Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: N49ptn8Z4qXjRgJTZJBO/tl+Ext8Bq+Q3Rud00cdAE8=
Subject key identifier: A1:53:C3:88:D2:30:58:D1:C3:87:59:E2:49:DC:29:6C:C7:8A:26:51
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019679B22EAED7FF7D3A7D95D19FA48A6F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 0F80
Signing time: Mon 28 Apr 2025 00:00:42 +0000
Manifest this update: Mon 28 Apr 2025 00:00:42 +0000
Manifest next update: Tue 29 Apr 2025 00:00:42 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: C7+A9G2w7LsGcnecRxv3VCmqWYV2jX/5xEbyBhYwsgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:2e:ae:d7:ff:7d:3a:7d:95:d1:9f:a4:8a:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Apr 28 00:00:42 2025 GMT
Not After : Apr 29 00:00:42 2025 GMT
Subject: CN=a153c388d23058d1c38759e249dc296cc78a2651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:39:69:56:4c:8b:c0:2a:e7:1e:93:40:d3:
31:7a:c1:fe:40:eb:b2:28:14:e6:b2:59:b7:14:16:
da:38:81:6e:04:c5:28:db:77:0a:71:2c:9a:13:e1:
ce:0f:ea:a9:84:63:3e:c9:dd:b4:ad:9a:c3:02:3b:
e8:36:a8:a4:c4:7b:6c:64:18:49:24:8f:95:88:80:
5b:58:15:a7:88:a4:2a:6f:68:a0:5f:c8:e1:af:c4:
0f:21:67:a6:24:99:12:85:9e:57:3d:87:39:c2:32:
08:32:b7:db:bd:f9:76:4c:79:4c:85:72:89:bb:00:
a6:be:37:ff:5e:35:88:b5:f6:af:a6:e8:70:d4:9b:
3d:f1:cb:10:a7:2d:cf:e6:a9:08:19:95:12:b3:14:
bf:9f:0c:47:d9:48:fd:6a:ea:1f:c3:e4:f0:f5:bb:
14:45:2f:d4:1d:1a:92:40:71:e5:9e:e8:61:34:0f:
47:cb:e5:47:cd:37:92:8d:ed:31:5c:4c:b5:a0:0a:
94:2c:d8:ac:cf:3a:0b:5b:bc:e1:dd:cc:8c:c0:f8:
cf:58:77:b1:aa:7c:a7:0a:0a:51:9d:96:53:c2:ba:
ae:1c:80:de:2b:65:19:4e:69:a4:93:6a:9d:4d:f9:
94:74:3c:b2:4c:f1:79:ad:cc:bc:5e:81:aa:5e:77:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:C3:88:D2:30:58:D1:C3:87:59:E2:49:DC:29:6C:C7:8A:26:51
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:7b:92:0c:b5:4e:c7:4f:69:df:8a:e3:b7:02:3c:5e:95:
06:43:ca:0b:50:42:9a:23:98:fa:17:54:d3:0b:db:3e:f6:e0:
12:be:9f:fe:6f:0f:37:29:ab:07:18:02:9f:5a:a6:b0:62:51:
d0:ab:52:79:dd:a4:34:c5:09:ca:74:9b:f0:ce:6b:41:8d:19:
26:18:43:98:af:2b:53:f0:29:f2:c3:1c:90:c2:4e:bd:70:33:
7e:73:4d:5b:b2:41:a0:ad:3c:06:ff:56:b9:1e:2f:5a:c1:50:
27:fb:8c:a0:57:f5:a4:e8:3b:c5:00:22:4e:f6:8e:70:06:25:
47:eb:d0:24:48:be:73:02:1e:94:d1:0c:f6:c7:69:d0:6d:b6:
57:e3:dd:9d:b0:b2:42:b4:b1:85:79:e6:b9:42:e3:41:14:31:
f7:b5:b3:ae:9a:f3:37:ca:0a:aa:7f:46:24:ad:e9:2b:74:1e:
cc:51:a7:b7:10:ab:c0:1d:dc:c0:c5:c0:bd:c5:d3:c2:8e:54:
21:1d:63:37:3a:84:75:2a:f4:93:d0:0c:85:52:ba:32:4e:f0:
99:ac:4e:ac:63:30:d6:00:b8:ac:c6:e7:3d:2a:25:ae:cc:27:
cd:b1:31:6b:33:b5:eb:64:4b:5e:d6:49:22:9d:05:8f:d8:11:
d1:9d:3d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5si6u1/99On2V0Z+kim8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwNDI4MDAwMDQyWhcNMjUwNDI5MDAwMDQyWjAzMTEwLwYDVQQD
EyhhMTUzYzM4OGQyMzA1OGQxYzM4NzU5ZTI0OWRjMjk2Y2M3OGEyNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2So5aVZMi8Aq5x6TQNMxesH+QOuy
KBTmslm3FBbaOIFuBMUo23cKcSyaE+HOD+qphGM+yd20rZrDAjvoNqikxHtsZBhJ
JI+ViIBbWBWniKQqb2igX8jhr8QPIWemJJkShZ5XPYc5wjIIMrfbvfl2THlMhXKJ
uwCmvjf/XjWItfavpuhw1Js98csQpy3P5qkIGZUSsxS/nwxH2Uj9auofw+Tw9bsU
RS/UHRqSQHHlnuhhNA9Hy+VHzTeSje0xXEy1oAqULNiszzoLW7zh3cyMwPjPWHex
qnynCgpRnZZTwrquHIDeK2UZTmmkk2qdTfmUdDyyTPF5rcy8XoGqXnfu4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFTw4jSMFjRw4dZ4kncKWzHiiZRMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4Z7kgy1
TsdPad+K47cCPF6VBkPKC1BCmiOY+hdU0wvbPvbgEr6f/m8PNymrBxgCn1qmsGJR
0KtSed2kNMUJynSb8M5rQY0ZJhhDmK8rU/Ap8sMckMJOvXAzfnNNW7JBoK08Bv9W
uR4vWsFQJ/uMoFf1pOg7xQAiTvaOcAYlR+vQJEi+cwIelNEM9sdp0G22V+PdnbCy
QrSxhXnmuULjQRQx97WzrprzN8oKqn9GJK3pK3QezFGntxCrwB3cwMXAvcXTwo5U
IR1jNzqEdSr0k9AMhVK6Mk7wmaxOrGMw1gC4rMbnPSolrswnzbExazO162RLXtZJ
Ip0Fj9gR0Z09EQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:40 2025 by rpki-client