Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: 5wvJgCq2srXoD69CnKFHmqhJCKnUqlUE9jaIY4rtGcg=
Subject key identifier: B7:47:43:AF:43:70:99:77:11:25:6D:FD:DF:2B:B0:C8:EE:99:6C:DC
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0199FD34388CC5DAECA40805020107B18848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 11BF
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: mjBfMyRAbcRdN0YM1p28NBziJgUeA6gaIvaVCGJj3qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:38:8c:c5:da:ec:a4:08:05:02:01:07:b1:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=b74743af4370997711256dfddf2bb0c8ee996cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:68:b8:83:57:46:95:0c:04:3b:a9:f1:69:
73:da:d8:6d:f0:1b:c0:0f:6b:d1:c6:40:86:03:02:
88:2b:f6:30:c6:cb:03:72:c4:f4:7d:d5:53:fe:e9:
4c:b0:38:94:92:ff:07:a4:95:c7:83:a3:0b:ae:d0:
91:45:fa:7e:0f:9a:e6:10:b2:35:3c:7f:97:14:d8:
d7:86:c6:69:c8:bc:86:56:f1:dc:8f:f0:c9:5a:04:
76:79:37:18:42:e5:fd:32:6a:57:51:90:88:86:56:
3b:51:b5:ae:b1:a2:6d:e5:43:d4:78:73:a5:44:37:
ef:cd:65:ac:c4:8f:71:03:1d:37:b3:58:83:cc:89:
10:84:70:60:3e:d8:6d:f1:2f:4c:9a:f8:6a:7e:a6:
06:35:88:64:3b:ab:23:d6:08:0a:1e:5d:04:49:12:
8f:17:8f:91:48:50:1a:28:d4:19:35:49:61:a7:98:
15:cb:ff:8c:d5:c7:d1:96:e2:ad:d7:c6:1f:4a:4c:
56:dd:87:7f:3e:95:3d:81:05:c6:d6:a4:07:7e:e5:
b6:eb:ec:dd:c5:20:74:0e:bc:24:02:82:06:a5:2b:
16:19:94:e0:74:a4:7d:28:80:df:da:7b:7c:20:e9:
ab:ee:24:59:1e:79:54:4d:e6:81:8b:f8:5b:33:ce:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:43:AF:43:70:99:77:11:25:6D:FD:DF:2B:B0:C8:EE:99:6C:DC
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:5e:06:d0:1b:09:ca:d0:4f:3b:8f:de:ad:20:e6:c6:32:
19:75:53:b5:d2:8d:cb:e0:01:ef:52:d8:c4:c7:e6:ba:d1:79:
94:61:bf:af:df:88:55:cc:cb:ab:cc:15:e8:8e:75:9d:e2:47:
53:b3:50:cc:00:b0:b5:62:00:11:b9:73:91:1f:ff:17:a6:83:
f9:f5:26:59:16:5b:82:2e:23:03:ac:80:12:08:15:0f:4d:ab:
ab:66:72:61:72:0b:52:5b:80:05:dc:8e:23:f9:27:a5:8c:d9:
36:b5:24:9d:c8:47:77:32:ed:25:37:96:2a:6e:17:ac:bf:5b:
8e:76:8b:fd:01:4f:53:77:ed:6e:b2:f1:b4:f9:86:d4:a3:89:
0c:e6:f1:c5:13:6a:31:be:58:1a:7b:e0:36:34:f7:7b:fd:33:
f4:65:3d:86:07:85:c2:07:66:dc:df:9c:89:dc:1f:09:d9:4c:
e5:fe:70:75:9f:78:2a:60:59:ee:52:4f:7e:e1:6e:00:b7:76:
f6:73:5f:db:bc:4d:df:0c:3d:6d:c6:1f:4a:47:5f:2b:27:b3:
99:c4:73:f5:bd:5a:b2:81:92:dc:89:0a:65:1d:2e:c2:e9:53:
62:4d:42:ac:28:7a:f6:42:ac:d3:c9:22:7b:00:53:17:2b:86:
3a:27:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:59 2025 by rpki-client