Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: jFx5AWGPPzLRVo577lJN4wADEkQHjx39nrooj5SZBng=
Subject key identifier: FC:A4:10:A3:30:3F:A5:A0:7C:92:C8:98:3D:66:32:1D:38:90:6E:65
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 0199FC5906C44EF7841FF74154A321B670C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0734
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: jK46rB+2gb/N639kiYw3dcIwEETntrOVy+tdtWfy1MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:06:c4:4e:f7:84:1f:f7:41:54:a3:21:b6:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=fca410a3303fa5a07c92c8983d66321d38906e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:61:b9:07:2c:19:6b:b0:39:0f:a1:d0:b0:
28:94:83:0b:0c:9d:36:67:81:e0:74:08:fb:71:d2:
b7:00:48:67:2b:8f:27:46:f0:62:b2:8b:57:15:60:
62:f5:7c:6f:36:16:12:3a:1d:19:73:7a:68:24:66:
26:ab:17:6e:08:18:de:ef:ed:d1:a8:40:87:c8:5e:
c0:8e:80:b0:91:be:93:a7:15:65:c6:0d:b3:39:8a:
85:fb:5d:c5:2f:4a:10:62:ce:25:02:4d:36:c3:63:
74:e5:4f:c9:24:5d:c7:6e:6e:0c:87:95:38:dd:b1:
ff:6c:72:d1:94:42:46:a6:4a:65:93:7a:ef:26:c5:
55:d4:af:25:7f:50:18:67:ab:66:eb:4a:11:b2:8e:
20:7b:de:9e:7b:83:ee:98:bd:90:eb:59:5b:f9:7c:
2d:d8:f5:72:90:46:59:8e:c9:2d:2e:ca:c4:2f:ca:
20:48:ba:34:b6:5b:5c:f3:b9:45:2a:01:ab:1f:77:
80:b1:32:0d:25:dc:28:7c:03:da:be:7a:83:5a:4a:
60:fb:9e:37:63:a7:16:3c:4f:77:d7:80:ce:6c:43:
37:00:05:f3:9e:73:f0:cb:1c:fa:d8:2d:ba:2f:81:
a3:e9:0d:87:96:8e:5b:0b:74:77:cd:5f:0c:61:14:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:10:A3:30:3F:A5:A0:7C:92:C8:98:3D:66:32:1D:38:90:6E:65
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:aa:0f:fa:49:be:b7:03:b6:16:3b:9a:69:03:67:30:30:b2:
a9:03:19:50:1e:6f:2e:2e:77:99:35:a8:2e:aa:92:5a:4f:0a:
2f:d9:e6:46:d4:66:03:f6:79:13:e3:af:d9:9d:26:ec:a0:8b:
b5:f7:ef:1b:11:18:e6:bb:ea:04:5a:e7:df:85:33:48:d1:59:
1b:94:97:fb:1f:63:d9:ce:6f:d1:ad:0f:04:44:e5:6d:12:9e:
0b:f2:ed:ac:68:c6:48:7d:5c:78:c4:d0:95:13:15:e9:c0:af:
ef:6b:cf:52:65:c4:f0:d8:40:e4:3b:79:9e:6f:74:3a:89:4e:
bb:de:75:95:e6:f3:60:de:7c:91:93:92:79:99:55:61:fb:c1:
58:3c:02:50:43:91:ed:c3:0a:dc:0c:ad:11:ca:cf:fe:c7:d8:
32:02:7e:c4:20:66:7e:e7:92:f3:7c:a9:39:07:84:b7:7c:07:
fc:b4:e2:97:6f:6c:32:46:3e:d0:d2:4b:5f:2d:b2:06:9a:ef:
16:61:97:a3:e9:5b:48:da:25:f1:3b:31:a5:9f:20:06:d4:93:
df:6e:f2:33:77:84:c3:dc:62:c9:41:4a:3e:29:b5:13:e1:76:
0a:a2:8c:87:df:ec:47:a9:2f:71:9b:83:7b:fe:5b:03:e8:f9:
3b:be:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:57 2025 by rpki-client