Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: eBV0B4wP1jzdrMV3+AUzl1ZqGxr2gnEBhvY5i26593c=
Subject key identifier: D5:E2:0B:90:D0:93:17:24:AF:C4:72:FA:F9:46:76:4F:A6:C2:30:50
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0196A0BF7A78B4C88DA2C202AE0637634BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1000
Signing time: Mon 05 May 2025 14:00:25 +0000
Manifest this update: Mon 05 May 2025 14:00:25 +0000
Manifest next update: Tue 06 May 2025 14:00:25 +0000
Files and hashes: 1: gg4kjQH-MRQrS-FzBjsif1edZso.roa (hash: K0w6We/nHbxDdN4hPxZ1hRud5nyEBhVgL5F/G8Gxd1w=)
2: ijqfOwh-mKxL0IFbe46uAqyqBe4.roa (hash: NhINayUAgUyP+pjnQ3qR8pj7oOBaH36Jng4YmwD8sGM=)
3: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
4: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: bUjFOvc7R+ndlXjfIA97yOpdnYneNB/CzegKJw5iaok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:7a:78:b4:c8:8d:a2:c2:02:ae:06:37:63:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: May 5 14:00:25 2025 GMT
Not After : May 6 14:00:25 2025 GMT
Subject: CN=d5e20b90d0931724afc472faf946764fa6c23050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:12:2e:f5:67:62:cb:e4:70:ff:00:fa:a2:
15:92:06:0a:f8:db:74:81:ee:f9:a6:8b:88:19:73:
a3:f5:51:02:82:93:27:83:29:5c:fc:d1:d2:83:de:
b8:cc:b6:2e:9b:2b:fb:e0:6b:f2:88:dc:47:85:ee:
f9:36:cb:bb:51:ad:26:5a:9b:2d:5c:d7:55:50:23:
9c:72:b8:fc:f3:e3:4c:be:d0:10:94:f0:50:7d:c4:
e4:5e:41:a4:b2:1a:d5:a7:20:23:d0:d0:69:a4:7f:
f6:f1:c6:96:3e:53:b9:4f:ed:72:4b:e2:ba:67:d6:
c8:cd:42:f9:f7:d9:b8:d1:3c:1d:a9:14:0a:25:00:
d9:d3:85:0d:4e:28:f6:ff:b4:05:91:54:51:36:b4:
6d:8a:96:b7:97:e7:86:54:63:8b:db:9a:06:4a:1e:
ad:26:5d:23:7d:a7:8a:db:f2:a4:f6:a9:8d:e6:16:
4b:46:ed:cf:a7:ae:a5:f4:ad:db:09:ee:16:6a:6e:
5e:9b:b0:57:f4:2a:06:e6:f0:5f:92:a7:63:50:63:
0e:88:e3:8a:b0:b1:de:4d:45:37:88:06:48:48:0c:
e8:0c:22:fd:c6:cc:0e:26:94:ec:c9:99:64:5b:be:
e4:68:7c:9b:94:9d:cb:7a:6a:b2:5f:85:0d:31:78:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:0B:90:D0:93:17:24:AF:C4:72:FA:F9:46:76:4F:A6:C2:30:50
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:71:43:ed:96:e5:03:b4:f8:22:b7:2e:64:ab:2c:8b:33:a4:
d7:cc:88:9f:a3:67:66:a1:dc:47:ee:e2:27:4a:22:e0:57:37:
4b:51:45:1b:a6:fb:f1:10:90:71:96:e9:77:ec:02:c6:98:0f:
4c:70:f7:d0:81:4e:12:61:9b:ee:65:01:ce:26:67:4b:6b:8a:
cc:07:d2:9d:52:fe:86:8b:50:2a:81:dd:81:a3:72:f6:f9:b2:
35:b9:2c:45:3f:56:e7:2a:8b:99:87:db:33:37:90:ee:c9:e8:
a5:fc:ce:e6:38:06:b1:22:f1:89:25:1e:58:da:e7:9f:eb:c5:
20:75:aa:d3:2a:fa:e8:5b:88:fb:03:56:2e:4c:4d:9f:d9:af:
44:58:3c:fb:1c:d0:7d:2b:a1:db:f2:c1:a4:3b:9b:23:74:1d:
12:5d:56:10:e5:3b:4a:98:f2:ba:61:0d:67:dd:73:05:d4:66:
48:3d:55:44:0c:fa:dd:9b:e7:27:1c:21:7f:83:f8:3b:6a:58:
76:0f:81:a7:12:f9:1e:18:f3:20:47:b8:48:15:a6:b1:8f:4a:
4c:fe:d0:de:55:ff:27:e8:c5:47:77:cf:bd:4b:55:20:94:41:
1e:17:ff:c0:18:c4:12:8b:cc:5e:73:3a:9d:fb:c9:9b:4a:63:
2f:b4:5b:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagv3p4tMiNosICrgY3Y0vcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1
Yjg0MzUwHhcNMjUwNTA1MTQwMDI1WhcNMjUwNTA2MTQwMDI1WjAzMTEwLwYDVQQD
EyhkNWUyMGI5MGQwOTMxNzI0YWZjNDcyZmFmOTQ2NzY0ZmE2YzIzMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoioSLvVnYsvkcP8A+qIVkgYK+Nt0
ge75pouIGXOj9VECgpMngylc/NHSg964zLYumyv74GvyiNxHhe75Nsu7Ua0mWpst
XNdVUCOccrj88+NMvtAQlPBQfcTkXkGkshrVpyAj0NBppH/28caWPlO5T+1yS+K6
Z9bIzUL599m40TwdqRQKJQDZ04UNTij2/7QFkVRRNrRtipa3l+eGVGOL25oGSh6t
Jl0jfaeK2/Kk9qmN5hZLRu3Pp66l9K3bCe4Wam5em7BX9CoG5vBfkqdjUGMOiOOK
sLHeTUU3iAZISAzoDCL9xswOJpTsyZlkW77kaHyblJ3LemqyX4UNMXg9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXiC5DQkxckr8Ry+vlGdk+mwjBQMB8GA1UdIwQY
MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt
MWRjYWQ4ZTY4ZWQ5LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5
LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXFD7Zbl
A7T4IrcuZKssizOk18yIn6NnZqHcR+7iJ0oi4Fc3S1FFG6b78RCQcZbpd+wCxpgP
THD30IFOEmGb7mUBziZnS2uKzAfSnVL+hotQKoHdgaNy9vmyNbksRT9W5yqLmYfb
MzeQ7snopfzO5jgGsSLxiSUeWNrnn+vFIHWq0yr66FuI+wNWLkxNn9mvRFg8+xzQ
fSuh2/LBpDubI3QdEl1WEOU7SpjyumENZ91zBdRmSD1VRAz63ZvnJxwhf4P4O2pY
dg+BpxL5HhjzIEe4SBWmsY9KTP7Q3lX/J+jFR3fPvUtVIJRBHhf/wBjEEovMXnM6
nfvJm0pjL7RbEA==
-----END CERTIFICATE-----
Generated at Mon May 5 17:40:10 2025 by rpki-client