Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: FW1AAaJJib+X3E175cxDXRcHkcdFlvPT0LcNOjmmOqI=
Subject key identifier: 75:05:6D:23:03:6E:B8:3E:F2:41:BB:8D:01:6D:A8:AA:4E:F0:FE:DA
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019849D2CD0025D7384C60D29ADA92235834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0653
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: xwraB6DE/UMMXjgDCYX9v9thrRDN2k6xKiiomIfIOAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:cd:00:25:d7:38:4c:60:d2:9a:da:92:23:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=75056d23036eb83ef241bb8d016da8aa4ef0feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:a9:d9:ae:a3:5c:e7:f0:83:78:68:fe:6e:
13:df:f3:56:36:41:e8:3b:55:48:12:09:44:96:0c:
fd:03:47:fc:3c:94:c6:0a:2a:0b:c2:18:ad:e7:36:
be:96:91:96:49:5c:0a:64:61:50:01:c5:9b:2f:d4:
c7:50:ab:f8:92:1d:c5:2e:b5:5d:32:2a:c2:d7:ea:
9d:d5:3d:94:fb:a4:45:30:2e:f9:8a:00:1d:45:45:
49:6e:ed:d6:8a:b7:72:0b:a9:5b:2b:b8:3a:cc:06:
dd:3a:9f:8e:41:4c:e8:a2:15:d3:8f:6b:ec:30:25:
c3:b5:f0:81:9a:12:8e:60:7c:94:a9:a4:48:61:e7:
75:06:7d:db:31:c9:b0:7c:3c:57:29:a0:d0:2c:d4:
1c:c7:ec:7a:05:ff:10:2e:41:2e:80:25:81:74:fa:
27:4d:2a:00:82:ac:05:7a:e6:bd:24:ae:45:57:b0:
a5:a2:2e:a8:3a:97:ae:15:be:01:a2:e9:70:24:13:
c7:51:1e:19:71:f9:ad:67:65:3f:64:78:10:cd:ab:
38:fd:17:63:1b:97:19:27:f2:ab:a0:2c:5e:49:9d:
f5:ed:f1:da:c8:64:c7:a6:79:76:0d:71:bf:be:0a:
63:39:a4:fb:b2:61:6f:0b:74:87:1e:7a:24:12:39:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:6D:23:03:6E:B8:3E:F2:41:BB:8D:01:6D:A8:AA:4E:F0:FE:DA
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:33:e3:e6:2d:d4:dc:d3:9c:3d:46:d8:10:fc:e8:e3:da:dd:
ce:89:d6:a4:16:01:44:a0:cd:24:e8:4d:5e:5b:92:3b:a3:5f:
61:89:6d:0b:99:88:ac:a7:e5:72:d4:db:b9:9a:74:3f:ed:df:
3f:1d:a5:2a:4a:97:e4:0f:61:a6:88:f4:8a:e1:0b:97:98:65:
db:8e:77:78:45:a3:c4:2b:b3:f2:ca:9f:8d:12:3c:81:9f:2d:
77:65:db:29:96:3d:2b:9f:04:4c:56:4c:f5:19:39:35:99:75:
f7:79:ef:dc:71:c9:14:6a:01:48:4e:6d:49:bf:13:66:2c:e2:
29:fb:53:d4:7f:c4:e6:6b:fa:8b:eb:64:e8:18:32:5a:6d:a2:
90:f1:59:da:c6:bf:35:ca:b3:1f:09:f1:6a:ab:03:47:13:87:
14:e2:5d:4e:56:5b:bc:37:d9:e0:17:33:fe:63:d9:69:b4:01:
fe:09:06:f9:00:a4:21:95:de:6e:c1:b0:4a:be:51:d1:89:e2:
12:63:ea:cd:7d:bb:38:a3:40:ee:6e:26:2a:48:fc:35:c0:70:
cc:f5:c0:93:7a:45:fb:ea:17:af:23:36:41:c1:a4:54:6f:32:
fd:b3:15:39:7f:fb:82:14:3b:4e:bf:7f:b5:39:c8:83:05:94:
a7:ac:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:34 2025 by rpki-client