Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: XoxPQai1tvWCgTE8z3EWsoJrHZ/S5cQRA6iQ5EN4NB8=
Subject key identifier: 39:B7:9A:72:10:C2:B0:0D:3D:5C:D4:97:C1:7E:60:34:C5:43:19:52
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 0197B6A08146E8DC31A79DC047BD064BCC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 1024
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: NizgLkAZCIFd9UJ+7/dnRcm1THb2seWMIwegWviHKvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:81:46:e8:dc:31:a7:9d:c0:47:bd:06:4b:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=39b79a7210c2b00d3d5cd497c17e6034c5431952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:09:08:4f:56:fa:db:0f:31:f1:a4:15:02:
ba:f9:cf:a8:fd:95:41:17:53:f2:70:17:3e:9b:52:
0a:f7:60:a6:4c:40:8f:ce:2d:60:24:45:3b:55:f0:
23:3c:9a:60:02:7f:bd:73:cb:02:10:ca:f9:aa:d0:
be:38:9a:cf:0f:93:04:04:fa:56:1d:2a:4c:28:f8:
b3:a8:8c:78:1d:d3:6e:26:0c:a4:55:68:e5:ab:ec:
01:66:74:1c:7a:1b:03:8b:ee:eb:44:68:3c:80:b7:
cf:a0:87:8b:aa:d8:8b:a4:e7:d5:2d:c1:eb:ec:3c:
71:37:c8:63:65:a0:cb:d8:77:3d:2f:6d:e6:ef:ce:
8e:ca:bd:e1:44:8b:63:af:4b:17:ab:4b:d4:e5:66:
be:0c:85:77:9d:2a:42:a9:f5:cb:80:ea:09:19:4c:
ed:47:cb:31:82:58:2e:57:3b:d1:27:9f:ec:b7:16:
e1:b7:1b:56:7e:62:46:4e:6f:50:cb:a4:a3:cc:4b:
23:b2:5a:a3:eb:ff:dd:25:23:1f:08:b7:78:0a:d4:
d9:0e:c6:63:01:b5:44:32:f3:fd:3e:11:0d:ff:86:
14:97:34:e9:ae:77:00:46:59:e8:d4:b1:eb:93:f0:
4c:b4:d0:ec:4f:95:05:59:7c:e9:b6:00:71:b9:03:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:9A:72:10:C2:B0:0D:3D:5C:D4:97:C1:7E:60:34:C5:43:19:52
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:d1:74:d0:cd:45:8b:b5:dd:d1:f6:ff:b4:9f:bf:87:88:
43:87:b5:fa:ff:84:41:0f:b2:25:7d:18:84:de:8c:b6:21:d1:
46:ed:3e:60:74:de:bb:f3:a5:97:99:9c:b6:89:25:d2:6a:97:
c6:97:d6:11:24:8f:7b:ed:d9:7a:2a:e8:82:92:1b:bc:3f:e2:
4d:5f:17:03:d0:02:eb:8c:c8:fd:ec:4b:35:cc:58:ba:da:34:
5c:ed:57:8c:f5:bd:d3:e8:ae:b8:1c:8d:a7:a4:c0:d9:63:1d:
a8:f5:7b:c0:1d:91:8c:f2:19:96:c3:40:ae:f6:30:a5:ed:fe:
52:a0:90:b5:37:85:af:69:9b:fd:d8:f7:9d:74:cf:60:09:e4:
ef:52:d0:6e:aa:ea:42:1a:18:d2:d0:c8:84:0a:ba:09:27:97:
5a:5f:23:46:7b:77:8c:e8:64:f4:09:05:55:60:91:b3:78:6c:
53:eb:49:8e:dc:4e:ad:41:96:b5:a7:d1:ac:4e:de:80:2c:f5:
92:df:7e:4f:80:30:c2:d6:8f:2d:3e:c1:c3:c0:4f:c7:ec:85:
78:05:f4:2a:8b:8a:49:4a:c4:fa:9e:97:eb:c8:f7:22:c7:2e:
2e:0f:66:0c:b5:d9:c9:f5:e8:ba:b6:d8:9c:f6:71:d5:c1:a2:
08:3e:33:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIFG6Nwxp53AR70GS8wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwNjI4MTMwMTAxWhcNMjUwNjI5MTMwMTAxWjAzMTEwLwYDVQQD
EygzOWI3OWE3MjEwYzJiMDBkM2Q1Y2Q0OTdjMTdlNjAzNGM1NDMxOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KwJCE9W+tsPMfGkFQK6+c+o/ZVB
F1PycBc+m1IK92CmTECPzi1gJEU7VfAjPJpgAn+9c8sCEMr5qtC+OJrPD5MEBPpW
HSpMKPizqIx4HdNuJgykVWjlq+wBZnQcehsDi+7rRGg8gLfPoIeLqtiLpOfVLcHr
7DxxN8hjZaDL2Hc9L23m786Oyr3hRItjr0sXq0vU5Wa+DIV3nSpCqfXLgOoJGUzt
R8sxglguVzvRJ5/stxbhtxtWfmJGTm9Qy6SjzEsjslqj6//dJSMfCLd4CtTZDsZj
AbVEMvP9PhEN/4YUlzTprncARlno1LHrk/BMtNDsT5UFWXzptgBxuQMhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm3mnIQwrANPVzUl8F+YDTFQxlSMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBvRdNDN
RYu13dH2/7Sfv4eIQ4e1+v+EQQ+yJX0YhN6MtiHRRu0+YHTeu/Oll5mctokl0mqX
xpfWESSPe+3ZeirogpIbvD/iTV8XA9AC64zI/exLNcxYuto0XO1XjPW90+iuuByN
p6TA2WMdqPV7wB2RjPIZlsNArvYwpe3+UqCQtTeFr2mb/dj3nXTPYAnk71LQbqrq
QhoY0tDIhAq6CSeXWl8jRnt3jOhk9AkFVWCRs3hsU+tJjtxOrUGWtafRrE7egCz1
kt9+T4AwwtaPLT7Bw8BPx+yFeAX0KouKSUrE+p6X68j3IscuLg9mDLXZyfXourbY
nPZx1cGiCD4zuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:52 2025 by rpki-client