Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: b/ULqQYkP+L8eU1lEGO/yhf8rh8QuAUdxU+85zifsDw=
Subject key identifier: 53:B9:88:45:81:BE:7A:0E:78:F9:1F:D3:17:A7:01:41:E6:A9:17:AC
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019749D5E3DEF05EA8C1B8D73857C8B5C069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1059
Signing time: Sat 07 Jun 2025 10:00:43 +0000
Manifest this update: Sat 07 Jun 2025 10:00:43 +0000
Manifest next update: Sun 08 Jun 2025 10:00:43 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: qPA4EnXRc40P3VGeQYeqW1RVsJrkpJSSfiSpllVNvZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e3:de:f0:5e:a8:c1:b8:d7:38:57:c8:b5:c0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jun 7 10:00:43 2025 GMT
Not After : Jun 8 10:00:43 2025 GMT
Subject: CN=53b9884581be7a0e78f91fd317a70141e6a917ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:ca:7a:c6:1c:15:83:0e:f3:1b:90:c0:ed:
81:cf:a0:c0:62:af:dd:85:9d:f6:86:58:89:58:72:
f7:c6:07:8a:f6:d7:85:a4:dd:3e:90:e3:d6:b8:3c:
58:ae:b5:83:56:27:e9:09:f1:84:a3:d1:27:1a:ef:
6d:3c:7a:09:e1:f1:43:9e:d4:0e:b8:f0:af:d5:f6:
4e:6e:c5:fa:bf:53:fd:20:8b:4b:25:54:8b:e6:e8:
aa:43:1e:38:e9:57:ce:6c:16:61:71:e0:be:a1:db:
99:bc:33:22:1d:bd:d9:d4:06:72:7c:db:f9:c8:21:
51:f9:91:65:f7:fe:ee:30:7b:5b:09:30:ed:c6:ca:
e6:4a:34:b6:fa:92:09:7e:59:e3:d5:29:a8:bc:dd:
a9:e1:69:92:a8:2b:78:02:2d:f0:b1:44:17:ec:c2:
c0:13:27:bd:3b:d4:68:f4:8e:19:42:52:df:95:27:
8e:7d:b5:45:86:d9:43:67:42:0d:bd:08:48:0a:9a:
39:59:15:e1:d9:e6:f0:e1:78:11:6c:65:ca:4d:fa:
22:05:9b:23:9f:07:54:0e:05:ca:c7:23:12:4c:a1:
d0:6e:1c:4b:b9:33:f0:e6:3f:a5:24:c9:bc:84:c5:
ac:ef:f8:39:8c:8c:26:e9:ba:cb:22:c7:51:89:cb:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:88:45:81:BE:7A:0E:78:F9:1F:D3:17:A7:01:41:E6:A9:17:AC
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:56:2e:84:4e:d1:80:0b:63:a8:39:d1:66:7e:55:a1:53:36:
46:c8:0c:1f:c7:f5:7f:b8:78:c1:fa:84:a1:80:7a:c9:ca:e2:
ad:38:7f:9b:1b:15:8c:25:7a:00:a2:d5:69:02:ac:41:75:3a:
f0:ad:51:b9:30:26:93:2a:7a:46:9d:79:5f:51:3e:5d:38:f0:
f3:3a:f1:76:c7:9f:e9:92:03:e8:5d:0c:e7:3c:de:76:5d:54:
f5:13:22:c5:68:c2:3d:52:a6:13:0f:66:36:52:72:fd:0d:73:
1c:38:fa:2b:ce:41:b0:af:50:75:ea:fd:a1:4f:c8:a2:26:7a:
52:a2:fd:2e:05:b7:43:bf:c9:ab:59:5d:df:ff:fb:e3:a5:62:
29:eb:cd:10:4a:82:0f:b5:6d:9e:f5:f8:b9:9c:1b:88:f4:21:
fa:e5:85:5b:d6:9a:dd:2d:78:03:e7:ef:cd:df:92:87:d8:2a:
45:2b:dd:aa:f7:26:53:4c:06:41:04:1a:ef:4e:b7:ed:68:d1:
8d:f7:d5:f6:c9:4c:57:00:20:80:84:e1:3e:40:b5:64:6e:42:
88:bd:1d:1c:de:2c:37:21:e4:78:e2:90:ec:ec:fc:ae:34:07:
60:d9:81:5a:6d:3c:57:59:70:e3:79:6a:69:f4:80:8b:0e:d4:
89:7f:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:22 2025 by rpki-client