Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: VxSRhe0Ygv8pKBKr+PaETLZEFOaBevYsuu6/9vG9+Jo=
Subject key identifier: DF:3F:F8:46:77:36:15:35:01:30:1B:D6:E4:70:32:0D:01:C6:F1:9C
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 0197B70EF3E9B312BD51661BB3EEB2304DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0A68
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: 9jwAgX+mG5fYk5P+9otHyyRJH3l5aQz4R9QuhW3wK7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f3:e9:b3:12:bd:51:66:1b:b3:ee:b2:30:4d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=df3ff8467736153501301bd6e470320d01c6f19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:d2:af:3f:3b:b1:da:bf:cc:87:25:ce:a7:
73:13:4d:e2:00:b6:e1:ea:5f:49:e1:52:47:14:8b:
59:06:11:6a:c3:29:de:11:0c:1f:bf:5d:e4:47:11:
ac:9d:b1:2d:ea:14:5b:99:a4:81:a4:dc:c9:91:6d:
1d:bc:22:f7:f8:dc:9f:d4:7c:a8:34:f4:43:87:ea:
5f:7b:6e:a7:4e:29:d5:8d:45:c8:47:44:3a:cd:b7:
1a:52:14:9c:f4:14:c0:af:f1:42:96:08:52:68:91:
94:cd:e1:b2:50:4d:c9:3a:bc:01:52:09:75:96:17:
07:75:e1:8d:ec:60:01:d9:30:bf:8c:8c:e3:6c:e7:
f6:dd:57:ec:b3:1a:54:a7:cd:1e:2b:ec:51:dc:bf:
ba:41:27:07:f6:68:79:6f:6a:89:f9:f1:e0:09:8b:
3a:05:45:3b:6d:fc:1e:73:14:5f:ed:74:f9:13:a3:
c1:54:1f:20:e2:3e:c3:28:03:41:9c:d6:06:27:25:
18:96:9b:17:b4:3a:d0:9c:ce:21:c1:70:74:58:f0:
4b:3a:9e:f8:5f:15:dc:3b:95:a0:22:d9:75:89:6e:
68:c0:f0:0d:3a:fa:be:94:93:e7:40:23:9a:fc:ee:
d4:dc:8a:7c:b3:57:f1:ed:86:a8:6c:89:46:a0:99:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:F8:46:77:36:15:35:01:30:1B:D6:E4:70:32:0D:01:C6:F1:9C
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:b9:66:be:db:99:6a:c0:d7:e3:f4:c1:ef:45:1f:19:cb:
9a:46:12:d5:db:d6:bb:e4:6b:22:33:7d:b1:b2:00:48:98:ac:
37:7f:db:13:8c:30:f7:be:52:bb:b0:ff:19:26:45:26:ff:d1:
de:45:66:da:cd:d1:58:13:31:a1:37:c3:b7:27:26:f7:dc:e6:
5b:1e:8b:15:a4:b9:9b:c8:d6:7a:ce:ed:af:fc:f6:ce:31:2c:
0f:bf:6e:f0:a2:b0:e0:79:25:90:03:60:df:29:d2:e9:21:5e:
1e:bd:98:c9:8c:78:0c:b5:4e:08:39:b0:49:25:5c:92:1d:f1:
87:14:c7:29:12:d7:f7:aa:3b:e6:16:d1:4d:37:4b:18:d8:38:
c3:04:a8:cf:f0:c9:91:5e:32:dc:de:19:34:4d:59:45:d7:52:
68:da:50:65:0c:3c:c9:14:7c:75:66:05:b2:76:76:70:3a:43:
d2:b6:4d:9c:9c:42:d7:9d:10:38:01:86:c5:c2:a1:16:9e:65:
b8:7a:67:80:02:5e:88:cb:f6:23:76:8d:e9:31:66:76:b2:e0:
a5:72:79:67:ed:d3:2e:52:37:9b:04:da:4b:2c:20:d6:8c:70:
97:e1:21:49:ef:88:4f:a3:58:5a:39:49:77:92:ce:ce:85:28:
62:e4:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:22 2025 by rpki-client