Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: 4Y2uXKcXs+QabfIX9QBlVqYJJFCGzxhXAR66952/d90=
Subject key identifier: 82:C3:E0:77:DE:EB:F6:40:5E:FA:8F:11:02:DF:C5:08:48:39:12:91
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019A72266BD8424C61E84761AD6C0A3132F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0BD8
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: pwa8w67HpP1hu4+2Za03YQiwFxOEZvGiC7DfUbbPNs0=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6b:d8:42:4c:61:e8:47:61:ad:6c:0a:31:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=82c3e077deebf6405efa8f1102dfc50848391291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:fd:c5:1a:16:f9:42:49:c7:33:bc:d1:8a:
d4:06:f6:bf:0e:f8:33:26:ef:7b:65:b6:ff:03:da:
75:49:29:30:25:0b:c6:22:f9:96:81:d1:5e:ec:ad:
1f:57:16:99:9d:24:5f:ee:4f:92:4d:c8:98:a8:ca:
7e:6c:92:4a:f2:59:73:e9:10:14:57:30:1e:70:8c:
fc:05:65:81:af:da:44:8c:b0:55:54:86:c1:cd:d3:
68:5d:fa:fc:e0:7f:73:82:cf:9c:c9:35:c9:50:2e:
e4:ba:cf:7c:a5:87:85:04:c6:f4:f9:71:10:a1:bf:
74:60:c9:de:a5:7d:ad:43:a8:7d:75:9f:fa:f8:95:
1f:71:99:99:f3:ef:b0:15:5d:5c:2e:9f:98:3d:81:
f4:db:07:c5:88:38:d3:89:78:c2:79:d6:17:3c:f9:
24:86:bf:34:3a:fe:66:67:17:e7:67:6a:7b:76:f2:
8d:c9:8b:10:be:5b:0b:a5:2d:26:b9:3a:90:41:ab:
48:27:11:ca:22:10:0c:98:de:77:d7:a6:11:ce:e4:
6a:2b:ea:0f:86:fa:cf:84:73:37:f6:d1:86:70:5f:
69:9a:57:e8:f1:c6:3b:99:a4:ae:22:81:b4:86:e9:
a8:5b:4f:89:a2:18:bb:7f:03:76:13:36:74:cc:e6:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:E0:77:DE:EB:F6:40:5E:FA:8F:11:02:DF:C5:08:48:39:12:91
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:f6:b5:2b:10:56:0b:f0:2f:a9:fc:93:82:be:e6:c6:60:
7b:08:59:fc:82:bc:67:14:59:bf:c2:ce:43:f7:d9:f2:09:d9:
6d:51:d3:2c:b1:4c:c2:29:86:25:db:c5:2e:95:2e:96:c2:40:
86:87:17:d6:6b:6a:d2:85:49:b6:72:06:81:01:7f:11:19:11:
23:de:21:d4:27:17:61:cf:ef:30:5f:14:5a:fd:66:f2:d9:3b:
44:3a:4c:89:5c:27:92:10:13:c4:ff:bc:77:26:de:51:fe:cc:
fd:40:ad:9e:f3:a6:26:c3:85:b5:47:29:17:8d:14:3a:81:8e:
de:ef:41:d4:29:d3:e1:3d:98:ff:4e:de:0f:86:0a:9c:18:ba:
97:db:9d:00:79:43:7c:f6:61:73:e0:57:b9:a3:44:d1:e2:3a:
dc:58:6c:00:2d:8b:13:ef:4f:0f:65:9a:1e:2a:d9:79:d3:67:
ed:9b:ca:9b:8a:22:e3:01:78:14:82:cb:37:38:84:94:73:6b:
cb:9d:7f:0a:0f:07:d9:68:6b:c7:91:83:ad:63:a9:ca:46:c6:
78:20:f9:49:d1:13:ee:cf:61:a4:2a:8c:49:5d:0b:f5:ae:c2:
0e:bf:38:ac:0d:a6:62:a8:87:b3:b5:4e:eb:0b:bc:af:03:fb:
30:1a:b3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmvYQkxh6EdhrWwKMTLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex
ODY0ZjQwHhcNMjUxMTExMDkwMTUxWhcNMjUxMTEyMDkwMTUxWjAzMTEwLwYDVQQD
Eyg4MmMzZTA3N2RlZWJmNjQwNWVmYThmMTEwMmRmYzUwODQ4MzkxMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraj9xRoW+UJJxzO80YrUBva/Dvgz
Ju97Zbb/A9p1SSkwJQvGIvmWgdFe7K0fVxaZnSRf7k+STciYqMp+bJJK8llz6RAU
VzAecIz8BWWBr9pEjLBVVIbBzdNoXfr84H9zgs+cyTXJUC7kus98pYeFBMb0+XEQ
ob90YMnepX2tQ6h9dZ/6+JUfcZmZ8++wFV1cLp+YPYH02wfFiDjTiXjCedYXPPkk
hr80Ov5mZxfnZ2p7dvKNyYsQvlsLpS0muTqQQatIJxHKIhAMmN5316YRzuRqK+oP
hvrPhHM39tGGcF9pmlfo8cY7maSuIoG0humoW0+Johi7fwN2EzZ0zOZniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILD4Hfe6/ZAXvqPEQLfxQhIORKRMB8GA1UdIwQY
MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt
NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1
LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV72tSsQ
VgvwL6n8k4K+5sZgewhZ/IK8ZxRZv8LOQ/fZ8gnZbVHTLLFMwimGJdvFLpUulsJA
hocX1mtq0oVJtnIGgQF/ERkRI94h1CcXYc/vMF8UWv1m8tk7RDpMiVwnkhATxP+8
dybeUf7M/UCtnvOmJsOFtUcpF40UOoGO3u9B1CnT4T2Y/07eD4YKnBi6l9udAHlD
fPZhc+BXuaNE0eI63FhsAC2LE+9PD2WaHirZedNn7ZvKm4oi4wF4FILLNziElHNr
y51/Cg8H2Whrx5GDrWOpykbGeCD5SdET7s9hpCqMSV0L9a7CDr84rA2mYqiHs7VO
6wu8rwP7MBqzaw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:58 2025 by rpki-client