Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: 1Kose1KblImH8I9eGVk/agsARonnmLfQJRa/IWBjpEQ=
Subject key identifier: B4:B3:92:B8:7A:41:54:F0:2E:56:43:FC:EC:7E:9F:93:9E:AE:99:D7
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0199FC587C88F8CD4913682B33442F61861E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0ACE
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: SOb6fSWSiSS2H3Qb2rK3gH23+tte4sbLe/EfCQkzSH0=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7c:88:f8:cd:49:13:68:2b:33:44:2f:61:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=b4b392b87a4154f02e5643fcec7e9f939eae99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:a6:2b:f9:ed:2b:59:0e:d8:95:ab:aa:e7:
13:38:eb:d4:63:40:91:41:ba:cf:0e:95:96:4b:fe:
12:0a:c1:65:e0:7a:06:30:e6:44:b2:2f:42:39:f1:
15:59:48:23:82:be:0d:27:2b:51:70:b5:ae:b2:26:
04:2b:48:68:87:af:a2:7d:e8:fe:66:d2:95:25:7b:
3b:cd:2c:e8:68:93:2e:24:1c:e6:29:b8:e1:39:cf:
b8:e1:87:c7:e3:30:33:9e:99:60:64:ce:66:98:11:
28:77:5e:27:fa:f3:ac:d9:23:29:92:a1:6d:f8:95:
61:3b:77:3c:ed:58:90:8c:1a:9d:02:05:28:4e:3d:
3f:4c:7d:4f:fb:16:87:a1:bc:c8:3e:4a:88:b4:97:
23:a5:74:c1:dc:7f:3b:2b:5a:26:88:c6:ab:18:7e:
f6:7a:1b:87:b4:9c:54:d6:88:01:a9:d6:a7:19:3b:
70:ca:f4:84:1d:8b:f2:87:a1:9d:a8:50:82:df:35:
dd:20:64:61:97:6e:5b:97:ae:3f:d2:7a:da:e0:14:
21:87:8f:30:94:1e:4d:42:ec:bb:66:f0:95:78:a1:
b5:38:c3:21:ca:f0:55:18:3f:c7:13:03:d4:64:76:
ca:8f:e8:cc:66:0c:d3:0b:53:9e:bc:d6:5c:0f:80:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:92:B8:7A:41:54:F0:2E:56:43:FC:EC:7E:9F:93:9E:AE:99:D7
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:53:c9:69:30:f7:1d:65:76:8d:bc:62:87:d4:55:b6:00:79:
5f:99:4a:cc:37:5a:a1:09:49:7b:ce:48:1e:00:2a:42:57:c0:
b4:72:0e:52:ca:46:43:4f:07:e6:aa:f9:11:3c:be:52:e1:5c:
de:4a:cc:59:e2:9b:97:b6:ea:cf:a1:fb:11:2f:db:c6:f0:c5:
12:2b:83:f9:51:7b:c9:c9:28:64:f5:d1:f3:7c:d7:1f:5d:8c:
e3:b7:9d:b4:53:a7:66:b5:e6:e1:e6:33:71:e1:de:25:96:8e:
60:9f:f7:f9:65:5c:82:c2:96:b6:ac:08:ef:e7:29:11:d9:bf:
ea:14:bf:fc:ef:aa:55:c4:17:6a:02:98:93:9a:29:fa:91:24:
19:f8:15:ac:f3:40:34:3c:df:b6:ad:f3:30:19:f2:c9:d6:98:
75:3a:73:ff:25:ef:9f:55:6e:3d:ec:05:ef:bd:9a:60:3b:27:
23:9a:0a:87:28:d8:ac:83:92:56:de:6e:71:66:bf:35:1c:65:
28:07:1e:33:eb:36:c9:ad:6f:69:35:d3:56:bb:4c:03:68:15:
fc:a7:a3:a5:86:fe:5d:8c:6c:e6:7d:40:56:78:1e:c0:bd:89:
db:91:81:eb:77:b5:81:3b:26:36:4c:a5:3a:61:ac:59:62:ad:
41:49:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:45 2025 by rpki-client