Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: BNK1ryXc7F4X+sn6pUwXBvAzocvLTtOivpBmkkgQFTw=
Subject key identifier: 4D:81:3F:A3:1B:06:3B:AF:DA:20:74:F9:93:A1:78:EE:2A:F7:51:20
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 0197B70E64F3E47950F2FBAF9AC2793C36A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0607
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: T/YlDGUYIH0X9gMay6LzLQygmIxlxekx7bnmyDqxwRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:64:f3:e4:79:50:f2:fb:af:9a:c2:79:3c:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=4d813fa31b063bafda2074f993a178ee2af75120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:bc:6c:c2:3b:a1:56:e8:f1:0e:b6:a1:70:
37:fe:ea:b8:5e:70:f7:6f:d9:94:10:22:6c:6b:ce:
4f:fc:c2:5e:aa:cf:54:d2:8d:1f:0e:6f:a6:e8:a3:
ab:a2:20:14:e4:ef:3b:b3:3a:43:6b:e7:1a:d0:21:
8f:8e:2f:83:4f:9e:dd:f8:66:57:1f:a9:f4:57:09:
f0:49:2d:8d:db:c9:52:a7:e7:6e:68:8b:fd:37:08:
c2:bb:9b:a2:20:00:ba:6e:96:9d:37:95:8b:dd:a5:
bc:f5:6a:77:ed:4e:f2:9f:c4:18:b7:21:7d:4b:5f:
6c:2d:c0:84:ba:e8:b2:c9:1b:a0:08:11:85:79:b0:
53:06:ce:b5:5e:f0:04:d4:37:2a:69:29:b3:b1:e8:
dd:ca:ff:41:6a:df:9c:63:64:b2:5f:3d:1a:f3:e4:
1b:ad:7a:8c:b2:19:1c:d9:bb:cb:d3:7c:23:2f:32:
c0:e7:5f:9a:25:99:08:ed:04:38:b3:e0:70:ea:61:
cb:7b:ef:6d:f8:10:30:1c:cf:e1:37:4a:dd:39:7a:
ec:c7:b0:b2:c2:15:1f:43:91:52:c8:25:ff:98:c9:
ed:d4:ca:37:31:6e:59:27:c7:d6:78:c7:47:f8:d8:
ca:a7:7e:81:7e:13:99:fe:26:99:b3:a5:db:6c:78:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:3F:A3:1B:06:3B:AF:DA:20:74:F9:93:A1:78:EE:2A:F7:51:20
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:e4:fb:cb:3f:80:b3:e9:74:3e:9b:8a:34:e7:95:d3:fd:
a9:3d:25:95:6e:3b:78:79:c4:cc:63:0f:5d:11:c4:0e:b7:5e:
a9:fe:a2:93:1c:b7:ab:37:88:bf:6e:4e:d5:f4:98:8e:2b:9a:
75:08:02:6c:1d:1f:29:0a:68:75:2b:c4:a3:fc:bc:f8:6a:39:
e2:cd:ee:15:c0:ee:d3:fb:61:fd:af:79:22:be:36:2b:47:84:
c0:3b:87:fb:07:9d:b6:0a:7b:7f:cd:d8:49:50:ba:11:64:1f:
0f:f1:bd:61:ae:41:b5:e0:56:0d:49:08:4a:9d:60:b0:4d:a2:
27:0b:6b:22:28:5a:c1:66:b8:df:a3:86:a1:22:c1:89:86:60:
f9:bd:04:f9:e4:c7:08:df:60:0b:a5:10:e8:a2:d7:7d:2e:b3:
bc:2e:29:dd:ea:eb:c9:ee:7c:88:4a:5b:71:39:19:03:28:2c:
4c:b3:04:ce:f1:b4:25:59:8d:a0:23:94:d5:8f:cf:9d:78:91:
4d:64:15:b4:80:cd:15:82:d9:17:94:33:29:bb:53:2e:38:e3:
d9:a4:6d:ce:33:e6:ba:5e:73:ed:c6:15:58:5e:f9:98:c8:bd:
a5:b2:4e:8a:3c:fc:2d:22:55:6f:9d:c4:26:25:49:3c:ee:81:
0c:9f:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:23 2025 by rpki-client