Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: Fav1V60Er+tkQVfgO1QSnRNZTUdgM3nc2dIFteA4aog=
Subject key identifier: DD:87:02:FF:82:32:8B:A9:0E:9F:1E:6D:F5:F9:3F:C9:EA:06:60:5E
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019768BC20D2BD116F97F599914EA5C369B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1069
Signing time: Fri 13 Jun 2025 10:00:49 +0000
Manifest this update: Fri 13 Jun 2025 10:00:49 +0000
Manifest next update: Sat 14 Jun 2025 10:00:49 +0000
Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: ITw0wYUjeLtrOIpcD6rVn0NnK4Mzq8f0KyjSaYakXVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:20:d2:bd:11:6f:97:f5:99:91:4e:a5:c3:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jun 13 10:00:49 2025 GMT
Not After : Jun 14 10:00:49 2025 GMT
Subject: CN=dd8702ff82328ba90e9f1e6df5f93fc9ea06605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:c5:1b:45:06:e5:0a:af:68:9b:d2:9c:e5:
84:bb:ee:13:8b:1f:6d:d6:bd:37:1f:0e:ba:ca:43:
40:41:bb:b2:fb:ae:db:bb:fe:58:cd:d8:09:d7:2a:
73:7f:94:17:a7:30:02:ec:50:01:cf:34:0b:d0:11:
9a:33:09:5d:b4:74:be:c0:21:0e:5b:a4:50:86:d9:
b8:5f:d3:4b:56:55:d5:89:b2:39:c9:fd:8e:41:47:
1b:35:4e:92:b0:23:97:a2:de:c9:c9:0a:32:c2:95:
f5:2e:94:7d:72:98:9c:f7:64:3d:f5:be:1e:73:95:
f7:5a:a2:eb:57:84:d7:1a:5b:15:11:0d:f9:37:ee:
52:25:7b:d1:10:f2:88:83:44:f2:0e:7f:3e:1b:f2:
1d:d1:0b:90:cb:12:32:e4:5b:0e:52:45:70:4b:04:
3f:9e:fe:2b:c6:c5:05:99:10:c8:5c:62:0d:e7:2e:
0e:28:0c:a3:09:22:98:97:a6:c1:66:d2:ff:22:3c:
76:37:92:4a:ef:d0:ea:25:f3:37:54:86:ed:d5:dd:
25:a0:23:37:df:d4:38:78:9e:30:ba:cc:87:fc:79:
ed:26:0a:f3:f4:64:1b:44:54:d8:a0:05:f2:02:85:
d0:15:a8:64:ec:25:05:d5:7a:ab:38:31:6e:95:6d:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:02:FF:82:32:8B:A9:0E:9F:1E:6D:F5:F9:3F:C9:EA:06:60:5E
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:73:1d:4c:ea:52:90:50:8a:06:17:60:f5:35:5f:61:b0:55:
82:3e:96:dc:be:8c:ad:55:3d:49:1e:3b:ce:bd:d1:b2:07:0a:
4f:a1:56:fd:4d:5b:32:3e:4f:6c:e4:60:92:97:63:c5:31:9f:
3b:30:6f:82:4d:ea:08:3f:7d:de:9d:0b:d6:87:02:c5:d2:5a:
bc:49:0b:ae:62:79:1b:2e:c4:31:94:e6:cd:49:2f:d6:e3:30:
00:c9:74:f3:6a:85:21:6c:97:3d:6a:49:ef:be:df:de:70:69:
68:86:cd:4a:1a:99:59:d8:0e:d8:4d:b0:4d:b1:dc:38:0f:5e:
33:c2:ef:09:89:8d:c3:6d:7c:5d:11:f7:af:46:54:40:67:2b:
c8:e8:07:24:59:81:a9:92:db:e4:72:04:fe:93:0b:d8:ed:39:
67:63:42:b8:fc:96:4b:25:b6:8b:b8:9b:4f:74:c1:cc:bd:7f:
09:2f:05:25:26:00:fe:b4:13:d6:50:a2:35:bb:76:b7:ff:15:
cf:96:07:8f:cc:82:ff:04:98:cc:f6:6e:f3:3e:ef:ce:3e:79:
17:f4:a0:2c:24:c4:61:b9:f8:49:55:a8:a2:1e:de:37:a4:f9:
d7:0c:2e:b1:6d:16:b4:97:34:59:97:2a:64:11:56:0d:c4:49:
66:6c:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:45 2025 by rpki-client