Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: OiWEpy8qqZz8TPfg3uXsv0O5jVonYbZ2/XV4P1tiG1k=
Subject key identifier: F8:01:38:CE:BB:A5:E8:61:AF:08:3E:82:6C:51:38:D1:6E:4A:4F:D0
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0197B8C5CC16A08B8317945D2BD026ACE61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 09F8
Signing time: Sat 28 Jun 2025 23:00:59 +0000
Manifest this update: Sat 28 Jun 2025 23:00:59 +0000
Manifest next update: Sun 29 Jun 2025 23:00:59 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: bqStmnN-BsFxBnxWnw8DPk_tprQ.roa (hash: 9JsY/tBUW9ixZEccAJNHXeWoCpoj+Vt1ikqfZyuFPzE=)
3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: f6CSTplRVy6ukEjowwiUhdMTBEmgHGtSlqsH6RAsmE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:cc:16:a0:8b:83:17:94:5d:2b:d0:26:ac:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 28 23:00:59 2025 GMT
Not After : Jun 29 23:00:59 2025 GMT
Subject: CN=f80138cebba5e861af083e826c5138d16e4a4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:9a:07:45:8d:14:21:77:ca:5b:cd:be:7e:
7c:9f:a3:a6:e1:72:17:8c:a3:f3:fb:5f:50:60:e9:
d5:a8:39:b5:4f:f4:f7:bd:82:9a:9b:1d:16:83:1d:
c5:94:4f:18:44:33:ad:5c:8b:71:b5:4e:63:64:4c:
30:1e:d0:f6:ff:65:3b:e1:79:ef:eb:19:5d:18:e6:
f0:24:3a:02:e9:39:d7:50:76:8c:51:96:db:9a:52:
ad:07:1b:29:9b:97:6f:c3:0c:d1:aa:52:3d:de:b8:
96:73:23:53:41:e4:14:44:76:2f:8b:24:ce:53:6b:
11:58:53:3d:d0:20:97:d8:ce:0d:45:e7:ab:a2:67:
41:2c:02:5f:25:75:ff:30:77:65:f1:5b:c8:3e:53:
28:d9:c8:c9:ff:6c:18:c8:25:49:0e:30:a2:24:64:
63:66:16:b5:89:75:5e:e0:72:be:aa:cc:36:f2:34:
18:b9:c5:6d:86:a4:ed:9f:45:7b:8d:28:08:ed:d5:
d0:c0:1d:d5:d0:00:ec:35:b8:50:38:38:ad:ea:af:
fe:12:eb:0e:ce:35:08:0c:1d:31:4a:d8:6d:3a:76:
99:dd:12:88:5e:83:6b:31:3a:43:82:9c:21:79:da:
9d:27:4b:cd:8a:52:95:21:68:89:81:0a:9d:84:f3:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:38:CE:BB:A5:E8:61:AF:08:3E:82:6C:51:38:D1:6E:4A:4F:D0
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0a:a2:be:91:dd:f8:4c:2f:33:89:12:9e:0f:53:fc:31:21:
71:52:64:db:56:5b:56:9a:08:25:e5:4b:2e:c9:b9:1c:14:9b:
ed:71:ca:d8:a2:a3:73:39:ce:ef:ad:f6:5b:41:ae:0d:e8:e9:
60:45:5b:5b:c3:b8:9f:58:c2:dd:15:5c:73:50:78:b6:63:36:
e2:f1:83:00:a4:31:1b:32:38:22:15:f3:70:db:81:40:6b:29:
d7:27:14:84:62:5e:69:f0:35:40:90:83:b7:a3:25:13:26:c6:
09:7b:10:74:5c:bb:be:d9:c7:b0:62:83:68:a4:92:a3:e8:f5:
77:35:89:e3:b5:d7:28:e7:9d:1f:d5:a4:e5:2a:82:86:e9:70:
c5:18:6d:ee:d6:0f:75:dc:0b:e3:cc:07:22:75:a8:0b:86:b6:
c2:48:ce:08:fc:03:2a:2f:a7:4b:6e:e2:dd:f4:80:c2:22:24:
f4:f2:20:73:2e:50:d6:b9:1e:7b:2c:96:26:d0:ce:04:f0:e9:
a2:9f:02:9b:1b:eb:4b:82:3e:1c:30:4f:9a:36:ed:b5:d0:a0:
05:57:10:fd:ba:d7:ce:ec:6e:2b:e1:2b:ec:8d:e8:36:5d:3e:
fe:59:1c:ec:c4:64:f1:83:9f:89:f9:22:2e:45:2d:74:37:3a:
1b:0e:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:32:22 2025 by rpki-client