Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: idA+z4MKJqNHkOxzQRMQmMOt9fDSkU+TLbwgLaeRC20=
Subject key identifier: 68:89:07:89:CD:0E:1A:27:22:47:9A:3F:6F:38:9E:FF:A3:DE:5D:DD
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 0199FC587B67287243029C4595D134C0FA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0732
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: Umn93rx2PJZx2V1RJNd8ZjDZBdjFGwnEsc7vdcSqCnM=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:67:28:72:43:02:9c:45:95:d1:34:c0:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=68890789cd0e1a2722479a3f6f389effa3de5ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:cb:f5:70:87:b4:a0:be:41:26:f7:16:e8:
ca:74:ca:7f:b4:97:b9:0b:e1:20:f3:b1:64:f1:c8:
39:c8:33:c5:d4:9b:51:2d:c9:99:06:85:5e:00:f2:
b0:26:91:ca:8f:d3:6c:fd:c7:c0:ac:15:50:c7:f5:
1a:3e:1f:a9:6b:f1:b6:f5:26:e9:ab:b5:f5:81:82:
96:06:ee:56:da:5d:89:1d:89:50:b1:49:61:80:9b:
96:b0:ed:5d:42:cd:f5:a3:3b:7f:c3:6c:7e:ec:20:
54:b0:0f:06:24:14:14:8f:8f:fd:9b:2d:c4:51:0e:
de:22:0a:18:03:95:da:ac:a0:bd:41:04:31:5e:19:
d1:54:7b:65:a0:e7:51:7f:18:a0:aa:0c:66:d0:46:
a4:f4:0b:46:48:0b:55:ac:c1:8f:54:f7:fd:f6:ba:
e8:0c:22:1b:7a:23:e9:e0:ab:cb:71:16:ab:4b:f6:
ae:62:6f:f6:bf:f4:f5:2e:3b:2c:f4:31:5c:14:74:
3c:89:61:f5:2e:78:9e:e9:9d:9f:14:30:9b:9e:41:
5c:de:23:f3:a2:d3:a4:fd:8c:03:88:67:2e:96:d6:
5d:8b:21:00:61:bd:62:fb:3c:92:de:d2:35:c4:d8:
78:8a:76:7c:ed:c6:45:c1:36:2a:99:6a:f0:27:9f:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:07:89:CD:0E:1A:27:22:47:9A:3F:6F:38:9E:FF:A3:DE:5D:DD
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:21:a7:69:0a:92:eb:28:1c:f5:ce:1b:04:b3:bf:72:da:1b:
bd:72:65:27:05:ab:ac:7d:37:10:fc:88:03:2c:41:73:08:a2:
8d:f3:52:76:ca:71:13:87:08:5b:a0:7f:a7:85:fd:2b:65:b6:
2c:5b:72:36:18:96:e7:31:6c:da:f7:ae:ee:f0:28:b8:09:05:
ad:b8:c9:d3:13:7d:ca:00:cd:8c:74:89:c0:95:eb:f8:0d:c8:
c0:0d:40:92:72:ce:c0:87:97:f1:67:68:25:fc:72:6e:78:d5:
8f:1f:63:e8:a9:dc:fd:1a:d4:21:ae:69:a9:fd:bf:33:f3:8a:
40:39:51:8d:68:1e:b1:1d:12:23:5e:c7:97:92:a2:11:ac:70:
08:f1:62:fa:4e:3f:65:74:f1:8f:a6:fc:ad:e3:ca:79:0b:78:
1d:eb:45:1c:66:c8:36:c8:f6:5a:55:ef:5a:b6:f9:f1:ad:6e:
0d:1b:79:c5:e9:f0:4b:50:c7:a2:e9:70:bb:44:82:06:23:87:
8b:11:7a:e5:59:e0:c2:a9:54:19:78:ed:39:ad:ca:01:5e:cc:
8e:70:47:09:94:f6:a3:6b:71:63:c1:8e:25:f5:8f:ec:47:01:
65:07:ae:21:32:c7:52:80:6a:79:c7:7b:8a:58:97:9e:95:33:
49:f2:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client