Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: eZpX6XYca6K+CHGKFjbdfPosxNurs1Bv9boeVf+C1z8=
Subject key identifier: 2E:64:C0:6B:0D:B5:08:19:E9:04:12:0F:DD:65:BC:E2:45:99:A9:94
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0198D5162B79CDAF706310F88E7D17E6D359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0A8D
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
2: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
3: jayiXLa-DaCZpHlot-idHVHLJyA.roa (hash: jo6g1mCIBaDKWxl2NtqHQbh3jgZ64Bb6orX/coHjYCw=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: +zrZETZf8mFUkcbK1H1BP/ADhKhN/9mCPZ89xjMUc3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2b:79:cd:af:70:63:10:f8:8e:7d:17:e6:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=2e64c06b0db50819e904120fdd65bce24599a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:86:bd:41:b1:7d:1d:f9:f3:ba:61:76:2a:
44:9d:d1:0c:12:b2:40:d2:56:1d:ac:74:f8:9c:af:
df:d0:f9:7e:ff:3c:10:56:3a:8e:46:15:39:1c:c9:
80:2e:10:5f:2d:22:e2:c2:e8:71:95:b3:a2:01:c2:
bf:6d:97:15:86:2a:22:91:55:7b:e9:6a:6e:cd:2b:
74:a6:bd:b9:75:ad:e8:80:86:e8:e4:b6:91:35:6e:
db:fa:b1:c9:ca:c8:ed:d8:7a:d2:8f:63:2c:fd:fc:
f3:1b:e9:30:77:51:ae:03:bd:b6:69:3f:1f:fa:50:
6f:c9:5d:f1:d2:cb:99:e2:ae:a0:9f:3e:47:4c:a4:
7a:6c:57:68:6e:ca:dd:09:d3:5b:23:ad:7e:95:1c:
f3:e9:cb:06:d8:cc:d9:40:df:c4:ef:66:9c:05:fc:
a7:98:61:92:0d:89:0b:09:ca:dd:c4:41:ad:30:08:
42:c5:51:55:0b:41:c8:30:2a:dc:c4:df:8a:b2:c0:
f5:07:d3:60:0d:47:36:8c:f4:0f:39:f2:c2:fa:8a:
cd:42:52:c0:c8:a3:34:20:6d:ff:45:1c:b9:57:67:
07:e9:59:34:66:7a:1c:79:40:81:cf:34:07:4d:8c:
85:63:7a:f4:8f:90:a9:fa:ce:10:3a:5a:b3:72:6c:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:C0:6B:0D:B5:08:19:E9:04:12:0F:DD:65:BC:E2:45:99:A9:94
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:e8:ad:f5:00:14:d1:3b:e2:17:ce:9f:6e:c2:1c:37:3c:
94:e3:e7:bb:62:a4:53:a2:92:a6:7c:d2:e1:bd:f1:bd:46:3d:
e3:3a:4f:f7:1f:a4:9e:55:d0:e0:fb:52:b0:2e:6e:c2:f3:0a:
06:66:9f:bd:f0:a9:47:d6:5c:06:35:25:ec:c0:f7:e1:e3:34:
db:44:bb:db:41:bb:20:86:b8:e0:01:18:a7:89:bd:2e:2b:13:
f2:30:ea:b7:7f:47:c2:b9:56:24:8b:e2:bb:1c:88:19:5e:9f:
a7:82:d8:40:e6:c9:23:80:b9:04:4e:26:75:30:19:59:e0:e3:
78:47:1e:78:54:36:dd:a7:ae:b3:a6:ff:f5:6a:78:ac:93:39:
b0:55:d6:aa:00:d1:a9:13:aa:fd:1f:de:54:de:56:cf:01:af:
5f:6c:7b:d8:42:10:59:bc:58:d8:72:ee:09:84:5f:ce:c0:e6:
af:fe:b6:d8:cc:5a:87:ad:d9:8d:e6:0f:d8:cc:17:f9:a3:5e:
c3:c7:25:b8:ff:77:d4:cf:3f:19:03:4b:91:a9:11:a7:b6:64:
8d:ae:48:1d:c0:bf:25:70:a2:fe:63:87:99:d5:9d:de:8a:bb:
c9:10:07:b8:23:0a:61:38:09:08:06:e4:90:a9:d0:72:b0:cc:
b1:26:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:52 2025 by rpki-client