Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: IASOdkL8jSRb34tiPowKDUVuZIgzKMPvI2Cgvhu+kso=
Subject key identifier: 8C:0C:F7:99:23:8A:2B:DD:0C:9D:A7:CC:26:D4:87:E1:3A:9A:8D:68
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019922FA36E08D9628146B6C856638542642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0E3C
Signing time: Sun 07 Sep 2025 07:00:47 +0000
Manifest this update: Sun 07 Sep 2025 07:00:47 +0000
Manifest next update: Mon 08 Sep 2025 07:00:47 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: /PSvpebt4P5D4DP1cIlcI8L//QN/9w39rGCqgL0qo7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:36:e0:8d:96:28:14:6b:6c:85:66:38:54:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Sep 7 07:00:47 2025 GMT
Not After : Sep 8 07:00:47 2025 GMT
Subject: CN=8c0cf799238a2bdd0c9da7cc26d487e13a9a8d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:a3:02:36:d6:52:9f:f1:9f:ee:d4:bb:ae:
4d:db:f5:21:78:65:0b:c2:e0:77:53:6a:e7:51:65:
77:aa:d4:36:a1:74:27:fd:ef:85:a5:c9:26:e6:09:
67:83:15:b3:8b:f1:2e:8f:08:2c:47:97:b7:6f:97:
06:81:18:78:bc:c9:c5:6a:0c:47:21:98:7e:ec:a0:
10:ef:f4:43:9c:84:b7:c4:0c:db:b7:77:ab:76:9b:
07:f3:cf:6e:a9:a0:7e:ce:85:49:39:08:ba:b5:c1:
ad:68:6f:3a:34:a0:29:3c:17:1b:e6:34:ff:57:51:
32:84:1c:82:29:73:3e:64:d1:27:7f:4a:c6:6d:08:
db:0e:ee:f2:31:32:b2:71:fd:05:ea:04:a7:da:c4:
e3:d7:94:3e:48:42:37:47:7c:a6:f3:fe:7b:ff:f7:
ce:d6:cb:b9:b6:a6:25:14:fe:ef:6c:a8:5d:34:91:
73:95:b6:05:ad:57:d0:f9:43:aa:ec:1b:41:27:ae:
cd:e4:fe:3f:1d:09:02:f2:a5:a5:7e:d6:44:4d:af:
5b:65:9f:b8:21:c9:5d:8d:92:41:36:4d:ef:7d:54:
e0:1b:c6:3b:6a:b1:4f:58:cf:1a:16:d2:a6:fa:8f:
ea:e5:2a:a6:18:8b:af:d0:7f:08:26:45:82:70:b6:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:F7:99:23:8A:2B:DD:0C:9D:A7:CC:26:D4:87:E1:3A:9A:8D:68
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:49:77:98:c5:66:1c:d3:09:38:1b:67:d8:1e:32:88:50:
50:4b:2e:27:65:36:42:7e:49:0e:8f:eb:6b:00:87:1f:81:d7:
0d:36:e6:8b:62:52:70:56:a9:4c:86:06:f6:49:47:37:3c:64:
4f:d6:4a:ae:ef:66:c0:d7:f5:64:08:fd:9e:22:b9:ec:87:3f:
1e:24:c1:09:d0:9f:1a:c2:b0:9a:48:d1:f1:54:f4:54:d6:b6:
19:09:74:96:95:bc:ce:9e:5e:8d:3e:25:ab:9c:85:32:71:9d:
fa:6c:e3:f3:b0:df:92:a3:ab:27:66:3e:93:b4:1b:09:2e:21:
a3:a9:47:09:56:96:c4:2c:5f:67:e5:b9:cf:67:9e:c2:a5:0e:
05:e9:69:76:4d:7a:b1:87:19:71:4e:a1:18:c3:29:f4:f1:89:
09:1b:46:9c:06:97:94:ab:06:b2:a4:b2:6a:38:fb:33:fa:2d:
7d:ee:e5:1f:4a:c1:ff:e1:75:b0:ef:b5:d1:61:e7:6c:7b:28:
f5:27:d1:b0:a7:0b:51:84:bf:44:72:67:64:74:90:a9:91:fb:
ef:c5:d9:11:04:e8:18:1c:46:4a:da:42:d2:3e:b2:10:b0:0b:
29:c9:ed:da:ac:4b:6d:93:f3:b8:fe:04:bd:fe:00:3f:03:7f:
2d:ef:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:06 2025 by rpki-client