Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: VUeDcKR2didYNKw82NcELCt46qjG8QDfxY6bIs+uauU=
Subject key identifier: 63:2C:57:02:75:F0:A6:D8:7D:FC:EB:42:C1:31:F2:D2:C0:F0:2B:2F
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 01984AAF2D61A9210DD2A01A8061B1BAEBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 1533
Signing time: Sun 27 Jul 2025 07:00:51 +0000
Manifest this update: Sun 27 Jul 2025 07:00:51 +0000
Manifest next update: Mon 28 Jul 2025 07:00:51 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: i02NOO4c4aqJVb8xjoRA10F4hmwfbGaCVfqV9kl2Q+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:2d:61:a9:21:0d:d2:a0:1a:80:61:b1:ba:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jul 27 07:00:51 2025 GMT
Not After : Jul 28 07:00:51 2025 GMT
Subject: CN=632c570275f0a6d87dfceb42c131f2d2c0f02b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:3b:72:08:e0:5d:46:b6:a1:48:3e:3e:ea:
b3:27:95:0c:3f:20:2e:d5:e2:aa:a7:10:e3:5a:32:
25:57:a4:01:ca:72:01:70:0e:46:15:4f:0d:69:14:
94:32:66:92:88:52:c7:a7:36:bd:7d:fa:69:35:32:
42:70:93:ec:7f:42:52:27:11:a9:03:49:09:70:05:
0c:55:69:0c:b2:9d:76:51:5a:52:c1:2a:15:cb:b5:
45:78:66:8d:32:45:eb:78:d8:df:5d:84:48:e4:bc:
8c:ab:3b:e9:c5:79:aa:fd:aa:85:01:52:89:0b:f4:
ed:2e:1a:61:f2:ba:06:97:a2:90:57:7d:65:7b:98:
b4:d5:8b:53:b8:c2:8c:fe:f3:16:ae:0b:ff:49:37:
e9:17:70:c2:0a:ce:bc:2f:25:33:08:00:ce:8e:14:
ff:9e:5b:7d:1b:ac:e5:d9:73:36:60:77:b0:49:96:
d1:54:38:d1:9d:6a:41:88:d0:09:c0:d8:07:fe:16:
f7:fa:0e:f3:7b:6d:24:d0:55:10:af:a3:15:6f:91:
7f:3e:ce:38:bf:65:4c:64:ba:f0:6c:91:68:72:5e:
29:ac:65:62:e2:49:2d:df:0a:43:bd:df:4d:cc:4b:
68:26:8f:a7:2c:40:12:50:03:b9:d7:8c:d6:ac:9e:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:57:02:75:F0:A6:D8:7D:FC:EB:42:C1:31:F2:D2:C0:F0:2B:2F
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:3d:f9:b8:de:45:a7:52:9c:61:88:7b:89:2c:1f:ab:3b:9f:
ad:ec:21:88:b7:0b:ff:ad:ba:25:1b:6e:2d:64:f8:14:33:e5:
9d:46:75:3d:c8:29:60:e9:f6:86:6d:74:03:96:38:54:66:db:
c5:9d:5b:5d:98:ed:fa:21:89:0d:a7:ab:7c:6e:17:2f:9b:28:
14:07:8a:a6:b2:0b:0f:ff:75:d8:bc:a2:a2:8e:ab:17:2e:21:
c0:a1:b8:0d:63:20:58:a3:65:8a:d5:86:0e:c9:19:05:87:58:
b4:5f:fd:1d:5e:b7:4b:ed:9e:c0:48:26:1a:21:d7:b8:8c:06:
d4:df:2b:e2:4e:3b:2f:99:4e:44:92:29:c5:bc:5d:2b:f3:bc:
65:cd:1d:9f:28:6c:45:f1:ce:0e:50:36:53:46:bd:cc:04:a6:
e1:00:9d:f9:2f:2e:4a:33:27:a3:21:a0:2c:31:47:22:46:1a:
f3:46:20:6c:32:85:8b:ac:c2:31:7c:44:fe:30:f5:5c:40:9e:
f9:e9:a0:54:a5:e4:f9:00:6e:6e:2c:06:5d:52:b1:47:da:1e:
9b:32:40:49:35:87:af:d3:43:65:67:b0:2f:18:bc:f3:ee:5f:
d3:cc:8b:3c:6c:ae:54:e3:c3:76:30:45:95:9e:46:cf:70:a4:
13:36:09:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKry1hqSEN0qAagGGxuuvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw
MjQzMmIwHhcNMjUwNzI3MDcwMDUxWhcNMjUwNzI4MDcwMDUxWjAzMTEwLwYDVQQD
Eyg2MzJjNTcwMjc1ZjBhNmQ4N2RmY2ViNDJjMTMxZjJkMmMwZjAyYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v47cgjgXUa2oUg+PuqzJ5UMPyAu
1eKqpxDjWjIlV6QBynIBcA5GFU8NaRSUMmaSiFLHpza9ffppNTJCcJPsf0JSJxGp
A0kJcAUMVWkMsp12UVpSwSoVy7VFeGaNMkXreNjfXYRI5LyMqzvpxXmq/aqFAVKJ
C/TtLhph8roGl6KQV31le5i01YtTuMKM/vMWrgv/STfpF3DCCs68LyUzCADOjhT/
nlt9G6zl2XM2YHewSZbRVDjRnWpBiNAJwNgH/hb3+g7ze20k0FUQr6MVb5F/Ps44
v2VMZLrwbJFocl4prGVi4kkt3wpDvd9NzEtoJo+nLEASUAO514zWrJ4lWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMsVwJ18KbYffzrQsEx8tLA8CsvMB8GA1UdIwQY
MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt
YzhjZWFiOGJjMDUwLzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw
LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2T35uN5F
p1KcYYh7iSwfqzufrewhiLcL/626JRtuLWT4FDPlnUZ1PcgpYOn2hm10A5Y4VGbb
xZ1bXZjt+iGJDaerfG4XL5soFAeKprILD/912Lyioo6rFy4hwKG4DWMgWKNlitWG
DskZBYdYtF/9HV63S+2ewEgmGiHXuIwG1N8r4k47L5lORJIpxbxdK/O8Zc0dnyhs
RfHODlA2U0a9zASm4QCd+S8uSjMnoyGgLDFHIkYa80YgbDKFi6zCMXxE/jD1XECe
+emgVKXk+QBubiwGXVKxR9oemzJASTWHr9NDZWewLxi88+5f08yLPGyuVOPDdjBF
lZ5Gz3CkEzYJMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:36 2025 by rpki-client