Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: kIPESIr1qI6/Upi2//soF14N4SWLV8XDY0Z08A/0L2o=
Subject key identifier: 1C:07:37:4F:B6:B6:5C:4B:FA:E8:E1:5F:55:E5:4B:53:6D:83:C4:22
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 0199FC585E0C01BBFA57C156DC659FBB54D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0B95
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: 77hzt4zxIFY6uy+0aN5+/gsWV/ImmAFmMSThQOb9nN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5e:0c:01:bb:fa:57:c1:56:dc:65:9f:bb:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=1c07374fb6b65c4bfae8e15f55e54b536d83c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:37:c8:79:b4:27:90:88:8c:98:2b:69:81:
34:01:dd:13:0f:86:17:fa:89:c0:82:33:f3:5c:ae:
90:4a:98:5d:44:16:bf:ab:3e:52:6d:4b:a2:c6:0f:
8f:ab:04:0f:2d:9f:8e:db:f6:d1:6b:b3:9e:dc:1f:
a9:16:36:0b:31:6c:71:76:bc:5a:24:98:a8:54:d5:
e4:b5:94:6c:b0:99:b7:0c:12:68:38:56:78:5d:a8:
14:40:76:15:32:26:87:f0:57:4b:07:82:21:56:9f:
15:a7:fe:f6:e0:3a:90:2f:0a:a2:1b:b7:1d:d3:48:
85:45:7f:80:b6:f5:df:20:83:b2:ef:a8:73:cf:91:
8d:f8:4b:d0:7b:ba:67:79:ba:da:b5:a4:a4:73:f5:
92:98:39:b3:ab:34:f3:96:57:b6:08:ad:15:88:4b:
45:b7:62:48:9a:62:0b:70:ae:27:45:40:79:b4:77:
bc:8b:52:86:f6:f0:5b:72:2b:31:15:e2:37:58:4b:
ea:e1:59:56:9f:3e:b9:e8:1f:e4:8b:52:15:5f:30:
8d:a1:37:00:4f:57:43:50:b5:7f:2f:6a:28:6d:15:
c6:3c:31:25:0f:34:d4:0b:1d:cd:44:d2:a2:40:f9:
c4:52:e0:33:94:79:9c:97:96:5f:e5:31:2a:ca:db:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:37:4F:B6:B6:5C:4B:FA:E8:E1:5F:55:E5:4B:53:6D:83:C4:22
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:b9:31:ba:f8:5f:72:ba:c1:b4:02:7c:db:17:22:1e:aa:
d1:84:96:54:a6:03:e7:8d:f3:84:cf:9d:12:2f:57:85:5a:d4:
5d:b1:1c:de:7d:ce:15:bd:21:e7:0e:f1:e9:a0:78:87:47:eb:
ee:d2:b1:59:e6:93:a2:d4:7a:82:d5:58:c9:5e:c2:4f:de:69:
63:df:72:17:75:74:8c:81:95:54:ba:7c:fa:2a:e7:c4:7b:02:
ce:5d:99:fe:b3:9b:11:1c:1d:b1:ec:ca:2c:e5:d5:be:15:f2:
15:27:79:8c:b7:5e:46:e6:a5:e9:36:47:01:65:35:29:8a:29:
87:14:23:95:4e:58:cb:c6:ca:bb:80:68:10:95:ec:59:25:ff:
3f:35:fd:82:1c:0e:03:bf:72:63:b8:0f:1c:56:99:f9:20:88:
c7:4f:c5:36:9f:d3:ab:d8:2a:c9:d2:07:2c:62:db:f2:3b:2a:
8e:29:a3:bd:75:b7:18:5f:a9:6c:e7:ca:37:be:8b:49:13:d8:
7d:d3:6f:16:bd:5b:8e:f2:3d:e8:84:84:a0:16:9d:d0:6a:37:
38:53:d2:b2:e7:37:a0:ef:22:e7:4d:03:38:16:45:30:5f:4d:
e7:a0:ff:bb:3c:28:e2:19:70:3c:43:a0:f7:a9:85:ac:21:b5:
eb:30:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:58 2025 by rpki-client