Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: rpdX1zEjAvLyiikdABA5s2gyg3QdQ/CSidT9wPdP3X8=
Subject key identifier: C5:30:25:E8:F3:9E:5B:1B:60:3F:69:3F:50:72:9D:D1:2C:A7:FA:8C
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 01960641347BA9AA98F91B2620C46D23E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 0FB0
Signing time: Sat 05 Apr 2025 14:00:58 +0000
Manifest this update: Sat 05 Apr 2025 14:00:58 +0000
Manifest next update: Sun 06 Apr 2025 14:00:58 +0000
Files and hashes: 1: gg4kjQH-MRQrS-FzBjsif1edZso.roa (hash: K0w6We/nHbxDdN4hPxZ1hRud5nyEBhVgL5F/G8Gxd1w=)
2: ijqfOwh-mKxL0IFbe46uAqyqBe4.roa (hash: NhINayUAgUyP+pjnQ3qR8pj7oOBaH36Jng4YmwD8sGM=)
3: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
4: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: B2q7O9WswJGtZ8a1CbttRvH01MAQZ7MBJnsUZiUtARY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:41:34:7b:a9:aa:98:f9:1b:26:20:c4:6d:23:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Apr 5 14:00:58 2025 GMT
Not After : Apr 6 14:00:58 2025 GMT
Subject: CN=c53025e8f39e5b1b603f693f50729dd12ca7fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:25:aa:27:70:b7:4b:75:1e:a8:74:21:4c:
21:17:bb:e0:6c:5e:27:c7:fc:5d:c9:67:af:b7:88:
65:13:b0:9e:3e:c7:a5:11:41:58:10:a2:66:44:4c:
0b:4b:99:57:84:41:21:a2:c4:05:fa:28:b0:61:03:
51:9d:55:0c:48:32:ce:3a:4c:a6:7a:5e:d9:61:78:
3a:a4:80:24:d2:2e:1a:ff:3f:50:d3:23:f5:c9:b7:
e7:2f:9e:a0:f1:89:83:19:10:b2:09:e4:50:ff:4b:
e1:56:6d:a8:bc:65:11:72:d8:32:5a:9a:5a:fb:7c:
e5:4e:3c:da:e6:71:6f:05:96:ec:fa:bb:45:e0:36:
80:e8:dc:29:7d:b7:fe:ea:5f:d3:89:ec:62:6a:cf:
40:a5:66:c8:98:07:76:a0:4d:8a:43:34:b9:49:d4:
c4:91:84:a5:6e:37:df:24:92:f0:2f:cf:10:21:52:
de:84:28:d5:c2:2c:a4:17:75:9c:90:88:8e:f5:ea:
e8:ec:d7:0b:bb:85:af:66:f9:7c:29:cf:0c:5d:64:
f0:ec:c3:f2:9e:98:55:c0:67:26:45:66:5c:6f:58:
24:16:a5:0c:29:0c:d5:d4:e7:4c:89:ea:f8:f9:de:
da:f8:29:b9:07:72:bc:9f:73:c6:13:eb:db:3b:cf:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:25:E8:F3:9E:5B:1B:60:3F:69:3F:50:72:9D:D1:2C:A7:FA:8C
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0c:26:d7:19:ec:5f:a2:79:45:f7:66:d5:42:e3:1c:36:38:
5f:16:22:1c:b1:51:a0:56:46:c1:ae:d4:c8:ba:e6:80:20:70:
11:c7:6a:0f:76:1f:2a:7f:5d:7f:4f:6d:e1:43:4b:dc:68:4e:
9c:32:40:d2:39:83:63:c0:b7:b1:fd:fd:1a:d8:32:e1:36:da:
28:7c:87:df:80:9c:34:c8:52:19:a4:f5:4b:f0:a9:92:da:70:
34:10:c9:0a:d1:3d:5c:3a:74:c5:e4:8e:a3:9a:88:e8:49:01:
76:c1:b1:e1:ca:ba:93:61:96:ac:9c:7a:c7:8a:1b:3f:55:dc:
3a:ea:c6:bb:36:e6:18:47:16:a8:0c:ff:ec:f0:22:27:9a:7e:
c7:29:e0:1a:0b:92:2f:89:30:e3:f6:70:48:ad:07:b6:62:26:
56:9e:91:35:20:98:af:65:76:12:d1:98:d2:62:4f:b7:c1:c1:
ab:7e:60:43:ba:52:93:89:f6:53:70:db:a4:08:ef:7e:e6:07:
e2:b4:a2:90:3d:ac:05:04:a0:88:4f:c1:8e:d7:d2:fd:20:31:
cf:37:11:4b:ac:dc:37:9e:b7:ce:c3:85:fc:79:91:59:03:d7:
3a:85:0b:e5:08:6d:15:32:7e:e0:9d:f7:99:10:bb:d9:2e:10:
06:09:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:55 2025 by rpki-client