Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: AKbwn2UZSTTQZp35VnJT6w3v2Px0F4OWIJ6Ofw5uKSY=
Subject key identifier: 2F:39:E2:96:EB:DB:B4:5C:05:27:7F:44:64:25:F8:77:89:A8:0E:AA
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019874503BB4424B93E176510E21338FB6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0669
Signing time: Mon 04 Aug 2025 09:01:11 +0000
Manifest this update: Mon 04 Aug 2025 09:01:11 +0000
Manifest next update: Tue 05 Aug 2025 09:01:11 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: i1wt8EWDGSvoBxuSzX3Pyo5jP1CZhieC/gQ0ln4YRHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:3b:b4:42:4b:93:e1:76:51:0e:21:33:8f:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Aug 4 09:01:11 2025 GMT
Not After : Aug 5 09:01:11 2025 GMT
Subject: CN=2f39e296ebdbb45c05277f446425f87789a80eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:1e:f3:91:cc:11:74:67:f2:5a:c4:89:83:
8c:cc:a4:0b:5b:69:ba:66:30:4e:62:bd:bd:12:d0:
51:db:1c:0c:bb:c8:d2:02:f2:b6:ba:50:5a:49:97:
6c:1f:46:59:ff:e2:a8:45:02:26:0e:fb:ce:ba:a4:
6d:67:51:c2:58:92:5d:8f:db:17:b5:5b:07:90:50:
ac:99:68:de:44:22:ac:2f:a2:9f:61:1e:c1:11:9c:
70:d7:f0:6c:6a:31:e0:a1:bb:25:cc:16:fb:c2:0f:
e5:11:ff:f0:38:72:2a:75:08:f0:b3:1f:54:34:98:
fd:e5:ee:77:d9:18:36:14:08:8a:18:80:7e:08:52:
cd:72:1e:db:de:23:f2:34:aa:71:80:bc:27:6d:78:
d5:03:32:22:88:78:89:0f:ed:75:2a:8b:20:5f:96:
d5:ff:d7:f0:86:1f:46:7f:55:ac:6b:68:84:f2:77:
b1:18:9e:83:9b:f6:19:57:f6:22:1a:93:b0:6d:9f:
ca:cd:67:3e:72:30:36:1b:d5:1e:21:80:ca:6a:a4:
08:ca:0b:83:6a:81:d8:23:96:7f:a2:61:a8:60:a3:
65:0c:e1:17:97:37:85:5c:80:83:a3:9a:5c:8f:97:
7a:55:c1:2e:7e:1a:b2:d6:90:ac:40:37:ab:72:be:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:E2:96:EB:DB:B4:5C:05:27:7F:44:64:25:F8:77:89:A8:0E:AA
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:50:2d:5c:f7:82:ec:67:3f:1f:73:52:55:7a:31:f7:a2:e8:
a7:27:6c:ed:ae:1e:b3:c4:a1:11:84:54:de:61:83:0a:a1:e8:
a8:f6:a3:32:01:e4:6d:6c:57:b6:dd:45:eb:0a:e6:cf:ad:c5:
1f:ee:b1:ea:2e:8a:4d:0c:6d:70:79:30:bb:e6:bf:1a:84:a8:
8c:f2:50:98:36:c4:83:2c:e1:1a:51:86:75:3a:23:05:5e:be:
bc:27:67:44:4c:55:9b:19:49:5b:e1:02:3f:f1:2f:b4:8f:b0:
fb:be:e7:a5:85:3c:8d:45:3b:e0:f3:c2:d7:1b:08:ef:25:12:
42:62:72:eb:de:52:9c:bb:3f:d9:78:88:b7:ea:13:00:95:4d:
87:f3:f6:64:1e:dc:28:b8:31:cd:eb:6c:15:e0:19:99:66:f8:
7d:d9:13:4e:64:f3:48:d2:b2:ae:62:5a:46:ec:27:bf:e9:09:
ec:49:a6:08:4e:d2:4f:76:4c:d9:88:77:54:3a:67:ce:56:e2:
26:fb:22:6d:01:46:73:c3:d3:bf:13:cd:7f:61:c6:dc:3c:f8:
d8:00:68:b5:43:41:fa:2c:51:d2:5f:06:fa:7e:10:de:c6:6b:
04:4c:b8:59:c8:f0:a5:6b:67:07:f2:08:0f:73:b7:cc:87:39:
1d:b7:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:05 2025 by rpki-client