Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: eJ7ddJOaUowOYJyGc65+Ddh+4vFxEJXX9K0pIDK01oo=
Subject key identifier: 89:BF:81:19:17:6B:97:68:07:D1:02:18:89:C9:54:90:E3:CD:75:5B
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 0197718885D666D06FCF9296656ECFE52C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 05E3
Signing time: Sun 15 Jun 2025 03:01:01 +0000
Manifest this update: Sun 15 Jun 2025 03:01:01 +0000
Manifest next update: Mon 16 Jun 2025 03:01:01 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: ixSA1F9/l3h7pvNsnVxuLHVPJkI0eggFapxdRHpTagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:85:d6:66:d0:6f:cf:92:96:65:6e:cf:e5:2c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Jun 15 03:01:01 2025 GMT
Not After : Jun 16 03:01:01 2025 GMT
Subject: CN=89bf8119176b976807d1021889c95490e3cd755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:47:7f:2f:06:7b:4f:8e:6a:53:09:67:4e:
d8:4f:dd:63:9c:31:35:b3:1b:c3:bf:ab:34:80:7e:
41:50:3d:2f:ab:a8:e2:37:a6:b8:90:47:ab:30:39:
8d:29:35:53:a0:fd:5a:9f:81:f7:20:28:b6:4b:07:
5d:f7:37:59:29:fc:41:20:da:5b:6a:3d:54:0a:e7:
7e:5b:80:c8:68:89:26:51:69:77:ed:16:0e:9f:9b:
1b:3c:f7:d4:ab:33:26:e4:5c:70:cf:8c:42:94:b3:
f9:c3:93:2c:e0:09:47:a5:f9:f8:53:57:e3:1c:61:
8f:b8:bf:13:ef:38:bd:a1:c7:a0:da:f6:37:ca:c3:
a3:e8:89:26:ae:7c:3a:15:b0:46:3b:ab:54:0c:a5:
a9:04:7b:11:14:30:49:84:da:f7:a4:93:55:67:21:
bd:1a:f3:3e:81:c2:4a:3e:e0:34:b8:8a:7e:7f:47:
c1:94:96:fb:01:3e:20:9e:6b:7a:fd:f4:29:e8:a5:
15:65:bf:f1:92:88:3c:fc:3d:91:89:dc:23:51:c7:
6d:99:0f:6d:a9:2c:4c:5c:e7:30:d3:bc:b6:e3:79:
ce:41:6e:93:2a:08:ac:b9:03:bc:a8:0c:0a:70:d0:
23:8c:2f:ae:c1:90:3c:0e:1d:fe:11:aa:6f:45:db:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:81:19:17:6B:97:68:07:D1:02:18:89:C9:54:90:E3:CD:75:5B
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:72:5b:69:69:38:fc:67:06:55:4b:d1:2b:dd:9e:1c:ff:
c9:f8:6e:9d:3c:32:05:42:93:d2:fe:df:36:29:2c:2a:47:3b:
ea:c1:c0:6c:01:8a:de:62:97:ff:a6:1f:08:3c:3b:9d:54:e4:
2a:a9:db:05:7a:41:68:38:b2:de:7a:34:01:dd:5a:d5:60:b6:
9f:18:60:46:b6:ef:b7:62:2a:11:aa:3c:42:d5:f5:08:2a:18:
35:f0:8e:cd:68:1c:17:4f:3f:f9:bf:be:5b:3c:c0:73:79:b6:
f2:02:df:5b:3b:a4:d4:c2:cb:ba:a5:9a:4e:19:e4:d6:20:cb:
a2:45:60:68:9f:5c:a9:e8:37:50:63:ba:7b:8f:d7:6e:fa:7d:
f9:e7:09:ab:f9:97:52:b9:20:cf:e2:df:9f:98:d1:49:f9:8a:
57:1d:59:0a:ef:6a:93:fe:b7:64:f9:e8:a2:a4:18:a0:15:cc:
0a:1f:fe:cd:af:a5:ea:4d:1d:d4:d8:eb:20:a2:c0:47:22:ef:
d3:bd:92:3c:fd:fd:54:94:98:9b:34:37:0d:ee:69:a7:2d:d1:
44:75:4a:fe:67:dc:f7:60:66:cc:30:99:c1:e1:ca:53:08:0a:
4f:4b:50:10:8c:ae:a6:20:6b:0b:77:7f:07:76:67:50:49:f5:
3a:fe:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:19 2025 by rpki-client