Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: +yjKbOdS04DutcNrJczPz6/AcNIRG1NAUUu9SYyIhRU=
Subject key identifier: 1D:2F:CB:3D:FB:BB:1C:3F:BE:44:CD:09:17:14:B2:01:18:25:76:2E
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019873E3FD8FEDA712C2DBD8BF305B6BEE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 1086
Signing time: Mon 04 Aug 2025 07:02:58 +0000
Manifest this update: Mon 04 Aug 2025 07:02:58 +0000
Manifest next update: Tue 05 Aug 2025 07:02:58 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: 3mYessInNE/yHIKeRTcA4Mt9xtU5B36I0GN/KQCL5hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:fd:8f:ed:a7:12:c2:db:d8:bf:30:5b:6b:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Aug 4 07:02:58 2025 GMT
Not After : Aug 5 07:02:58 2025 GMT
Subject: CN=1d2fcb3dfbbb1c3fbe44cd091714b2011825762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:c2:ef:cc:ed:bc:a1:36:cb:bf:89:fb:e5:
41:a4:39:55:90:80:11:c5:a3:0d:9c:b3:03:e8:b2:
38:9b:0a:24:80:f5:52:15:8a:aa:9e:a8:2c:76:23:
fa:ad:78:3b:ca:3b:20:7e:c8:d3:47:cc:ee:82:65:
46:18:c9:cf:ae:5e:c0:2b:f4:73:b1:92:e6:f9:0b:
24:01:d6:e8:f0:27:c2:e1:e3:63:7e:42:69:00:f7:
23:98:73:f7:7f:b9:0b:40:a3:96:47:35:e2:f8:7e:
2d:40:bb:1a:e0:d1:83:4c:81:f5:6b:d7:ab:50:3f:
db:aa:55:de:ec:2b:c5:b0:08:e4:ff:03:e6:71:9a:
f0:da:6a:44:93:5d:24:3e:e9:4c:d4:f1:0e:ad:8c:
5a:40:05:16:2f:53:17:15:b9:c3:f3:72:be:2e:91:
14:e1:3a:a5:61:57:46:cf:fd:a7:5c:65:3e:06:6c:
84:96:7e:36:9b:50:10:58:40:0d:05:8b:8d:bb:d3:
ab:83:2a:c7:fa:5f:8d:5b:e8:e1:5f:0a:2b:7c:27:
2c:60:d8:6e:11:1b:0a:f7:8a:a2:d8:f1:9a:79:b6:
66:07:39:05:88:5f:06:7b:45:5a:68:93:26:cc:00:
4b:d9:17:07:af:ff:49:81:19:ed:58:d3:d5:a3:28:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:CB:3D:FB:BB:1C:3F:BE:44:CD:09:17:14:B2:01:18:25:76:2E
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b9:ed:32:0e:cc:4b:06:b3:54:26:7f:b2:25:bd:3b:1b:ce:
ca:8f:86:8a:04:89:fc:48:7c:2b:c7:ce:b9:f1:9b:9d:96:f6:
a4:0a:e2:a7:4a:35:83:ba:91:82:e9:94:24:76:f2:b9:c8:40:
04:01:fd:4a:7d:e4:9e:8e:c2:0c:1d:9d:93:6b:b0:00:17:91:
75:a7:f0:73:ba:11:84:84:a9:3c:ef:27:30:51:a5:78:b8:35:
d1:1b:fc:bd:78:60:91:ac:c9:d6:e8:72:2f:1a:ec:75:cc:9a:
71:c3:ba:f6:f0:d4:f5:e9:c5:cc:b5:5e:4d:60:b3:18:24:e0:
65:d2:ab:d0:dc:60:23:fd:98:78:06:f6:bb:d7:e2:59:88:29:
b4:aa:a2:f4:e0:4b:d0:60:5f:95:73:f5:98:da:7e:3d:03:db:
44:c0:af:fa:04:43:0e:70:dc:ab:26:bc:f8:68:fc:08:e9:0c:
8b:d8:29:0f:4f:09:40:25:c4:e2:75:2a:3d:96:ee:77:c8:44:
9e:b2:f4:c1:79:d6:79:79:f3:17:f5:d6:2e:4f:8b:5c:dd:ca:
93:6f:ff:6d:f1:72:7f:e5:3d:c6:1e:e7:43:36:6f:80:52:5b:
ec:59:78:92:3a:ae:d7:6d:50:93:ef:4b:5a:be:07:75:ba:7e:
00:84:0e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4/2P7acSwtvYvzBba+6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwODA0MDcwMjU4WhcNMjUwODA1MDcwMjU4WjAzMTEwLwYDVQQD
EygxZDJmY2IzZGZiYmIxYzNmYmU0NGNkMDkxNzE0YjIwMTE4MjU3NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDrC78ztvKE2y7+J++VBpDlVkIAR
xaMNnLMD6LI4mwokgPVSFYqqnqgsdiP6rXg7yjsgfsjTR8zugmVGGMnPrl7AK/Rz
sZLm+QskAdbo8CfC4eNjfkJpAPcjmHP3f7kLQKOWRzXi+H4tQLsa4NGDTIH1a9er
UD/bqlXe7CvFsAjk/wPmcZrw2mpEk10kPulM1PEOrYxaQAUWL1MXFbnD83K+LpEU
4TqlYVdGz/2nXGU+BmyEln42m1AQWEANBYuNu9OrgyrH+l+NW+jhXworfCcsYNhu
ERsK94qi2PGaebZmBzkFiF8Ge0VaaJMmzABL2RcHr/9JgRntWNPVoyj6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0vyz37uxw/vkTNCRcUsgEYJXYuMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLntMg7M
SwazVCZ/siW9OxvOyo+GigSJ/Eh8K8fOufGbnZb2pArip0o1g7qRgumUJHbyuchA
BAH9Sn3kno7CDB2dk2uwABeRdafwc7oRhISpPO8nMFGleLg10Rv8vXhgkazJ1uhy
LxrsdcyaccO69vDU9enFzLVeTWCzGCTgZdKr0NxgI/2YeAb2u9fiWYgptKqi9OBL
0GBflXP1mNp+PQPbRMCv+gRDDnDcqya8+Gj8COkMi9gpD08JQCXE4nUqPZbud8hE
nrL0wXnWeXnzF/XWLk+LXN3Kk2//bfFyf+U9xh7nQzZvgFJb7Fl4kjqu121Qk+9L
Wr4Hdbp+AIQOqw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:24 2025 by rpki-client