Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: 6tpYGHG6R5P77VQ6jJP+P/QWmoemFqrJTuq/vz1zbPE=
Subject key identifier: 23:E7:CF:BF:D5:1D:54:58:A0:9D:E6:5C:32:7C:71:EF:F6:AA:A0:7A
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019A73010A6133BCDCD8B1A4509A46D846A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0EEA
Signing time: Tue 11 Nov 2025 13:00:39 +0000
Manifest this update: Tue 11 Nov 2025 13:00:39 +0000
Manifest next update: Wed 12 Nov 2025 13:00:39 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: DrTuax8Bn8UFFNMrNYkpy7w1ZKoD2VrRJ/JMN0UacPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0a:61:33:bc:dc:d8:b1:a4:50:9a:46:d8:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Nov 11 13:00:39 2025 GMT
Not After : Nov 12 13:00:39 2025 GMT
Subject: CN=23e7cfbfd51d5458a09de65c327c71eff6aaa07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:ca:74:62:f2:63:85:ba:ca:2a:79:11:1c:
8b:3d:ea:f8:52:7f:77:59:64:cc:11:08:0c:0f:df:
95:7e:a1:95:86:ea:22:f4:f4:0d:5d:f8:d3:fe:cd:
a7:19:c0:37:b8:32:85:af:3d:17:be:0e:69:eb:96:
e2:d6:61:30:4e:73:68:4f:c5:a9:94:8f:58:0e:ae:
c7:28:c9:f5:71:4b:20:0b:5f:12:ef:c0:ae:27:2d:
1d:10:93:e0:ba:49:22:f6:e6:6e:5c:d9:0d:7f:45:
9c:b1:1a:71:80:b7:db:d5:b0:da:c1:ea:e4:27:35:
00:27:c8:05:4b:5b:58:a7:9f:7e:a6:a8:b2:29:a7:
6e:eb:78:5d:80:e1:94:71:c0:20:5b:26:a3:6e:0c:
2a:e6:34:ed:86:a7:26:ba:b2:26:f5:a5:83:a4:74:
18:d5:c8:b9:37:57:86:04:08:70:4f:f6:a8:f3:e6:
19:29:fd:5e:22:19:7d:57:ce:f6:75:a2:35:93:30:
14:2d:6c:ed:31:50:02:78:09:ff:c5:1c:00:81:94:
c1:33:2d:ea:83:05:f9:8f:34:6c:ac:6b:60:76:0e:
0b:78:be:f4:c0:9b:e2:50:55:a0:a6:f2:a8:37:fe:
d6:38:2c:da:d8:97:b5:e9:fd:54:40:be:ed:16:64:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:CF:BF:D5:1D:54:58:A0:9D:E6:5C:32:7C:71:EF:F6:AA:A0:7A
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:1f:e1:e9:25:d2:cc:d0:c9:91:43:ec:3d:f2:43:67:91:
65:69:8a:4f:e9:50:e9:bd:d7:3a:61:9c:e5:c8:d8:1d:4d:b7:
13:7a:f7:84:b0:cd:f4:bb:14:c7:ae:a3:12:86:e4:d9:b7:72:
34:a4:34:f4:76:4f:42:d1:c9:88:a3:7a:c3:33:59:6c:2d:1a:
44:b1:3b:c5:97:1b:f8:f0:ba:f7:ce:34:6b:04:96:d0:9f:ab:
87:88:25:0c:a8:c1:a5:39:46:25:78:cb:6c:77:e3:1e:d8:81:
89:32:e5:13:9b:38:7d:36:5a:c5:c3:fd:8a:89:72:cb:a4:13:
bc:c1:6c:6f:a7:81:91:1a:08:59:18:6e:14:a2:4d:ee:dc:12:
c9:46:bb:e5:c7:b9:74:b3:88:d0:0f:bb:b7:cc:de:ae:39:d0:
90:2b:81:4b:94:de:21:80:35:85:68:b0:a6:de:a8:0a:e2:c7:
2d:5e:d1:f6:0f:45:3a:54:47:f5:e3:73:f4:7f:78:2e:ae:5c:
0d:d1:bf:e7:27:83:1d:62:e1:59:0b:46:bf:39:ee:31:32:31:
e5:81:e3:89:23:2c:d9:aa:31:9e:c6:cd:35:b4:91:81:28:70:
a2:e7:d8:d2:7f:8d:4a:70:17:b7:11:3f:df:60:04:b8:e3:40:
1c:0a:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:34 2025 by rpki-client