Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: d/TZKsUDlU0UQoNNVmRIhfkV+oe01KWLNHNazbs9+pU=
Subject key identifier: F6:8D:B6:26:A7:5B:31:8E:4A:DD:BF:19:5A:97:A8:BC:C5:12:16:2A
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019752A27A4DB6831B1D78046CAB5CD96AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0A3A
Signing time: Mon 09 Jun 2025 03:01:09 +0000
Manifest this update: Mon 09 Jun 2025 03:01:09 +0000
Manifest next update: Tue 10 Jun 2025 03:01:09 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: TMiz8Kqu113zTc0S9uzcK/LcwfIcBfiHUj6fkjr8wUM=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:7a:4d:b6:83:1b:1d:78:04:6c:ab:5c:d9:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Jun 9 03:01:09 2025 GMT
Not After : Jun 10 03:01:09 2025 GMT
Subject: CN=f68db626a75b318e4addbf195a97a8bcc512162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:b7:b8:f8:08:75:97:8f:78:e8:7e:ce:8a:
52:9f:7a:1d:f4:72:f1:d9:b8:bd:45:ae:fc:36:e3:
85:7b:7c:0c:ed:f3:aa:1d:dc:db:a3:87:93:b1:88:
97:c3:38:92:6f:6c:ab:dc:99:d3:ac:68:3d:e5:1a:
22:ec:ec:d8:ab:1b:7b:b4:8c:02:5b:64:15:bf:59:
52:1c:72:38:ef:ac:1c:1a:15:6e:fe:96:69:69:7d:
d3:76:10:46:41:05:f6:fc:0b:d1:3f:42:f8:60:02:
45:50:8d:84:da:2f:a7:67:c3:94:eb:45:1e:0a:8b:
88:19:14:26:c9:a5:99:b2:74:1b:f5:6d:8e:b5:bf:
98:25:ac:33:a7:4b:a5:45:b4:ad:d2:ed:37:a5:fa:
96:70:88:66:f7:36:05:d8:40:b6:28:cf:0f:65:c2:
37:96:52:fe:c1:6f:22:ae:75:b3:78:ed:32:e3:6d:
51:49:48:c7:06:57:11:13:55:64:3d:e4:10:02:6f:
ce:eb:de:d1:8f:ce:f2:aa:b0:5a:6f:27:a3:6b:db:
84:25:67:8f:76:90:46:3f:b7:4e:b0:ce:6a:1f:29:
e9:ff:82:57:7f:01:48:03:d5:31:89:cc:9e:9f:88:
1b:1c:0a:86:53:e8:b7:ce:cf:0d:06:86:92:67:b7:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:B6:26:A7:5B:31:8E:4A:DD:BF:19:5A:97:A8:BC:C5:12:16:2A
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:26:bd:2d:26:17:81:76:f5:0b:3d:02:32:93:61:20:58:
ce:54:7b:89:8f:2c:2c:8d:dc:0b:37:dc:68:2b:66:73:68:c9:
65:e7:01:0a:ec:d2:4f:aa:b8:3c:9e:42:38:a0:bb:20:bf:fb:
d2:72:86:b3:08:4a:76:72:5f:9c:d9:54:ac:04:7e:ea:bc:d4:
4b:08:d2:c7:ad:91:34:bc:d5:df:c1:01:4b:ce:cd:85:7a:31:
3c:22:7d:26:6a:f3:1e:3c:b3:c1:c8:b7:7c:f4:c7:f4:08:2b:
e3:4c:c3:0d:9b:dd:31:7e:42:7e:38:02:31:1a:cc:ee:4b:54:
97:c3:ff:7c:66:e2:e8:f7:68:6b:5f:30:0d:c9:f8:29:0f:d6:
34:9a:b4:e1:b2:11:d4:37:01:f7:79:02:08:f1:89:99:42:32:
8e:e4:e9:e5:4d:d0:c6:29:e8:5a:61:29:ce:76:30:d9:a0:b5:
75:eb:7f:03:33:1e:67:7d:1a:cb:26:eb:6d:47:4e:a9:85:78:
8b:66:3d:2c:20:84:d7:39:34:22:af:3d:19:6d:2c:35:f3:b9:
09:81:c6:34:82:c9:7c:69:ee:b5:07:4d:85:68:fd:de:35:2d:
af:29:b9:64:32:e0:93:c1:20:91:70:7d:f4:52:d3:9a:f1:e5:
d9:d0:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:47 2025 by rpki-client