Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: nevfcdGnn8aEFGB3dovHMex+Xq2An7QjUBQAbw+bw4I=
Subject key identifier: C1:73:2C:84:43:40:14:DC:76:92:88:D0:87:D8:D9:FA:71:CD:6A:CA
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 0199FF22DA0D30627071D0E0DB05345F93BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 1615
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: SNRF9VoCKI3vlw5A5zMP4BFPeb73DwyWqVoiIsFOedc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:da:0d:30:62:70:71:d0:e0:db:05:34:5f:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=c1732c84434014dc769288d087d8d9fa71cd6aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:3d:6c:cf:ab:53:17:b6:78:a8:0f:83:f1:
d0:df:27:89:cd:ca:91:5d:40:55:ad:b1:72:24:4d:
27:07:ba:d8:8e:05:ee:3b:26:37:ce:6a:b7:f8:34:
bd:4d:a4:72:04:40:ca:df:7e:4d:60:31:5d:2f:68:
85:02:87:c8:64:bd:7f:d4:a4:d6:27:ba:cb:47:15:
e6:10:7c:50:ff:14:ab:5c:18:1e:8e:53:c1:0d:cf:
fc:7f:fa:1a:f8:ed:11:8f:98:3f:aa:92:e8:01:41:
fa:db:c8:b5:39:27:78:d3:70:ef:4f:39:1f:0c:81:
36:57:4d:ad:af:78:43:82:f5:55:02:56:11:03:4a:
58:c2:6f:83:cf:10:02:3f:ac:58:e3:d6:83:9c:45:
23:98:3a:cb:86:c4:58:aa:de:80:d3:ff:a7:7f:f5:
d4:5e:e8:ed:d2:17:95:ff:c1:63:e9:47:03:b9:c1:
3b:d6:fd:68:2e:8d:ad:64:85:3d:1f:f6:c9:71:df:
15:6b:c9:d8:60:0b:c9:1b:14:08:85:b6:ed:82:95:
12:2d:b6:a9:44:ee:67:38:82:7e:57:f0:f7:af:0c:
8f:85:c8:24:d0:68:31:cb:96:f0:61:d2:46:de:8b:
ef:73:bd:a2:9d:c2:0f:f4:dc:15:97:47:e9:4a:c4:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:2C:84:43:40:14:DC:76:92:88:D0:87:D8:D9:FA:71:CD:6A:CA
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:99:0e:c8:04:30:2e:5b:58:bf:d8:4c:a9:1c:1b:3a:a8:
c2:2f:73:f8:9a:0d:2e:fd:14:a3:73:04:0d:75:8c:33:c1:05:
01:20:52:aa:c0:0c:03:43:b2:36:3e:c9:cc:5a:94:f7:65:08:
70:84:03:71:be:f4:b8:5e:73:95:bd:7a:fb:36:57:48:88:9b:
8e:15:8a:cf:b7:b9:54:6c:bc:2b:fc:bb:06:b7:33:99:f2:0f:
fa:ee:1e:a8:9c:64:7e:23:2c:87:28:c1:5c:91:cc:75:b1:6c:
6c:bb:5b:f3:f0:71:1c:de:d1:f1:29:0e:e2:8d:a4:df:15:d4:
34:08:31:90:43:d4:8c:a6:75:42:d5:b0:cd:3a:58:65:98:4b:
ca:b5:7c:37:b7:d6:58:ed:38:35:3c:c7:76:01:b0:9e:28:0f:
cb:05:57:1a:5f:cb:2b:a5:6e:e7:9b:e6:40:73:4e:1c:25:1b:
a7:7a:83:49:1d:30:f3:5f:9b:89:bb:0c:09:a7:17:3f:e9:da:
52:0a:cc:5b:56:88:4b:6c:a8:fa:af:76:db:bd:22:ee:46:8e:
f7:03:cb:4e:03:63:08:0d:bc:e9:9d:4b:3c:f9:14:f5:33:29:
6a:57:0c:15:e7:44:d9:b9:c3:ea:15:fb:39:2d:13:03:1e:5f:
31:17:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:33 2025 by rpki-client