Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: Fsq26gurJkvT5hZ/jZphCgyYqzr1GQdz8DwOjJv4RPc=
Subject key identifier: CE:F9:E8:60:AC:47:12:6F:30:A7:64:10:E4:36:83:E0:5D:EB:F1:7A
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 019A25C1D599281B058C959D726C9B2BB574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 1629
Signing time: Mon 27 Oct 2025 13:00:51 +0000
Manifest this update: Mon 27 Oct 2025 13:00:51 +0000
Manifest next update: Tue 28 Oct 2025 13:00:51 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: 7Su97yjR+CBGoNX1zcjRPgHsDCniPIuMSEbi/tMFYv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:d5:99:28:1b:05:8c:95:9d:72:6c:9b:2b:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Oct 27 13:00:51 2025 GMT
Not After : Oct 28 13:00:51 2025 GMT
Subject: CN=cef9e860ac47126f30a76410e43683e05debf17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:48:d4:95:9c:91:65:e9:e9:eb:1e:8b:93:
57:c8:a5:32:2c:82:fc:b0:91:d2:a1:ae:20:96:2b:
9b:56:e3:6c:91:38:c1:0e:3a:4b:02:a7:7d:e6:dd:
5a:a2:38:78:bf:d4:c0:e0:75:1b:f3:4d:16:04:35:
34:f9:0f:c5:e8:89:c7:b2:52:10:74:f8:22:c8:65:
6d:94:c9:e3:11:e6:30:9f:41:e0:7a:02:63:eb:d9:
0d:5f:b7:27:01:20:30:8f:5a:02:70:67:42:41:6e:
4e:6a:80:d8:51:c5:f8:30:08:2c:8d:de:97:98:b9:
46:14:50:b3:f7:42:9c:2d:04:25:5a:35:fa:81:60:
1b:04:c5:4e:ae:09:89:b1:b2:8a:90:6e:61:01:23:
3b:87:54:18:6f:ec:24:be:5a:b2:c8:07:84:53:80:
df:8d:75:2e:72:33:48:72:9e:8d:e6:7a:cf:d6:33:
30:b7:99:47:2d:6a:82:a9:16:32:4a:2a:ea:5c:20:
c7:07:19:30:9f:fa:b9:c8:34:d0:9f:a6:d6:95:56:
4f:34:33:09:57:99:21:9e:83:60:db:0c:34:08:03:
9f:e5:7c:79:49:48:03:83:4a:cc:1f:3c:dd:42:8c:
7e:18:b6:76:05:05:84:3a:b1:fc:b4:e2:23:a6:08:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:E8:60:AC:47:12:6F:30:A7:64:10:E4:36:83:E0:5D:EB:F1:7A
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:92:aa:62:e3:0a:e6:f4:f3:b6:3a:2f:d0:70:b9:87:74:
fa:a6:ab:97:08:1d:c9:45:3a:e6:bc:a5:6e:e1:70:6c:cb:a8:
43:ae:47:31:36:bc:58:cf:95:da:70:46:2e:b4:59:ba:86:b9:
ad:90:c2:b3:98:7d:85:80:f9:e3:e4:25:d0:18:50:86:bf:52:
4a:48:35:e8:48:ec:4f:9e:17:cf:35:59:16:d9:d7:14:7d:ee:
2d:42:84:f9:36:54:99:a4:a0:34:c4:c3:e6:06:af:78:8b:6c:
3a:15:49:3a:5c:e9:e2:d2:2e:13:92:76:d4:71:9a:28:05:43:
fd:65:77:67:6c:dc:d7:48:d9:45:b1:9b:ed:44:31:73:3f:d6:
65:3e:15:bc:16:53:d6:2a:10:33:67:99:c1:05:ba:41:15:68:
f7:16:46:51:dc:5b:ca:c4:9c:55:51:5d:47:e6:17:25:78:8b:
d6:e2:9c:a3:d6:89:59:3b:84:52:a9:97:8e:dc:d6:3f:e2:2b:
49:36:e8:7a:ed:35:b7:fe:4c:af:42:37:34:7b:b8:f2:1c:88:
d9:8a:04:1b:83:bb:d6:1e:85:cc:60:32:ec:bc:68:ed:e7:14:
45:ef:ce:5d:9a:7b:1c:b5:ef:bb:5b:1e:86:54:46:6d:57:b3:
07:5d:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:47 2025 by rpki-client