Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: oByvtREy/Tnguw4Jc3aJl4LBEHiIovnUn2WneY/hX5s=
Subject key identifier: 60:D1:3E:B4:1F:CD:96:28:D8:47:57:B2:C8:0B:29:DC:A2:3A:B8:BA
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0199FB7D01DF8C84D3074E694F79350AFE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0733
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: Ee7u1Gs8IGRzCOxoCFIBnqmlRYgon2SAv/KGWr2S+bE=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:01:df:8c:84:d3:07:4e:69:4f:79:35:0a:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=60d13eb41fcd9628d84757b2c80b29dca23ab8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:60:01:b8:5d:16:ad:b5:a4:94:bd:ed:7b:
32:d9:89:58:bc:81:7e:1b:49:ec:df:89:c7:74:87:
4c:ad:85:de:e6:c2:d0:a5:d3:68:dd:b3:c3:83:2f:
3b:f6:21:ac:73:28:1d:a4:ce:f9:13:a2:97:c7:b2:
de:50:94:03:01:73:0e:12:9d:91:f3:dd:c5:84:16:
de:ec:57:12:c0:8c:78:35:e1:56:6f:77:0a:0a:5f:
d8:f5:11:50:c7:3e:4f:4f:00:02:41:ee:87:e2:22:
fb:81:de:f1:b2:34:ed:ba:fd:47:fb:93:6f:44:0c:
f9:f9:f4:20:6e:93:e6:e0:4e:80:29:6b:a3:67:74:
30:55:7d:b3:ad:ee:c1:bb:89:fc:13:9f:04:c5:9d:
05:26:b2:80:83:13:39:6c:dd:36:63:e8:ca:91:5c:
6a:3a:03:d7:af:4a:74:9a:0c:8a:fa:6d:10:b2:db:
fa:3a:91:23:ec:f9:7c:fb:14:72:8e:3e:52:92:e0:
6c:86:64:af:c4:d1:f0:9a:3c:67:76:f3:bf:a6:d5:
99:dc:b4:3a:15:36:ca:94:09:1b:0c:6e:ae:70:a5:
c0:99:7b:77:ca:8f:ac:3a:c1:dd:3d:8b:0f:03:6f:
4d:c2:c6:cb:2a:73:a6:94:96:54:75:4a:ff:f5:65:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:3E:B4:1F:CD:96:28:D8:47:57:B2:C8:0B:29:DC:A2:3A:B8:BA
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3b:4c:64:6a:3f:51:6c:1b:14:31:b6:95:be:46:f3:91:b6:
94:77:39:d1:45:01:c0:d8:74:83:03:5f:2c:7c:d2:74:37:c8:
43:ff:c8:b9:1a:49:d8:42:f7:d2:b4:e7:b3:79:11:72:cf:b4:
78:f2:24:52:ef:cf:1d:d8:57:e8:e3:c8:3a:57:6e:91:08:03:
85:f5:b3:3d:54:7f:fc:3c:9f:cf:b0:ce:01:f5:ec:b3:23:ab:
11:53:3a:12:aa:1c:a2:5a:8a:c5:59:70:12:2e:1a:f6:06:04:
52:b2:fa:f3:83:30:34:ce:a1:79:e7:ed:9d:15:3b:e6:9a:78:
f6:92:36:4e:2a:0e:ef:e0:1a:95:ce:9c:a4:c7:cf:97:b1:ca:
43:5d:c9:9e:e3:e6:b5:11:37:b4:8d:96:16:a7:e2:bc:d3:5c:
4c:c0:11:68:ca:0a:d4:6e:0b:c9:3f:c7:c4:bc:15:e6:80:c4:
6c:71:9f:e5:42:67:21:29:b3:6a:d3:61:4b:18:b3:97:2e:c8:
75:f6:db:2b:72:c3:03:56:a7:bf:6d:69:77:d4:9d:80:fa:01:
4a:99:34:e0:7c:d6:fc:10:a3:1d:bd:51:b2:8f:65:6b:99:e0:
c8:31:b2:dc:09:81:46:76:90:44:39:6a:b3:46:28:3f:ee:7a:
26:fa:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:02 2025 by rpki-client