Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: +yDkvImA56HykITum4byXCuUlA01EELVtDvmTYjnELs=
Subject key identifier: 4B:74:80:C9:1A:25:2E:DC:96:70:7C:A6:EB:FB:AC:E2:50:D5:D7:D4
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 01984D43B8678C07E533CB65192CCB9B651D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 1072
Signing time: Sun 27 Jul 2025 19:02:20 +0000
Manifest this update: Sun 27 Jul 2025 19:02:20 +0000
Manifest next update: Mon 28 Jul 2025 19:02:20 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: y8By7MZP1fYaQ6mjmKa70A7LpLZf/kWg+UlPXSrOvuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:43:b8:67:8c:07:e5:33:cb:65:19:2c:cb:9b:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Jul 27 19:02:20 2025 GMT
Not After : Jul 28 19:02:20 2025 GMT
Subject: CN=4b7480c91a252edc96707ca6ebfbace250d5d7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:89:ac:08:fc:88:f2:dd:00:93:b1:f8:be:
9d:1b:ef:f5:f3:2f:34:1f:11:ef:35:a3:5f:e2:d1:
2e:12:73:5f:5b:b0:6e:59:f6:fd:2f:4b:e5:b6:81:
8a:be:8e:cb:eb:84:64:27:c0:f6:53:b0:4a:d7:8a:
e1:2f:85:88:67:8b:cd:e6:be:66:54:c8:16:1b:61:
df:b3:8e:c6:0e:d6:df:ae:c3:c5:b1:97:22:52:f5:
cd:a3:02:94:27:f5:38:aa:3d:d1:12:60:72:04:70:
b9:00:2e:f5:06:c6:4d:d6:ce:3d:c3:0d:3b:96:7a:
d7:d1:28:71:4a:ff:a5:d3:72:d7:ae:65:a5:27:b6:
9a:28:65:67:7a:5a:61:63:f8:93:6e:99:c1:bd:1d:
f5:65:ba:81:ea:66:ac:1c:8c:03:40:4b:0c:29:fe:
13:f0:e2:6a:2e:a5:da:dc:1c:34:a9:94:7d:d3:af:
b9:40:03:2b:70:04:d3:c4:37:7c:17:5f:29:02:2b:
c0:45:c9:64:e9:be:c8:b4:05:1a:5e:82:15:69:08:
8f:88:1a:0b:1a:40:7e:92:c2:6a:40:89:22:77:30:
78:c1:7e:26:c2:2e:a8:1a:9b:27:58:88:4c:d9:3c:
df:a7:bc:6e:52:3a:db:fa:39:de:92:6b:fc:a2:f8:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:80:C9:1A:25:2E:DC:96:70:7C:A6:EB:FB:AC:E2:50:D5:D7:D4
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:10:c7:19:f5:d7:27:56:45:cb:94:f6:64:0e:47:a0:8f:ab:
d7:cd:5d:a1:fd:e8:5c:ba:9b:c7:37:b2:00:a7:0f:b8:69:cc:
ea:60:d8:2f:1f:83:b1:e6:37:6e:3e:9a:9f:e8:68:69:44:4c:
12:32:d4:c2:bf:8d:c2:08:7e:b6:da:14:7c:bd:90:19:1e:f3:
90:be:4b:71:9e:53:ce:e6:1d:ed:c8:fe:93:8e:64:20:c6:0c:
5b:f1:eb:2d:0a:0f:2a:73:56:62:49:07:24:22:56:ac:38:c8:
20:4d:71:46:d6:3d:7f:d1:fc:c4:28:be:70:c1:0f:b5:74:5d:
73:78:cd:83:03:77:3c:ab:a1:39:3d:3b:b0:7e:94:fc:58:9d:
54:38:43:98:00:10:8a:d6:77:0e:fa:7c:7b:02:fb:f0:81:20:
c9:7a:04:fb:90:ca:b6:c5:bd:95:80:c7:b5:a5:e8:97:a9:a1:
f8:b5:7c:85:49:9e:be:0b:2d:86:35:da:84:de:aa:33:49:43:
55:e7:f4:5a:68:fe:2a:90:35:68:2d:5d:8e:84:12:e2:1d:69:
6f:45:2a:94:dc:e4:35:86:6a:dc:fd:90:fb:fa:2f:66:2a:b9:
62:28:3c:1d:a2:a7:50:fd:46:e4:0f:7b:ae:37:e0:62:63:df:
41:31:c1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhNQ7hnjAflM8tlGSzLm2UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwNzI3MTkwMjIwWhcNMjUwNzI4MTkwMjIwWjAzMTEwLwYDVQQD
Eyg0Yjc0ODBjOTFhMjUyZWRjOTY3MDdjYTZlYmZiYWNlMjUwZDVkN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGiJrAj8iPLdAJOx+L6dG+/18y80
HxHvNaNf4tEuEnNfW7BuWfb9L0vltoGKvo7L64RkJ8D2U7BK14rhL4WIZ4vN5r5m
VMgWG2Hfs47GDtbfrsPFsZciUvXNowKUJ/U4qj3REmByBHC5AC71BsZN1s49ww07
lnrX0ShxSv+l03LXrmWlJ7aaKGVnelphY/iTbpnBvR31ZbqB6masHIwDQEsMKf4T
8OJqLqXa3Bw0qZR906+5QAMrcATTxDd8F18pAivARclk6b7ItAUaXoIVaQiPiBoL
GkB+ksJqQIkidzB4wX4mwi6oGpsnWIhM2Tzfp7xuUjrb+jnekmv8ovjPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt0gMkaJS7clnB8puv7rOJQ1dfUMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxDHGfXX
J1ZFy5T2ZA5HoI+r181dof3oXLqbxzeyAKcPuGnM6mDYLx+DseY3bj6an+hoaURM
EjLUwr+Nwgh+ttoUfL2QGR7zkL5LcZ5TzuYd7cj+k45kIMYMW/HrLQoPKnNWYkkH
JCJWrDjIIE1xRtY9f9H8xCi+cMEPtXRdc3jNgwN3PKuhOT07sH6U/FidVDhDmAAQ
itZ3Dvp8ewL78IEgyXoE+5DKtsW9lYDHtaXol6mh+LV8hUmevgsthjXahN6qM0lD
Vef0Wmj+KpA1aC1djoQS4h1pb0UqlNzkNYZq3P2Q+/ovZiq5Yig8HaKnUP1G5A97
rjfgYmPfQTHBfg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:47:59 2025 by rpki-client