Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: 8hlHOOWQvw/TMGLvqY+pQ4QeFNVNnJdHdwFEXsZwQGo=
Subject key identifier: 2F:5B:39:92:15:77:F9:B2:B2:F2:32:C4:3B:05:E4:80:CA:2E:63:02
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019A72260A746C07B66D260172417336F1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0771
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: oEg8EAM1zwlZXm4p79bkh64i9H+KkuTthWY5KkrFJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0a:74:6c:07:b6:6d:26:01:72:41:73:36:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=2f5b39921577f9b2b2f232c43b05e480ca2e6302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:6d:79:9f:1c:7f:bb:6e:e0:87:02:11:67:
09:20:65:32:f7:cf:a2:42:a4:d6:be:69:86:42:8b:
1f:5e:7b:b9:8d:28:4e:86:78:49:ed:5e:bc:6b:2a:
29:fb:5a:6d:3b:d3:d4:a3:b8:b7:18:e5:e8:37:a7:
83:fc:f9:e6:30:4b:58:0c:c8:fb:9c:52:0c:4d:81:
29:8c:ec:a5:57:70:e5:0f:0f:b6:93:66:15:ac:53:
cc:1c:32:ce:2a:39:11:10:79:7f:81:53:64:76:c9:
7a:2a:02:f0:5f:68:b4:1c:a8:2b:b7:b8:aa:4b:8f:
f3:7d:83:9b:45:0f:d6:9d:e3:f9:67:b3:11:50:86:
99:5f:c4:3f:c2:3b:1a:4b:6d:09:56:a8:77:dc:33:
14:e5:c5:53:84:7e:49:09:62:3f:5d:d4:58:24:f9:
a1:ea:d2:01:58:32:53:4f:73:06:10:74:92:00:a6:
d2:6e:59:43:4c:d2:bf:82:0f:c7:d5:ab:2b:20:84:
c2:30:b0:52:25:76:e6:cb:a0:0a:49:6f:0f:63:6f:
cb:15:fe:3b:25:e7:83:9c:18:63:53:8e:7c:12:9c:
36:dc:30:c7:2f:f0:bf:b6:d0:df:95:fb:30:8b:7e:
9c:c3:7d:7c:9a:fa:dd:46:90:cc:ee:1b:cc:80:ca:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:39:92:15:77:F9:B2:B2:F2:32:C4:3B:05:E4:80:CA:2E:63:02
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:bc:5b:86:f7:cc:53:b4:9a:db:ac:7a:d9:4d:76:03:56:
42:63:ae:82:04:30:f6:71:e7:15:1c:2e:5a:cf:f3:40:be:82:
3f:34:c9:73:10:d7:b7:be:c2:93:38:81:3d:14:07:9b:2d:8c:
e3:2f:ae:e5:8c:8e:43:ae:f8:b2:55:b9:52:2a:6f:33:4a:cd:
e4:8e:5c:98:2d:07:67:38:f4:6b:99:de:a7:a8:ea:3a:a5:bc:
67:ca:72:85:4c:ba:e8:25:ab:e2:3f:c4:11:94:81:4c:5f:6a:
df:05:c5:2c:a4:75:aa:39:fc:0e:c0:50:e5:b9:64:52:d1:95:
a1:31:7a:00:b8:57:42:43:76:95:6f:9a:9f:a1:11:6b:2c:06:
dd:63:de:d2:0e:a4:b8:0f:d5:35:47:fa:f5:7d:01:4f:dd:86:
d8:55:b5:54:a4:e2:c6:16:6e:b1:5b:d9:e3:b2:10:31:6f:7c:
fd:c0:1f:f1:bb:26:c7:a5:18:78:9c:76:68:a2:39:b4:b9:14:
39:ef:9f:3f:8d:c3:a1:aa:25:be:7b:25:04:81:81:9f:b9:d6:
ba:e8:7a:10:34:64:14:8e:98:8e:d4:47:f5:92:32:3c:55:0c:
c2:d7:ef:19:ba:ee:3d:18:fc:f4:8d:13:60:8f:69:98:19:67:
05:1a:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:50 2025 by rpki-client