Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: EGNUNrBn5MiKwSXkDn2VIJCyycY4voIcKbAQT22MgWw=
Subject key identifier: 60:F1:A3:56:D2:86:B7:FF:62:50:7F:01:38:9D:F0:8C:F0:71:20:DD
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 0198D6CCEBB29EDFAEC47B1DF78A17D4AEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 069C
Signing time: Sat 23 Aug 2025 12:00:10 +0000
Manifest this update: Sat 23 Aug 2025 12:00:10 +0000
Manifest next update: Sun 24 Aug 2025 12:00:10 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: xZ0XkyWry+YQMC374GhndwtikbWz/JKI8cK613LN/YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:eb:b2:9e:df:ae:c4:7b:1d:f7:8a:17:d4:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Aug 23 12:00:10 2025 GMT
Not After : Aug 24 12:00:10 2025 GMT
Subject: CN=60f1a356d286b7ff62507f01389df08cf07120dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:bb:58:37:55:9e:3c:09:30:2f:38:be:40:
ce:db:29:18:ad:55:a4:51:ba:68:dd:0e:5a:8e:23:
ba:19:5e:b9:b6:be:9c:da:eb:d0:13:71:66:00:56:
3d:a5:54:bb:4d:30:3a:6c:dd:ec:0e:75:a8:32:67:
7c:da:37:68:4f:4b:9c:71:5d:97:73:ed:78:ae:47:
da:3c:b7:9d:3a:8c:3a:f2:4c:62:cc:54:5e:41:b5:
cb:ae:ff:01:9f:54:bf:e4:26:fe:79:85:5a:3a:14:
82:71:9f:14:39:6d:15:3e:ff:ef:b0:87:08:0e:e8:
e0:71:98:59:9c:8f:72:01:d7:52:00:95:c9:05:c2:
0f:7c:44:08:ef:47:ed:cf:96:9f:63:70:a8:24:36:
a5:3e:46:ce:5a:e9:97:8d:e3:5c:7d:35:f5:2d:0c:
13:70:6d:d0:89:0b:61:7f:33:ba:30:e2:44:55:ff:
ea:04:53:67:f4:fb:d4:bc:53:0b:fa:dc:01:c7:8c:
a3:e5:58:50:5d:27:b9:b3:4c:24:09:23:1f:cc:55:
1d:e7:92:78:94:0e:c9:68:e8:42:8c:fe:fc:af:f4:
49:0b:ab:58:68:0c:8c:6a:4a:26:53:e8:cf:f9:1f:
ee:ab:5b:7f:f0:d8:23:2f:d1:45:33:62:c6:07:39:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:A3:56:D2:86:B7:FF:62:50:7F:01:38:9D:F0:8C:F0:71:20:DD
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:6c:a8:fe:b5:6d:e2:53:3a:6e:86:d3:5e:75:65:47:e4:
51:29:40:36:95:06:08:19:28:0e:05:e2:ae:ce:f1:73:91:46:
19:75:a3:68:72:67:90:84:ae:f3:d8:b8:28:e5:1f:02:01:9c:
e7:a6:e5:a1:a4:78:17:3c:91:74:f4:49:f9:e2:fd:0a:d6:d5:
36:24:d0:7f:0e:78:6e:5a:16:c0:b3:0c:f3:58:e0:5a:26:a0:
dd:5d:61:53:d1:db:90:68:57:42:ed:4d:ba:59:a3:cd:5f:c4:
2f:45:11:5c:74:cd:0f:95:2c:8a:58:e4:f3:a4:3d:3e:91:39:
03:87:02:f3:a3:7b:4f:64:5d:9a:a9:6a:f8:f7:fe:78:90:b7:
d5:c7:8b:9b:d3:ce:f0:9b:a6:bd:ff:0e:6b:b4:45:d2:1d:68:
15:78:38:59:0f:77:c7:b9:f1:29:ff:e6:81:30:3d:1d:5f:58:
e5:b3:9c:f3:fe:72:19:b7:13:29:ca:20:1d:c1:76:f2:ff:5a:
8b:40:7c:98:21:04:0b:aa:68:20:e5:9b:f6:c1:fc:62:59:21:
40:de:57:72:01:48:5d:48:75:4b:cb:c1:80:16:cb:db:7e:d5:
06:0d:c6:58:42:b1:57:10:4e:46:10:ba:c6:f3:c1:50:98:9c:
ad:d2:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:20 2025 by rpki-client