Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: MIP0+xBLy0UnmmHeVx+UsN+eEPxgT1w1Dj4wnvantOk=
Subject key identifier: 27:80:50:A6:A7:D1:1E:37:37:0F:D8:72:B6:75:64:EB:0F:70:5D:4C
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0197B7EAE7BC5C0318107867F15607C43F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1092
Signing time: Sat 28 Jun 2025 19:01:54 +0000
Manifest this update: Sat 28 Jun 2025 19:01:54 +0000
Manifest next update: Sun 29 Jun 2025 19:01:54 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: JVBYy56IBzgWq5nb069xEIl+K5D/NM5TakniiOmqHbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e7:bc:5c:03:18:10:78:67:f1:56:07:c4:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jun 28 19:01:54 2025 GMT
Not After : Jun 29 19:01:54 2025 GMT
Subject: CN=278050a6a7d11e37370fd872b67564eb0f705d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:de:db:5a:e6:76:66:8c:c1:36:9e:0d:6b:
27:64:bb:96:7c:cc:ca:e5:ab:93:c5:7c:75:08:28:
d6:63:30:8d:ab:6d:ce:85:10:6e:2e:38:75:d4:2e:
a8:e4:ec:70:01:e0:3c:7a:40:54:57:4e:8e:f8:ed:
a9:55:6d:d2:b6:dd:bf:e1:ae:5a:e3:5d:c8:7b:24:
f7:7b:ce:98:a8:0b:a0:e1:9d:54:af:36:10:e9:af:
8d:b9:10:05:f2:e4:7c:e0:41:c3:24:5c:13:58:ae:
d6:f2:17:68:a7:61:8f:b3:c8:ca:d8:a7:6d:96:1f:
c0:38:9a:84:a0:54:d6:f5:a3:fd:b8:5d:27:9f:73:
09:f1:a7:69:d8:29:db:e1:cf:1a:49:58:42:18:d5:
27:2a:72:fc:c6:03:e1:ee:55:bf:f7:74:38:45:bd:
a0:d9:94:6f:16:2e:0f:d6:b9:3c:5c:2d:01:4a:12:
f8:68:c2:d9:a6:bf:e2:0c:5a:ed:73:1a:ee:bb:cf:
63:11:46:f7:6b:6a:a4:4a:91:e4:ca:d9:5f:a1:3a:
6a:d6:1b:cb:20:cc:79:d8:73:51:fe:ca:1d:ac:d0:
4d:f6:5b:74:86:5b:26:67:7d:6e:7b:a4:7b:3d:7c:
a1:0d:5d:a9:a5:28:6e:3c:a9:d9:39:71:72:32:73:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:50:A6:A7:D1:1E:37:37:0F:D8:72:B6:75:64:EB:0F:70:5D:4C
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:33:72:96:aa:36:ca:d3:16:1a:7a:e1:56:5a:f8:f6:4a:
28:b5:63:6e:76:ce:15:b7:9e:61:8a:2c:21:ce:55:46:63:14:
86:98:58:a7:1b:7a:7e:bc:90:88:aa:3f:97:4c:38:2b:c2:53:
4a:c2:42:0e:ec:44:b8:07:2e:01:7e:1e:e4:a7:6b:75:0b:69:
b8:43:6f:a9:e7:bd:90:f9:63:7c:42:87:84:a2:e3:ea:0b:1a:
d7:40:aa:55:d1:9d:06:8d:61:1b:fc:d3:67:7b:ab:29:6b:d7:
c7:0a:4c:fd:3e:b1:0f:43:c0:a3:47:7f:57:2e:c6:cb:2e:93:
84:1e:a5:ce:70:2f:1e:1b:e1:41:72:38:80:64:1e:fb:7e:ed:
2b:4d:9b:21:e9:d1:83:2f:9e:58:6f:90:d7:62:91:9c:0d:85:
79:f9:96:85:56:79:32:19:b2:0f:39:c2:0c:36:8c:09:12:e9:
e5:3f:44:c3:8e:d1:6a:53:08:d9:69:dc:61:a6:68:60:19:77:
12:08:b7:f9:d1:56:e7:8e:df:41:33:f4:93:e8:5c:04:97:e7:
2d:7c:de:94:0c:c8:26:f9:3b:86:82:d6:bf:ac:3b:aa:1e:8c:
d2:24:ad:bb:2e:7e:b6:de:c5:87:a9:9d:ba:6e:65:f1:6b:63:
3d:5c:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:22 2025 by rpki-client