Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: VDez83moWolBhSTO2/Rm1cIoUoc1e1/2oYD0B4P68UU=
Subject key identifier: CA:6B:7F:ED:E5:BB:1C:B7:F7:B2:52:65:18:26:06:07:7A:82:52:BD
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019A4F626FE36B951FE1828A7EF56B059CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 075F
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: oquI7Lah1ON2vpwbyyBCJbyJWwz/bK5efmoQ+tY/jfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6f:e3:6b:95:1f:e1:82:8a:7e:f5:6b:05:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=ca6b7fede5bb1cb7f7b25265182606077a8252bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:25:a7:d8:ea:46:c1:0d:b3:cc:3c:9b:4c:
0e:84:74:cb:b1:8a:e7:1c:dd:f4:58:8e:42:d5:b1:
ad:42:18:0a:a5:e2:d5:b6:2c:df:2a:51:b6:89:23:
c7:cc:72:16:3f:43:71:43:bf:de:d0:e7:e0:f1:62:
23:90:c4:76:33:4d:3d:3f:07:c1:84:1d:38:70:d6:
c1:06:5b:d4:fa:24:14:25:24:cb:a4:4a:f6:89:04:
eb:4b:0b:ba:59:cd:92:c4:73:38:e3:26:b0:61:cc:
2f:57:69:ac:64:65:26:a4:ae:d9:e0:2d:a3:79:c0:
d0:95:02:24:b9:01:30:4f:2c:20:ef:3f:03:2a:85:
4d:80:4d:b0:ea:63:76:a9:8c:0d:cb:42:6b:4a:c9:
c2:17:17:26:5b:d6:60:a3:16:be:61:2f:b3:42:15:
fe:e7:28:30:33:8f:61:7b:8b:62:a3:7e:d3:71:b2:
5f:13:e9:45:14:0d:fd:b2:79:21:03:60:7e:b4:5a:
06:98:26:2e:c6:46:3d:8f:48:7b:00:64:17:62:9c:
73:80:51:3b:2a:70:17:77:d0:f7:3e:20:89:d7:d9:
79:c5:ae:94:08:9e:82:25:7f:ef:78:ec:ce:ec:f3:
9e:f9:9f:62:af:45:c7:e9:1e:9c:93:8a:81:6b:89:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:7F:ED:E5:BB:1C:B7:F7:B2:52:65:18:26:06:07:7A:82:52:BD
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7b:2a:a1:7f:68:df:34:2a:e6:f1:74:f7:d7:f6:a4:4a:7e:
7b:60:7f:20:de:11:4f:d8:cd:f4:94:91:4f:be:7b:db:f4:8f:
03:67:7a:28:c7:a3:ba:cd:73:7a:dd:84:b3:b3:42:9b:84:80:
70:4c:09:4b:b1:e9:48:32:87:fe:b0:5a:30:0c:f0:41:0c:5b:
6c:81:43:95:7f:02:6c:3a:44:4e:87:6e:ec:3b:9f:32:e6:31:
d5:5f:6a:69:bf:2d:64:a9:36:db:a8:a4:a8:92:82:f1:8e:dc:
f5:df:cf:7d:72:70:28:4e:72:11:3a:a8:1e:c6:74:66:28:42:
f2:c9:3b:c6:43:63:ad:b4:b8:45:4f:46:1c:e4:19:a3:e7:bf:
71:2f:7c:d5:e5:4b:68:59:3b:fd:6f:c1:41:a4:bb:35:0b:68:
80:07:1c:d4:6d:b8:69:0c:41:25:1e:b5:4a:25:5f:e8:7d:1a:
b3:9f:29:76:c3:8b:0d:a9:83:32:44:ed:62:3f:f4:07:94:10:
14:57:e5:09:95:52:4b:75:cd:70:f2:68:b4:f1:b2:8f:a9:69:
81:1f:98:45:4f:fa:e5:05:97:76:a3:21:17:95:87:46:3e:85:
4f:eb:7d:a4:77:39:b1:00:63:0a:f0:9d:80:e0:17:54:e0:7a:
c2:23:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:13 2025 by rpki-client