Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: y7Wji8PyJI3UGc84RILkG0/UzQGz01L+VHIm/4cNXpg=
Subject key identifier: 44:1F:0B:44:07:53:BB:60:E6:EC:81:82:13:44:34:02:F5:48:64:0C
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0197CF4D8BA3FE3A032DBAFFCA61F37C4BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0613
Signing time: Thu 03 Jul 2025 08:00:55 +0000
Manifest this update: Thu 03 Jul 2025 08:00:55 +0000
Manifest next update: Fri 04 Jul 2025 08:00:55 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: nzYUI/cpo3Z//GV38/S159uR/+Oc9qsO+3zMqcIGWUg=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4d:8b:a3:fe:3a:03:2d:ba:ff:ca:61:f3:7c:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jul 3 08:00:55 2025 GMT
Not After : Jul 4 08:00:55 2025 GMT
Subject: CN=441f0b440753bb60e6ec818213443402f548640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:80:b2:12:13:bd:28:08:c2:1c:a3:6b:84:
d5:b9:6d:02:39:a8:64:87:4c:34:07:99:ee:44:14:
44:85:f2:54:0f:0b:04:b8:9d:ae:fd:87:53:f9:66:
ec:07:83:ec:04:e7:1f:dc:87:a3:9c:01:0f:53:7f:
fd:57:af:9b:88:20:6c:e7:b5:f1:67:08:72:37:a8:
99:da:fc:7b:6e:d1:7f:55:ea:9d:b3:2a:c1:01:5d:
e6:52:75:4a:0f:2a:2a:1f:9f:63:b6:31:85:53:83:
51:9a:42:98:20:fa:df:77:aa:96:a2:71:69:1a:dd:
74:2c:22:68:a6:da:00:b6:37:07:7a:e5:46:a5:e1:
8a:0f:d4:c8:84:c7:49:36:15:f5:89:2c:70:db:53:
b6:e7:dc:46:a1:2d:99:7c:f4:14:4f:33:02:b0:a5:
cf:2d:5e:b9:e2:75:df:90:17:7d:08:72:11:9f:b8:
e6:f1:14:cd:6b:c0:65:96:40:2f:8e:0d:19:8e:ca:
e0:47:e6:d2:ca:12:44:c2:fe:59:05:42:bd:92:37:
fd:17:89:6e:46:c7:77:50:04:ca:55:2a:b8:a9:14:
57:c8:f4:f4:96:56:4b:8a:a5:5e:42:09:b6:de:f2:
58:1a:05:d1:90:05:89:50:40:da:57:ac:c7:2b:d0:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:0B:44:07:53:BB:60:E6:EC:81:82:13:44:34:02:F5:48:64:0C
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:3b:de:4c:08:35:ed:7d:3d:e4:76:9b:c0:fe:b3:e1:65:
25:73:b1:d9:30:5b:be:5b:85:0d:89:1c:f6:c7:5e:88:ab:35:
22:2e:e0:6e:11:dd:24:5a:a9:65:9b:3d:26:d1:a5:5a:93:81:
88:76:21:03:9a:98:92:8e:69:57:07:df:08:b3:7f:18:28:b8:
cf:82:6d:27:34:19:0d:0d:0d:d6:5c:c9:ae:26:a8:5a:45:36:
7d:9f:0b:ed:35:b0:68:25:2f:dc:3d:15:25:d5:b7:eb:ba:c9:
c5:01:56:13:ae:ac:26:b2:76:b9:b6:cf:ca:b4:c9:ba:59:c4:
ee:70:de:25:6d:89:11:1b:8a:81:8c:d7:6c:90:99:cc:c8:70:
7e:e7:8e:f4:30:33:72:bf:f1:ae:c5:39:ea:21:3b:5b:d5:af:
50:9f:95:6e:c1:4e:1a:0c:77:e0:da:dd:6d:a9:98:e7:ad:50:
ef:9f:1b:00:3d:21:a4:6e:06:f0:a7:77:25:ce:8c:71:3a:bf:
72:61:e3:a9:a3:e2:f5:32:d0:41:43:5c:4e:fb:48:47:84:0c:
84:e4:dc:cc:c6:5c:0b:65:30:08:49:66:1d:84:c7:93:20:ef:
7f:b7:98:00:10:ae:ac:5b:8f:5b:33:68:07:26:8c:5a:97:24:
03:80:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:18:15 2025 by rpki-client