
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: Tj3yHAknkPgvQHzJBBwMLzazwb6IlPvoqCuAQeS9KbI=
Subject key identifier: 61:C3:E9:99:64:EB:A7:0A:CE:AE:8F:4C:7D:A4:A3:56:5D:9C:56:CC
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019895FFF0EE6E67DB8A1D903E2474B85B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0DF3
Signing time: Sun 10 Aug 2025 22:00:35 +0000
Manifest this update: Sun 10 Aug 2025 22:00:35 +0000
Manifest next update: Mon 11 Aug 2025 22:00:35 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: je0SUvBsKZB/V2QdhMdLzt3GAW7R8qDYuMgW+SG6dCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:f0:ee:6e:67:db:8a:1d:90:3e:24:74:b8:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Aug 10 22:00:35 2025 GMT
Not After : Aug 11 22:00:35 2025 GMT
Subject: CN=61c3e99964eba70aceae8f4c7da4a3565d9c56cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:68:76:c6:58:bf:14:1a:89:97:cc:0c:c0:
63:5e:4b:be:c1:da:c6:5d:eb:30:b6:4e:d4:fe:75:
bd:39:91:54:bf:96:5d:ad:fa:27:52:49:85:14:94:
12:ab:c0:29:55:0a:9d:27:27:56:cf:a0:85:2e:81:
24:8e:b8:94:c4:e6:e0:21:54:ce:4c:6d:a1:42:5f:
de:90:f7:77:d4:ea:e6:3b:15:7e:c1:2a:f7:40:1e:
c2:b0:38:78:6c:3e:c5:48:cc:9c:a2:6b:a1:f0:10:
1b:2d:62:bd:34:a9:49:19:06:60:5a:7b:cc:4c:40:
56:6c:00:39:cd:2d:3f:cb:ef:60:8a:79:09:ed:1e:
5c:c7:ce:63:7a:9f:1f:9b:c2:6b:e3:ca:18:84:5d:
d4:1a:1d:ea:c9:a8:3d:71:a6:1f:8c:c4:8b:06:ed:
0e:b3:7f:fe:1d:76:3e:a2:d5:86:9a:9f:55:ca:e6:
26:a2:dc:1b:41:ce:ed:aa:07:0b:df:8f:e0:ac:ad:
9d:a4:a3:4c:02:49:2c:88:80:2f:91:a0:67:6d:e0:
f3:e5:dd:61:6e:27:ff:3d:b3:33:7d:01:a7:8f:df:
e7:d7:29:d6:0d:c2:2e:3a:3e:10:7a:17:f2:11:7c:
35:c6:bf:57:16:d4:d4:c7:25:65:17:d4:80:ba:4b:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:E9:99:64:EB:A7:0A:CE:AE:8F:4C:7D:A4:A3:56:5D:9C:56:CC
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:e9:a7:da:04:9f:a7:73:98:eb:cc:8c:f8:b5:d2:34:fc:
3c:b3:ad:73:8b:28:0a:40:e6:cd:ab:67:9d:c3:8b:44:e3:0b:
45:9a:e5:04:e6:08:72:c5:bb:50:32:22:2d:cd:ea:60:93:4a:
f1:dc:18:a0:7f:f6:f4:87:8c:af:6b:b4:7c:06:74:59:ac:c8:
48:94:55:87:ff:19:4e:b9:f2:ac:5e:8d:a8:58:60:39:9a:6b:
90:14:61:02:6f:ef:3f:a8:0c:44:a5:75:97:85:9d:c1:04:ef:
04:76:b6:65:98:9e:a1:c2:cb:bc:6b:bb:e8:a4:a1:54:2a:9c:
2c:ab:47:c7:53:26:56:9c:e0:30:4b:fd:da:65:be:57:4f:7d:
c5:f3:3c:fc:a6:fd:23:48:46:90:0e:91:64:e4:af:f2:3e:64:
83:8f:19:3d:0c:3a:f8:d5:b0:6c:05:d9:39:d6:c8:c5:e1:f6:
92:a4:f2:33:0a:35:41:72:40:c0:12:96:4f:99:82:08:4f:89:
84:4e:1b:46:04:96:75:11:82:35:b2:50:e5:d0:c0:ae:0c:e3:
a7:98:a9:ef:38:ea:8b:32:00:c2:ba:4f:2d:cc:b2:c7:77:6f:
a6:94:e2:f0:53:79:5c:0a:ee:6a:b8:41:c7:ca:a8:f2:01:08:
5a:d1:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:42 2025 by rpki-client