Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: nZr6VNhwj8cM/nftzak41vL/JZ1+Cd9g9gDLN4zNLZQ=
Subject key identifier: 95:92:0E:CF:89:3E:D4:B2:BE:12:67:23:11:21:BF:C5:0B:8F:6C:8C
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 0198D4DFE6D3EE2AD96CF87DE8D2CA7402D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0AFC
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: IN9FCNCD3Cu0VifzX2EJNt9nXxvcU0Wfsnkr+yaIMMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e6:d3:ee:2a:d9:6c:f8:7d:e8:d2:ca:74:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=95920ecf893ed4b2be1267231121bfc50b8f6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:02:6e:c9:e0:1f:a2:fe:5c:00:1d:f9:88:
32:ca:a7:e0:f1:da:a3:f3:85:fc:8b:28:a4:f1:8b:
93:3b:78:28:ea:c2:12:77:fe:f5:cf:f2:d1:36:80:
5e:23:74:20:1e:ed:f4:f7:72:a4:41:8c:34:24:27:
63:95:a9:56:8f:f3:fd:ea:10:2b:75:40:64:4d:8a:
23:d9:69:7f:f8:9d:8f:cb:e3:ca:57:e3:24:f0:f8:
01:6b:17:06:29:1b:d6:c5:a6:93:b8:a4:03:9f:f8:
48:61:c9:49:25:c6:68:f3:7b:56:67:4d:ca:ee:59:
dd:e4:8f:ea:c0:58:02:d8:31:15:44:23:fe:2a:67:
1d:e5:c8:28:23:95:37:3e:fe:0e:89:2c:aa:7b:43:
91:b7:d1:78:cb:62:f6:2e:ba:ab:87:e3:15:bb:9d:
3a:88:80:ab:e5:98:93:b7:f8:b7:bf:0e:38:1d:18:
24:ad:74:a0:d3:93:e0:cf:f2:4b:73:a5:4b:e6:bc:
32:97:68:2a:b6:49:52:7f:38:c3:d8:36:0c:a1:aa:
70:65:b4:da:c9:16:d0:2f:ca:7d:da:2e:a4:58:00:
03:41:2c:9f:2c:d4:2b:be:bc:a9:4c:c1:06:18:f2:
9a:da:5f:64:c9:86:94:c1:7c:c5:96:4e:3f:af:67:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:0E:CF:89:3E:D4:B2:BE:12:67:23:11:21:BF:C5:0B:8F:6C:8C
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:60:17:8c:37:af:94:f7:c4:48:bc:51:03:1d:ec:34:eb:
1a:73:43:98:bf:e1:a2:33:f9:b6:12:10:fe:4f:3d:17:6d:13:
7b:ea:95:87:cb:f6:d4:7e:34:d3:78:bd:45:a1:c8:0d:65:eb:
7d:a9:4d:3d:56:ee:cb:24:83:97:19:7a:47:ea:97:b3:fb:2e:
32:90:3e:58:be:1a:98:bf:bf:0d:5e:1d:0b:7f:ac:24:3b:66:
07:78:a4:71:5c:07:8b:ab:04:92:61:4c:fe:71:cd:9a:d9:a9:
00:45:b5:fd:53:c5:64:00:b8:45:af:0f:c1:6d:c4:ae:49:5f:
08:a2:22:91:de:85:f2:a0:fc:46:8f:9d:44:a8:f2:ee:bb:0c:
35:e0:1d:77:ab:10:e3:da:b2:1c:49:79:39:67:74:64:b6:7b:
0d:52:a9:e8:f8:b0:3d:0d:b5:23:f8:47:f4:b8:9a:4e:ef:2a:
65:c2:1a:4b:4e:17:f6:cd:b4:3f:53:45:fa:6b:a7:35:b2:d1:
ef:b7:a9:94:15:ab:27:39:78:11:b3:7e:15:2d:10:35:7b:3d:
2e:ea:ed:00:8b:9d:8e:28:9d:b6:41:c8:b8:85:c5:bb:a8:23:
3b:8c:0a:28:5a:f2:7e:2b:e9:91:cf:9c:7b:66:99:0c:99:0c:
bd:f3:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:18 2025 by rpki-client