Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: 9qCWHN3+TXRtv/c1OIwJVbqaU8Wi8A2B8959RMbtluk=
Subject key identifier: AF:7E:A0:70:9D:F1:9D:84:77:51:75:72:B4:3B:A8:B7:0F:8B:A3:C5
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0199EDC0EE6ED565845A4D4D50EE68D08757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 11B7
Signing time: Thu 16 Oct 2025 16:01:08 +0000
Manifest this update: Thu 16 Oct 2025 16:01:08 +0000
Manifest next update: Fri 17 Oct 2025 16:01:08 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: ZIBMyYmEVQNMJNSgnfDP9bnuAlvxzz8aJe3I1/cejfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:c0:ee:6e:d5:65:84:5a:4d:4d:50:ee:68:d0:87:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Oct 16 16:01:08 2025 GMT
Not After : Oct 17 16:01:08 2025 GMT
Subject: CN=af7ea0709df19d8477517572b43ba8b70f8ba3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:3a:63:78:3c:27:3e:60:5f:70:98:cd:8d:
da:99:78:95:a3:7c:47:d3:36:00:15:97:94:1f:91:
ac:8d:71:ee:3b:2c:31:52:f6:2f:a2:5f:27:74:c5:
74:a8:ef:11:71:89:09:bf:b5:37:a1:33:f3:48:f5:
9d:fe:49:8c:02:22:d0:08:c6:f9:81:aa:f5:54:18:
4c:e4:e0:45:56:1f:bd:1a:dd:e5:bd:c6:00:b3:a3:
76:a0:51:81:84:17:7c:1c:2b:a9:b1:85:ca:25:60:
d5:2e:9a:74:aa:e1:b1:6b:27:0f:e4:19:e7:43:c4:
22:7e:0f:03:ec:20:74:2a:9f:8c:55:f6:3e:e7:b9:
21:8d:ed:0d:a2:80:00:ab:0a:b6:2e:71:e9:24:81:
b5:13:61:0b:a6:24:cf:d8:b9:3c:4c:6a:e7:96:3c:
f8:91:0e:a2:a3:f0:27:70:96:f1:7b:bc:9d:7e:5e:
c1:44:9a:80:ad:cb:f2:7c:6c:72:8a:a9:ae:25:b1:
49:6d:70:9c:82:c6:59:1e:0a:bf:34:53:05:a3:83:
b5:5a:6f:20:00:0f:8d:28:e2:0c:1e:fa:80:c5:d8:
a8:21:2a:ae:84:a4:2c:b8:00:14:88:3e:29:aa:2a:
98:cf:f5:5c:8a:45:c9:c3:c6:0b:c2:36:b1:ee:cf:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7E:A0:70:9D:F1:9D:84:77:51:75:72:B4:3B:A8:B7:0F:8B:A3:C5
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:26:d5:a0:69:6a:90:fc:2b:98:3b:54:d3:c8:99:b6:7c:
f8:6c:73:ac:95:bc:0c:f4:de:77:82:47:60:ff:22:2b:e7:0f:
80:ed:8d:41:3d:59:92:d7:08:a7:cc:7e:70:97:d6:bf:92:7e:
c8:88:4f:4a:1d:c9:a9:82:46:fc:04:ed:0e:dd:a0:2f:d5:75:
c9:0f:64:b6:0f:93:1d:f4:4d:a7:d3:e4:38:66:f9:5c:ba:b4:
96:e5:3a:36:b5:59:66:37:2c:88:f2:9e:9a:a9:6a:29:d0:ec:
ce:82:73:f7:76:a5:6b:b1:35:de:47:0c:27:df:7a:5d:43:2e:
05:e4:13:3b:d1:37:bc:29:79:86:c0:1c:27:0d:bb:18:48:dc:
cf:a1:40:12:96:1f:24:c8:8f:45:5d:a1:24:35:ad:e5:4e:19:
2f:f2:fc:7a:1d:ae:05:71:3c:6a:5a:39:b4:af:d5:2c:a9:ac:
1e:f7:05:3c:76:70:cf:60:ce:66:c4:f2:cb:69:64:6d:4a:35:
63:69:d5:8d:87:79:85:a2:1a:d7:82:48:1c:bb:95:f3:9a:bf:
2a:d0:64:e5:2e:32:64:52:5e:3b:81:e3:c5:12:60:1d:cc:2d:
5f:da:ad:6c:57:0a:bd:c1:83:52:ef:41:45:62:e8:63:ce:64:
c9:ca:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 23:00:24 2025 by rpki-client