Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: dOwO2YITFzh6bOiWj61kXYl6/f2h9trbV+WUhZkrlEg=
Subject key identifier: 3E:4E:1A:85:2D:4D:79:5D:94:4C:ED:42:84:A0:CB:BE:55:A7:8F:DD
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0198D5BB7E6037AC63D74564925356D9AB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1126
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: UwuIR/A3t6Rhx3o6eryUronE4UNIAR2qh0cpqZckFuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7e:60:37:ac:63:d7:45:64:92:53:56:d9:ab:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=3e4e1a852d4d795d944ced4284a0cbbe55a78fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:43:33:a0:a5:44:63:e7:5f:24:7a:b0:c4:
15:36:b4:2a:22:c8:8f:8d:94:58:35:6f:ed:9c:ff:
de:fb:8a:64:2f:c0:e6:a6:5c:0c:8d:8a:34:bb:e9:
c6:18:53:80:cb:ba:61:27:80:94:4c:fc:40:00:28:
ca:dc:fd:58:17:1c:56:ec:3a:4e:04:d0:3f:68:27:
70:dd:0d:14:e7:78:ba:d5:ac:ff:4a:f3:b5:40:5c:
44:e2:c9:a3:92:76:6c:ae:1a:12:d5:e4:a0:48:36:
ae:a3:0d:df:47:13:ff:ba:d7:9f:34:94:79:b0:ed:
78:f3:35:de:d0:69:1b:7c:77:26:e7:db:19:5d:f0:
6e:33:69:20:3b:a7:e8:c6:74:75:5e:b8:a0:f9:c7:
aa:75:22:85:81:83:31:e2:1f:ef:fe:18:26:6d:0b:
2a:cf:94:84:78:be:30:09:c2:c3:d0:d5:5d:53:9f:
50:9a:60:bf:12:9a:46:f2:23:f6:de:18:f1:a3:97:
5a:fb:09:a3:2a:17:9c:b4:24:26:ce:f7:a9:ad:71:
fc:2a:ee:a7:cb:40:23:e2:71:42:8d:b4:9c:e0:f0:
1a:ae:c7:01:d7:a0:f9:e0:0f:d9:04:a5:2b:19:86:
f7:5f:ba:cf:04:a7:73:3d:c6:ee:2b:f7:e9:0f:9c:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:1A:85:2D:4D:79:5D:94:4C:ED:42:84:A0:CB:BE:55:A7:8F:DD
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:ee:99:40:de:03:db:35:1b:b8:e1:b1:1e:ea:ab:6e:2f:
0e:fe:7d:c7:be:a7:f2:ee:4c:37:b7:4a:9a:94:41:94:e7:cd:
56:8d:ab:ba:a0:98:f5:36:97:cc:cd:5d:94:35:e6:04:5f:98:
be:6a:3d:41:21:46:ec:4e:9b:46:9e:b2:db:47:b3:3d:fb:fc:
d5:71:59:f9:38:fd:5b:82:20:6b:b0:26:17:b1:8b:38:52:1c:
24:e1:79:53:ce:98:7a:c0:b0:71:ac:ab:69:4a:04:a2:9a:d7:
2c:69:f9:68:6e:da:d6:e7:bc:42:a1:1b:35:6f:bb:28:fc:2b:
e8:59:0f:b4:83:b5:b7:6a:4e:bd:ad:31:60:2e:b6:f9:a6:82:
78:b8:4f:bc:52:6f:e6:f9:02:b0:0d:99:15:e6:ff:a8:c6:cc:
14:5b:2c:04:e3:fc:5f:9c:7b:cb:54:4c:7d:8a:60:0f:af:40:
93:d8:68:25:2b:ed:8e:ef:17:1e:c8:98:34:ac:58:2f:1a:60:
02:85:eb:a9:53:2c:80:d1:5b:84:28:20:81:1e:b6:e2:b6:d2:
eb:a9:06:ce:f2:8a:57:d2:5f:b5:12:bf:80:ec:14:6a:11:8d:
a5:fc:2d:84:a0:ad:27:a6:1d:ee:79:17:7d:36:1f:d0:15:e3:
93:82:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:36 2025 by rpki-client