d:bb:30:f2:30:39:b4:
33:50:ea:5c:a7:de:23:0e:76:69:41:df:f2:69:fc:96:b4:ab:
2a:61:f5:0f:b1:93:64:a0:a7:9d:4d:2a:26:80:84:e5:cd:06:
62:30:8e:79:a0:d1:88:7d:03:06:de:c9:6a:ba:bd:13:ee:29:
03:53:22:ae:98:96:ee:02:d5:f4:ae:d7:61:f2:43:75:76:1f:
4e:b1:f6:e4:e8:ea:ee:20:ed:dc:f5:a3:1c:c2:b2:ad:af:bb:
e8:ea:fc:8e:73:f9:21:13:7e:2e:bc:c5:65:ee:37:f3:7b:7c:
ba:bf:bb:bf:4e:12:36:66:fa:7f:8f:34:a4:bb:88:e4:19:42:
07:e4:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:30 2025 by rpki-client