Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: dajmI8lFXG6wURvhdHKh7ny7eId4vcyW3ljXIwfagbg=
Subject key identifier: 57:50:35:2E:F8:41:4A:3F:60:04:D7:7D:FE:9B:1A:5D:95:2F:7B:F8
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 0198D850DF9E00A6EA3468280DCDFAA187E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 10BA
Signing time: Sat 23 Aug 2025 19:03:55 +0000
Manifest this update: Sat 23 Aug 2025 19:03:55 +0000
Manifest next update: Sun 24 Aug 2025 19:03:55 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: MLpHod/TgEITMbGebWVZ/fLYK2XG+gDHwDpQDWijjpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:df:9e:00:a6:ea:34:68:28:0d:cd:fa:a1:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Aug 23 19:03:55 2025 GMT
Not After : Aug 24 19:03:55 2025 GMT
Subject: CN=5750352ef8414a3f6004d77dfe9b1a5d952f7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:a8:c2:35:d9:bb:5e:15:1e:f2:7d:d7:61:
1a:5f:3c:05:ea:d6:56:5f:bb:ad:c3:d4:d0:19:e9:
d6:07:e7:27:25:22:8e:72:96:71:89:57:98:5a:52:
2b:e5:c2:d5:03:00:d6:2f:28:36:8b:d0:fc:5a:07:
e3:7f:97:0c:1f:50:1d:db:af:c1:7f:df:41:19:29:
4c:c0:32:18:0e:2f:28:2c:8e:f2:87:8a:ce:21:cd:
b0:44:7b:c2:ff:ce:5b:7a:54:19:ce:76:19:a8:0a:
49:23:bc:ac:1c:ac:86:54:07:e5:ac:1e:0b:3b:70:
74:68:d9:88:85:98:d8:c7:e1:ce:ed:1f:fd:c7:b4:
c1:67:42:1c:a1:ef:3e:0d:90:d1:40:4d:45:16:53:
b1:ad:4b:4b:9c:91:43:e1:94:d2:ce:c0:90:69:15:
83:6e:44:73:12:e4:49:c8:61:d8:d1:c8:c5:0b:30:
10:f0:df:7f:a8:68:32:4d:72:5c:b3:94:a9:25:8d:
e9:84:29:90:c3:93:cc:20:c4:a8:bf:11:c3:1b:40:
57:d6:73:5c:fb:d1:41:19:68:d7:b1:67:ed:88:c9:
65:e7:34:c7:40:24:8f:e1:75:0e:f5:62:5b:4f:80:
f0:67:8d:a7:5a:a1:26:4f:43:ce:96:12:bd:74:c0:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:35:2E:F8:41:4A:3F:60:04:D7:7D:FE:9B:1A:5D:95:2F:7B:F8
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:94:75:14:53:f3:99:a2:ef:7d:54:c7:85:63:29:d6:7e:47:
c0:f4:79:e9:74:82:db:82:da:58:67:0b:79:de:bd:6c:70:81:
05:32:dd:42:39:5f:e3:22:89:d2:fc:a4:8c:2e:99:5f:cb:c8:
31:ea:7e:ef:97:8d:78:71:ea:2f:26:7a:06:92:2e:6a:0e:71:
59:f7:03:a9:ab:3d:03:f3:6f:a5:a7:3c:1f:c6:06:dc:1f:f3:
9f:9e:1f:7b:c4:91:68:30:76:14:df:56:28:a7:9a:ed:d6:69:
78:00:c5:1f:43:bb:b8:c5:f5:30:2f:b8:eb:a5:8c:b3:73:df:
ca:73:08:ac:32:04:89:70:00:a9:a2:44:f3:d3:49:a1:29:f4:
a9:de:b3:31:27:26:e4:1e:bc:52:44:76:a6:19:28:12:0a:e4:
5e:a4:59:66:bd:0f:ba:1f:c6:1a:44:86:19:1b:ea:26:fd:a2:
6f:55:6a:5e:ad:66:dd:99:2a:05:7d:13:e7:ed:ae:44:62:79:
52:0c:47:5d:03:08:4a:bd:7a:e9:10:66:09:9c:3d:15:43:67:
82:b1:16:d2:5f:bb:c4:9b:1e:e0:cd:4b:62:ff:d7:17:04:6c:
11:c2:b7:fe:64:8c:40:b5:ac:9c:f7:50:4d:cc:cd:f6:ac:63:
44:07:95:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUN+eAKbqNGgoDc36oYfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwODIzMTkwMzU1WhcNMjUwODI0MTkwMzU1WjAzMTEwLwYDVQQD
Eyg1NzUwMzUyZWY4NDE0YTNmNjAwNGQ3N2RmZTliMWE1ZDk1MmY3YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6owjXZu14VHvJ912EaXzwF6tZW
X7utw9TQGenWB+cnJSKOcpZxiVeYWlIr5cLVAwDWLyg2i9D8Wgfjf5cMH1Ad26/B
f99BGSlMwDIYDi8oLI7yh4rOIc2wRHvC/85belQZznYZqApJI7ysHKyGVAflrB4L
O3B0aNmIhZjYx+HO7R/9x7TBZ0Icoe8+DZDRQE1FFlOxrUtLnJFD4ZTSzsCQaRWD
bkRzEuRJyGHY0cjFCzAQ8N9/qGgyTXJcs5SpJY3phCmQw5PMIMSovxHDG0BX1nNc
+9FBGWjXsWftiMll5zTHQCSP4XUO9WJbT4DwZ42nWqEmT0POlhK9dMAh3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdQNS74QUo/YATXff6bGl2VL3v4MB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZR1FFPz
maLvfVTHhWMp1n5HwPR56XSC24LaWGcLed69bHCBBTLdQjlf4yKJ0vykjC6ZX8vI
Mep+75eNeHHqLyZ6BpIuag5xWfcDqas9A/Nvpac8H8YG3B/zn54fe8SRaDB2FN9W
KKea7dZpeADFH0O7uMX1MC+466WMs3PfynMIrDIEiXAAqaJE89NJoSn0qd6zMScm
5B68UkR2phkoEgrkXqRZZr0Puh/GGkSGGRvqJv2ib1VqXq1m3ZkqBX0T5+2uRGJ5
UgxHXQMISr166RBmCZw9FUNngrEW0l+7xJse4M1LYv/XFwRsEcK3/mSMQLWsnPdQ
TczN9qxjRAeVwg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:49:51 2025 by rpki-client