Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: 5Lnj+SICWtJuES0rzG4MncFfUKAVCYLGEulf3WjL0wE=
Subject key identifier: 42:FF:F8:4F:58:4D:11:44:37:11:59:65:BA:4E:A3:B7:3B:43:D1:7A
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019A503E22D0088650DB2BC02F2DD1E6E724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 11EA
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: 9g3TWdZ/P1c+EeYsa8GSHTXTHXITmisG8IrWcuTTjhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:22:d0:08:86:50:db:2b:c0:2f:2d:d1:e6:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=42fff84f584d114437115965ba4ea3b73b43d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:d8:e3:57:38:93:3e:a5:f8:ed:14:d6:23:
8c:99:7b:48:3d:55:e1:c6:43:6b:07:2f:bb:fb:6f:
f6:f9:d8:72:d8:1c:23:64:ef:e9:84:c2:9a:17:7d:
1e:c7:14:aa:cc:7b:cf:ba:a7:60:81:44:bf:2c:40:
9e:ee:36:6e:56:eb:21:b9:7b:d5:d8:55:c4:ba:c5:
12:04:6d:fa:44:7a:24:60:47:fa:d6:bb:55:4a:ea:
e7:84:ca:dd:61:8b:20:1b:ca:43:3e:25:75:4d:63:
91:00:9f:4c:36:cf:e7:17:4a:82:de:82:ff:ca:5e:
80:52:c9:d8:f1:aa:ed:f7:35:65:ab:95:4d:ef:f0:
db:b5:fa:d9:46:73:62:93:ec:31:1c:ce:3b:4a:ec:
a9:60:e1:60:70:a2:62:19:43:89:8f:25:df:a3:2d:
ab:0b:7e:8b:ca:17:d4:dd:ed:db:2c:f3:6a:ca:6e:
2b:3c:48:4a:78:76:71:16:5b:50:40:08:aa:34:5e:
d3:4f:8b:9b:d6:c1:e5:f9:1e:af:47:c9:01:d9:0b:
cb:49:b8:ba:b1:6e:41:61:47:b8:93:8a:ce:f5:e2:
16:27:d1:68:99:fb:b4:a9:e0:5b:7d:62:ca:5c:59:
dd:c5:7a:77:1e:4f:94:30:8b:93:65:a0:fb:45:f5:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FF:F8:4F:58:4D:11:44:37:11:59:65:BA:4E:A3:B7:3B:43:D1:7A
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a1:2c:c2:ea:90:8c:6a:b7:c2:9d:dc:31:54:ca:aa:03:83:
ad:c0:3e:19:1b:0a:f4:61:67:cf:07:f2:43:81:01:55:fb:02:
dc:2f:2b:a0:fb:67:f3:fe:a5:de:8c:4b:1b:15:57:c5:0d:d1:
62:9c:e3:bd:dc:75:96:f5:8f:0a:b0:00:e1:9c:df:95:7c:f8:
c2:4d:16:61:f9:7a:73:60:f3:3d:5e:1f:25:46:91:a6:02:3f:
66:46:bd:d2:0a:b7:be:e0:c2:aa:2c:dc:5c:d7:8f:bf:8a:4a:
80:ef:c9:a5:18:62:b9:06:33:e1:e0:9d:b9:62:52:00:c3:0e:
cf:cd:e9:e9:60:46:22:77:e6:92:1f:ab:29:85:ad:46:03:13:
50:0e:98:7d:00:54:dc:dc:ae:1b:6e:d2:1c:e3:29:91:a4:b7:
6d:78:06:cf:67:5e:12:6b:7f:67:ee:7d:1e:22:76:26:df:6c:
f6:87:f8:c0:32:41:3b:a5:36:c7:ed:e1:5e:8a:b9:54:b0:97:
0e:10:44:4b:f5:60:39:27:11:64:9d:d4:93:8f:cc:c0:76:b7:
d6:13:66:54:49:2d:e8:d2:ae:45:5e:af:c5:90:87:82:01:64:
b6:a0:c4:08:21:49:c7:c8:1e:51:57:5c:68:55:74:46:36:b8:
02:6d:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:01 2025 by rpki-client