Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: qeK3rD21cl3BJL4k7mPEkbwLQfdlwrVEAQYo1byJHik=
Subject key identifier: 4B:3F:04:79:B7:52:26:0F:4E:90:30:4F:46:A6:8B:A3:9A:6E:08:2A
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0197C75D5B7996DB7768D58FBACDD680C72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0D88
Signing time: Tue 01 Jul 2025 19:01:13 +0000
Manifest this update: Tue 01 Jul 2025 19:01:13 +0000
Manifest next update: Wed 02 Jul 2025 19:01:13 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: EakygHuRoQPbbkI9uUOhn2Y/XxnkCh77mGA/x0EdxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:5b:79:96:db:77:68:d5:8f:ba:cd:d6:80:c7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Jul 1 19:01:13 2025 GMT
Not After : Jul 2 19:01:13 2025 GMT
Subject: CN=4b3f0479b752260f4e90304f46a68ba39a6e082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:a5:1d:69:90:4e:da:bb:4e:ff:82:15:50:
ee:9f:7c:40:ca:bd:7f:e7:83:fc:b6:3f:4f:2f:b6:
3a:d3:37:c4:16:52:72:30:b2:64:02:60:3b:e0:cb:
82:ff:c0:8b:60:0b:dd:5c:24:ab:09:58:26:65:18:
b8:bb:de:98:01:71:84:db:e7:91:8a:ac:a5:f2:35:
42:50:ae:50:b7:95:8b:8c:22:1c:ce:23:e3:f4:e4:
48:78:5b:43:c9:e9:be:c7:f3:d8:d2:69:47:3e:24:
c5:43:81:2c:8f:80:23:79:18:25:df:34:cc:9b:02:
be:1c:9a:8e:f6:1b:20:a5:7f:98:23:e5:57:44:39:
9a:25:ec:13:67:32:c3:1d:eb:95:a5:d4:0d:92:51:
7b:2b:21:bf:c4:83:6d:6a:77:0d:34:ce:66:f5:61:
a3:27:17:f6:4e:87:66:92:2b:ff:6c:7b:cb:06:0b:
b0:49:b9:57:2a:da:6a:9f:f9:1c:80:d0:89:e8:7f:
c0:ad:44:66:39:04:f9:50:05:3f:f4:f7:4f:d6:cd:
0e:99:0d:e7:a4:25:f5:c2:ee:6a:eb:33:ef:39:d2:
fa:9c:6e:8d:47:bf:12:ad:f6:0c:47:4b:be:19:bb:
b4:ac:0c:31:10:ca:0c:65:74:c6:bd:6f:7f:19:42:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:04:79:B7:52:26:0F:4E:90:30:4F:46:A6:8B:A3:9A:6E:08:2A
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:1d:8a:c9:55:f9:e0:f8:c7:83:e2:53:0e:a4:0a:65:ab:
b6:74:7a:b7:7f:96:3c:73:70:30:1d:c3:a8:f9:57:0c:cb:22:
9c:94:7d:75:2a:81:2e:70:7a:57:3a:3f:ab:f5:d2:8a:eb:0d:
e5:32:8c:e7:90:af:03:4c:04:d2:f6:4d:58:f5:7c:b7:89:a2:
b5:ac:79:eb:27:b7:34:09:2b:36:cf:72:39:3d:ea:a6:b8:c0:
e7:9c:98:e4:b8:15:80:39:ef:7e:d0:6f:47:6a:f9:59:18:f9:
d8:8b:9e:63:84:2f:34:97:2f:e2:81:da:8f:c1:fa:ef:6e:ef:
a5:83:7e:98:d1:97:17:d4:93:db:80:de:85:8d:a6:b9:60:46:
69:0e:e8:86:3a:29:60:a7:18:9c:29:90:18:9c:d3:00:c5:3c:
b8:ee:1d:ac:22:bf:5a:e0:8b:8c:00:81:7d:d5:be:f2:2c:a1:
89:d1:3c:58:58:40:98:51:5f:4f:ae:fd:a2:29:f5:a5:7a:f1:
37:c9:e3:6d:39:55:e2:f7:e3:49:5b:a1:2d:85:b3:24:64:68:
66:aa:20:49:ec:f4:89:36:fb:cd:8f:a0:41:9c:89:4a:89:0d:
ed:93:5e:84:6d:10:79:7e:3e:df:5c:7f:08:0d:4f:2d:84:9a:
d0:2a:ef:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHXVt5ltt3aNWPus3WgMcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll
YTFmZTQwHhcNMjUwNzAxMTkwMTEzWhcNMjUwNzAyMTkwMTEzWjAzMTEwLwYDVQQD
Eyg0YjNmMDQ3OWI3NTIyNjBmNGU5MDMwNGY0NmE2OGJhMzlhNmUwODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreilHWmQTtq7Tv+CFVDun3xAyr1/
54P8tj9PL7Y60zfEFlJyMLJkAmA74MuC/8CLYAvdXCSrCVgmZRi4u96YAXGE2+eR
iqyl8jVCUK5Qt5WLjCIcziPj9ORIeFtDyem+x/PY0mlHPiTFQ4Esj4AjeRgl3zTM
mwK+HJqO9hsgpX+YI+VXRDmaJewTZzLDHeuVpdQNklF7KyG/xINtancNNM5m9WGj
Jxf2Todmkiv/bHvLBguwSblXKtpqn/kcgNCJ6H/ArURmOQT5UAU/9PdP1s0OmQ3n
pCX1wu5q6zPvOdL6nG6NR78SrfYMR0u+Gbu0rAwxEMoMZXTGvW9/GUJALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs/BHm3UiYPTpAwT0ami6OabggqMB8GA1UdIwQY
MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt
YjJjZWE3NjkwODM3LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3
LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvIdislV
+eD4x4PiUw6kCmWrtnR6t3+WPHNwMB3DqPlXDMsinJR9dSqBLnB6Vzo/q/XSiusN
5TKM55CvA0wE0vZNWPV8t4mitax56ye3NAkrNs9yOT3qprjA55yY5LgVgDnvftBv
R2r5WRj52IueY4QvNJcv4oHaj8H6727vpYN+mNGXF9ST24DehY2muWBGaQ7ohjop
YKcYnCmQGJzTAMU8uO4drCK/WuCLjACBfdW+8iyhidE8WFhAmFFfT679oin1pXrx
N8njbTlV4vfjSVuhLYWzJGRoZqogSez0iTb7zY+gQZyJSokN7ZNehG0QeX4+31x/
CA1PLYSa0CrvxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 23:14:20 2025 by rpki-client