Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: AeVR2mHuzB6JWmAV4dWwNpDm/nprByVjL4p7F2My6hM=
Subject key identifier: 52:11:3B:F4:65:A5:83:C8:A6:5B:3B:4F:AA:4C:6A:5D:5B:A0:95:12
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019748F9E5DF0D210F52F8B9C40372A16C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 05CE
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: SsB34i3A+F5iKD3svo9hctqO+Mj5qs9IGyDR1TJhijE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e5:df:0d:21:0f:52:f8:b9:c4:03:72:a1:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=52113bf465a583c8a65b3b4faa4c6a5d5ba09512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:0e:b4:22:74:5d:b2:95:80:01:58:5c:aa:
f9:04:27:47:57:fa:29:12:ca:97:90:8f:bd:04:42:
85:fa:1a:fb:c0:1f:03:a8:d1:16:df:3a:9c:e6:3a:
45:c3:a6:34:76:d4:84:e4:d8:6d:7b:b4:68:7f:54:
4d:f1:56:96:1f:a8:d9:a9:3f:af:cb:bc:1d:b6:f4:
07:99:cb:46:20:60:c1:d8:cd:df:0c:60:f6:97:10:
85:a7:ac:44:8a:d1:19:a7:74:fd:cd:7a:bb:7c:89:
20:4b:5e:53:14:16:85:2b:76:b6:8b:36:e5:a6:fd:
bd:9b:fb:20:8b:c4:3a:0b:e4:2b:f0:c4:c9:a4:42:
c7:b5:21:03:ca:65:a2:44:97:8d:d8:53:5c:51:1f:
de:96:7c:a3:91:e7:bb:c4:e6:3e:4a:ef:71:64:54:
ae:5d:9c:0b:8d:23:f6:39:ad:be:05:8a:e2:21:0c:
04:51:f0:a1:c2:fe:0c:87:38:58:df:1c:5a:b8:c8:
83:69:6c:d9:b7:aa:14:c3:e3:45:b1:ed:d6:ee:83:
1a:d2:17:12:ee:26:cc:a6:c2:32:a9:ca:39:2c:76:
fd:36:73:85:b1:94:8e:da:2b:58:7f:97:02:77:2f:
6f:4b:09:09:f4:07:ec:68:48:4e:1d:03:4a:66:a6:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:3B:F4:65:A5:83:C8:A6:5B:3B:4F:AA:4C:6A:5D:5B:A0:95:12
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:cb:a4:61:7b:41:07:86:2d:f0:37:8e:d6:57:4b:e4:c4:
4d:0a:e1:b7:90:00:30:3c:f8:0d:81:69:81:f4:9d:f6:95:ea:
85:c3:80:0b:e9:b9:62:2a:e4:b4:31:97:f3:c3:0b:b9:2a:33:
f4:70:5f:a2:f8:61:20:4f:b1:6b:33:d1:68:d2:40:d5:9f:70:
77:6a:79:6a:a1:60:77:4b:2c:ea:fa:77:46:bc:c1:2f:a1:84:
2d:05:ee:3b:34:61:60:4f:55:bf:f4:c0:f3:45:45:6a:fc:2e:
af:ea:68:30:14:b7:cc:07:16:0a:5f:9f:00:ac:c1:2f:47:24:
c6:99:0c:00:11:77:6c:b9:7b:d3:dd:31:03:ac:71:5f:00:ff:
90:95:ce:fa:81:97:2a:f2:c8:89:92:c1:92:e9:d1:8e:28:a7:
ed:16:24:bd:2f:6e:8c:6d:ce:6b:d4:df:d8:76:c8:e9:c3:38:
81:c7:60:1f:1c:63:33:2e:5d:b0:27:d3:72:dc:86:0b:40:8b:
fd:29:7b:7e:a9:99:fe:79:2e:8f:fb:92:f1:56:2b:04:ee:3c:
ea:9d:cd:b1:12:7b:49:24:83:5d:51:c8:b3:b5:ad:a7:b6:a9:
b1:5e:a9:ca:f3:66:b4:ec:8a:8c:11:e6:1e:1b:ac:ea:fc:c5:
d2:e0:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:31 2025 by rpki-client