Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: qwTryd0JsZoj7f2YOss/pVluIHBJKBvf1+oAIuMyOYk=
Subject key identifier: 73:DC:29:A4:B4:23:3A:49:FD:E4:97:1F:A8:46:9A:11:7A:D4:C2:AB
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 01985D9176BB7BDBCEC8EBBBF756751AE953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 160E
Signing time: Wed 30 Jul 2025 23:01:10 +0000
Manifest this update: Wed 30 Jul 2025 23:01:10 +0000
Manifest next update: Thu 31 Jul 2025 23:01:10 +0000
Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: ylSc5K+OPCeWggAp/72Q3jIaMZeMaMVP5ZhYKedn3VA=)
3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:91:76:bb:7b:db:ce:c8:eb:bb:f7:56:75:1a:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jul 30 23:01:10 2025 GMT
Not After : Jul 31 23:01:10 2025 GMT
Subject: CN=73dc29a4b4233a49fde4971fa8469a117ad4c2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:14:82:f0:01:14:31:bd:0e:6e:86:da:2f:
4d:a4:98:66:12:f3:79:0f:ad:cf:d5:86:f0:81:dd:
a2:99:7b:49:cf:28:d6:e3:df:4d:ea:49:57:1c:eb:
88:0b:18:19:b2:3c:74:27:1e:54:2d:fd:ac:2c:80:
e3:3a:49:ac:b0:53:ae:cb:32:25:6f:aa:e8:0d:11:
59:ac:a8:76:ed:5d:e1:76:3a:4b:ca:b8:b7:84:8e:
e1:88:fe:22:7f:2c:30:42:9a:bc:20:f8:37:80:3e:
59:fe:32:61:ff:81:29:9c:b6:ca:6c:14:16:30:4e:
42:5a:e2:03:16:2f:89:2e:d9:e9:41:8a:e0:16:9d:
37:13:e0:b2:ed:ac:b3:d8:5b:bf:ab:b2:64:c2:59:
e7:ed:ed:cd:f0:c8:13:df:7b:1f:95:45:e3:13:5d:
e9:7e:9e:2f:38:8e:cc:c0:9d:46:e7:c8:af:84:e1:
13:3a:36:a8:49:d6:54:2f:37:70:9e:92:a4:e5:f9:
1a:84:f3:38:6a:65:13:2c:05:f8:e4:c1:34:0f:63:
6f:6a:66:f0:a4:70:18:45:5f:0f:5f:d3:4b:67:9a:
70:78:e0:26:16:ea:49:7d:dc:d4:4b:de:e2:e0:53:
61:e5:cb:76:0e:b5:22:0e:73:0e:1f:ba:31:60:3b:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:29:A4:B4:23:3A:49:FD:E4:97:1F:A8:46:9A:11:7A:D4:C2:AB
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:20:2f:55:c0:ee:5d:41:f1:be:e6:e3:9e:39:a3:aa:12:15:
d8:9b:cc:fb:6e:a0:dc:8d:4f:37:f2:c3:69:29:54:a5:7d:3f:
62:06:49:8e:e6:3e:b5:2b:2a:e7:88:3f:8f:a1:62:c9:19:9b:
8a:77:fd:52:14:67:8f:a8:e2:f9:ff:08:83:d6:29:11:39:ec:
af:fe:82:e3:03:b4:9d:d5:53:2e:f4:ef:15:57:ae:cf:6d:77:
11:df:da:3c:18:0e:a9:d0:ac:4e:a1:18:84:e0:05:13:d5:ec:
a0:aa:60:98:c6:5f:8f:d5:0d:69:df:ec:48:6e:e0:3d:03:0a:
1c:8a:eb:88:51:ed:78:0b:2b:3d:ab:ce:51:32:61:10:8d:ce:
40:2b:9a:b4:cc:de:f2:74:e1:95:79:83:6a:6a:34:d0:d1:88:
02:d7:91:35:54:5c:5e:cd:b1:e3:db:57:2e:98:88:ae:c4:25:
dd:97:cb:b0:3f:9f:e1:94:2a:05:5d:1d:cf:de:9d:c9:4d:a6:
e3:66:96:e6:f1:20:e2:3c:21:32:18:5d:3b:c2:a8:72:6a:f5:
3e:63:34:45:d7:08:18:fe:9b:33:98:fe:4c:d0:5f:e1:83:f7:
97:0b:eb:d0:85:5d:e3:97:e2:b9:49:37:b9:65:34:de:59:c1:
a4:0a:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 04:03:25 2025 by rpki-client