Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: zLhjPN6mvPOrLxK93bkAx0K/aW8sKI8F0+4XSJ+QIhc=
Subject key identifier: 31:DD:25:11:ED:12:2C:A6:42:F3:60:E0:3A:F4:B2:A0:C5:DC:2C:71
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 019A4F6254BB5B3E157AB26B461EF4BC1583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0BC0
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: Yi1YYL02Mgj3PSQXJfO+bU7MrdrM45VdkSnsiOfk0cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:54:bb:5b:3e:15:7a:b2:6b:46:1e:f4:bc:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=31dd2511ed122ca642f360e03af4b2a0c5dc2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:27:9c:4f:19:90:37:2e:1d:4c:16:e9:19:
c7:bd:ee:51:08:77:07:47:79:99:2f:ed:3e:7f:12:
c7:47:72:82:28:f3:f6:2f:1b:36:f4:5b:bf:ba:16:
37:30:6f:60:92:eb:9e:c4:a9:12:8d:a3:b3:2c:bf:
32:cb:c7:f1:14:46:7e:58:0d:e9:5f:4b:e5:53:27:
a6:b9:20:f7:1e:2e:d3:6c:04:cc:45:09:0d:c2:18:
98:06:7c:98:d0:80:e5:aa:fe:0b:9a:60:8c:ad:52:
32:35:dc:ee:c3:d5:13:3d:af:bf:5d:b7:bc:bf:22:
b0:65:2b:a2:70:fe:14:cd:56:66:99:f3:4d:a6:5f:
0a:13:93:08:61:55:5b:74:c0:c4:f9:a8:22:4c:b9:
91:f0:d7:c9:33:19:4d:da:ff:5f:c6:ee:ac:f8:ad:
ab:c3:11:b3:68:57:66:ce:d3:16:20:07:71:13:d0:
28:14:85:73:44:ad:58:31:2d:c0:48:be:e2:07:fb:
28:8d:ac:e1:4f:0b:20:4f:b7:d9:03:fe:ed:b6:e7:
38:43:26:e1:0c:0a:e9:f1:d7:1c:ec:56:f6:db:c8:
1e:d0:82:ed:c3:9f:3f:1c:49:92:bf:62:95:67:2e:
8e:e2:ae:a4:5f:2c:b0:c5:e5:a9:c1:22:67:d3:72:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:25:11:ED:12:2C:A6:42:F3:60:E0:3A:F4:B2:A0:C5:DC:2C:71
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:d3:80:fb:82:3e:9c:70:07:82:ea:df:44:ed:87:a5:19:
aa:00:86:90:8f:d8:de:cd:c1:10:fc:c1:99:f6:47:5e:5f:33:
f5:c5:8b:f5:3c:95:6e:7c:63:c2:14:2d:f0:e9:d2:67:fd:fa:
d9:a9:be:4b:5d:4f:7a:64:0e:2a:cd:87:f2:d6:25:93:fe:cc:
c2:63:09:1e:df:96:54:ee:b0:7e:c3:73:c3:1d:12:f3:9b:7e:
44:87:75:d1:8d:db:74:fb:9f:a0:4c:b7:eb:c2:6e:ae:ee:84:
39:0d:18:d0:c1:da:e3:5c:24:f0:92:01:cd:45:33:dc:c4:85:
a6:75:87:a7:ec:c0:97:b0:81:94:58:26:08:ba:14:f4:54:84:
d4:86:8b:a1:dd:f4:79:db:dd:ac:91:b6:bd:c6:7c:60:73:ce:
8f:2b:2c:ac:f7:9e:a3:e9:18:bf:b5:55:b6:b4:4d:b4:9b:60:
1e:8a:07:7c:31:19:e6:9e:2e:b1:2f:56:5c:44:fe:0c:94:aa:
cb:f6:e8:d1:02:e2:08:00:f2:0f:c6:c1:f8:75:c6:5b:e5:ba:
5e:96:c0:3f:14:a1:10:05:f0:96:34:e3:1b:c1:3a:9c:6c:6c:
a7:79:b8:0f:6d:fe:29:0c:af:a5:bd:0c:cb:da:c7:6a:51:f2:
b2:1a:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:41 2025 by rpki-client