Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: UBSozyZDeR/LK/jI2CD6WBn58uMSL7ohHFXMQJe2ibg=
Subject key identifier: AF:0F:65:72:FE:21:5C:45:2C:D7:91:F9:4F:30:51:64:E9:6B:47:5C
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019A71B8F96627E46CA9BD4808DE82B3B97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 118E
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: t3DznV1MzGUTDrJ7Ue88qdInDapSFEN204MOp2Ek6hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f9:66:27:e4:6c:a9:bd:48:08:de:82:b3:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=af0f6572fe215c452cd791f94f305164e96b475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:dd:61:5f:9b:ad:da:89:5c:df:05:b9:cb:
54:02:59:10:f6:ac:f0:e6:09:0e:e0:0c:d2:67:91:
a3:cb:95:28:80:1e:30:3c:11:e3:ea:8b:95:d3:3d:
9f:3b:25:65:d6:82:5c:d0:aa:52:64:71:98:d3:18:
c5:ef:1d:b2:d8:23:47:4a:05:9c:c2:5f:e2:ea:ba:
63:d7:cb:46:51:34:f4:74:19:fc:62:4a:68:e7:78:
c5:a3:6b:fa:a6:5e:2b:e1:8d:ec:46:ed:98:53:ae:
80:96:72:77:c0:c0:e9:2f:5e:2b:07:6d:34:13:d6:
86:09:17:70:c5:c6:8d:ca:cb:93:65:69:94:81:2e:
ea:3a:b0:69:8d:fe:4d:ca:4c:cd:bf:4c:7f:fd:f9:
eb:07:a1:2b:7b:cc:37:9c:8e:96:74:f4:18:04:83:
b8:a2:0e:36:f7:75:1c:b9:35:e0:4b:c6:63:fa:d6:
99:6c:4e:ac:c6:72:ba:33:06:c0:24:aa:19:2f:3a:
b7:45:b9:25:33:33:b4:dc:81:f0:5b:28:4f:fb:6b:
8e:63:44:43:1a:fa:c0:a5:8a:56:00:d0:29:6d:28:
7b:60:b4:78:9f:c8:6c:0c:e6:41:58:2a:55:81:f5:
8b:51:76:fa:e5:52:7b:5d:51:ad:d0:f3:a1:8c:df:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:65:72:FE:21:5C:45:2C:D7:91:F9:4F:30:51:64:E9:6B:47:5C
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:55:33:d1:1a:0b:d7:12:0b:54:c3:d9:3f:e1:92:cc:70:
08:1a:5d:a3:76:d5:98:4d:9f:6a:8d:ec:f3:25:20:d2:8d:76:
d2:42:d6:b6:7d:80:7c:fa:74:f2:40:5c:29:4a:fd:aa:56:e3:
c9:76:eb:ec:ea:f5:50:70:64:54:0d:d2:45:d3:20:d4:a7:86:
91:96:b8:e0:64:3b:83:64:d2:a9:2f:2d:a4:76:5e:7b:e9:bc:
4f:6a:b4:24:e6:da:57:3e:c0:61:d1:ad:94:95:47:e4:e8:4d:
33:1c:4c:6c:8c:69:31:82:f2:0a:89:43:06:fa:83:4f:56:b5:
77:29:7a:60:68:fd:89:03:d1:65:9c:6d:e7:40:20:f5:9d:73:
b8:f6:03:e5:48:27:dd:27:3b:78:92:4a:cc:3e:97:2c:4d:76:
a7:87:e4:90:6d:0c:0c:ad:0b:bb:67:a1:90:7f:61:dd:23:26:
62:0a:3d:38:15:ab:c0:3b:83:82:e8:02:b0:84:b9:41:64:20:
57:5b:97:77:c6:a6:e5:3b:93:1b:a5:82:91:b4:90:87:f9:5d:
3b:0b:de:e7:d0:05:02:42:fc:a0:d5:fd:12:b9:32:34:c5:d1:
7e:cf:ac:49:e7:9b:c8:7a:8a:09:80:77:c5:36:b1:29:e7:bd:
33:0b:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client