Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: gv+UAK4wQpN+rnJ41xUk6UNpNEUqpVOHltC9lOzMB1A=
Subject key identifier: BF:37:BB:59:5C:E1:EA:E8:8F:D7:64:E6:49:67:99:3E:B5:C6:BA:03
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0198D5BB8D64EA85606E6D4314A96740F036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0E14
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: MOK3rXeXPPLohKF8/drQYcfzi9elV9JzqRnA6+QyPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8d:64:ea:85:60:6e:6d:43:14:a9:67:40:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=bf37bb595ce1eae88fd764e64967993eb5c6ba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:af:29:f5:0d:93:45:4b:04:3e:0a:df:9d:
e9:e5:5a:b6:60:69:a6:2e:94:5b:25:12:ad:65:04:
2c:2f:dd:1e:56:aa:e7:62:29:38:24:c2:36:6a:9b:
d2:53:50:e9:85:4e:5f:36:b9:64:ff:e0:40:f6:72:
e5:73:aa:ca:ba:a6:ce:f2:7d:bd:19:c6:a0:57:74:
5a:b5:e5:39:22:5f:25:3b:8a:1c:ce:ab:09:16:c0:
dc:5b:bc:71:90:0e:80:6f:48:b4:0a:4a:46:f5:d9:
5a:27:ab:f8:09:94:8d:a3:fa:b8:63:72:5b:21:c9:
dd:fc:a3:69:a2:d3:c6:e6:84:89:73:0a:e9:f8:81:
2f:f7:b4:ad:2e:99:ad:f8:ca:94:ff:b7:0d:be:05:
04:7d:67:83:7e:27:4a:dd:52:8f:00:f9:23:fb:bf:
fb:f9:c2:7c:ba:0e:12:ef:4d:95:c4:6e:4a:1c:8e:
56:80:3c:65:97:e7:5f:9c:77:27:74:f2:de:c7:0b:
be:34:d7:6b:89:33:4b:08:06:16:83:1f:66:0f:25:
1b:d5:95:f0:6d:9f:58:c1:9c:2b:24:6d:71:09:9c:
fe:05:9f:03:74:70:ce:05:9b:cd:4d:2c:31:49:f6:
58:25:3e:ec:32:57:77:0d:f1:36:d6:4c:b6:70:65:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:37:BB:59:5C:E1:EA:E8:8F:D7:64:E6:49:67:99:3E:B5:C6:BA:03
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:b3:12:4a:7f:4a:c8:20:9f:8c:0e:7b:92:bc:9d:7e:f6:
3a:ab:61:cf:39:5c:9d:19:5d:12:56:24:de:e8:b1:c6:82:12:
76:e3:44:8b:58:d7:45:3e:1b:ed:1a:80:ba:56:9b:93:3d:dc:
ab:6f:82:a0:35:d9:98:ef:aa:d5:cc:5d:72:2c:d0:e3:dc:38:
c0:09:c3:25:35:09:f4:ef:a9:5d:78:4c:ed:a4:17:34:4a:f2:
2c:d6:d5:f7:70:f7:34:b2:e4:10:69:79:84:09:74:68:3a:af:
e8:7f:1b:a3:7e:eb:61:8b:54:e0:4a:db:1f:fa:0a:d5:40:79:
6c:1d:0d:95:df:29:e1:62:c9:0b:f7:28:4f:20:dd:42:c0:f2:
05:22:4c:4f:1f:7f:01:53:62:2e:3f:0f:08:0d:bb:7c:1b:5a:
be:14:2d:b5:35:45:a8:05:de:b0:02:1c:dc:04:64:69:34:4f:
57:4e:83:75:da:b0:d2:54:e1:4b:74:94:50:a8:22:ea:0d:d5:
be:91:de:f8:cf:dd:95:41:24:50:61:a1:4b:8a:d8:08:94:2a:
a8:79:b3:ab:3f:44:f2:24:ef:0b:ea:b5:ad:df:2a:31:f3:9f:
02:8d:84:fc:45:54:4f:41:fa:97:cb:e8:11:b5:06:3a:ea:82:
ae:34:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:32 2025 by rpki-client