Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: UNgspyf94zNuTiahevwvtKDugOwtOlg4A6aP10cCUGg=
Subject key identifier: AA:C2:77:F1:F3:CC:D6:34:5C:55:E6:6D:53:26:2D:56:02:0F:EE:AC
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 0197496840D7B2530F23CA54EFD5F30059A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 1129
Signing time: Sat 07 Jun 2025 08:00:58 +0000
Manifest this update: Sat 07 Jun 2025 08:00:58 +0000
Manifest next update: Sun 08 Jun 2025 08:00:58 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: d23Gg6AY5weLHOQA0mRVZ19wT2hy3rrK54y4VRfqEEI=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:40:d7:b2:53:0f:23:ca:54:ef:d5:f3:00:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Jun 7 08:00:58 2025 GMT
Not After : Jun 8 08:00:58 2025 GMT
Subject: CN=aac277f1f3ccd6345c55e66d53262d56020feeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:27:d5:10:3a:db:14:fc:dc:c0:c1:b1:6b:
e2:aa:16:5c:39:20:51:df:dc:aa:d0:2a:2c:e1:98:
72:e6:e2:6d:39:50:5b:5e:30:12:3c:5e:1f:0d:c8:
be:32:2a:17:4e:28:8f:7c:ca:a9:15:f4:4c:3c:1d:
ca:34:0e:08:1b:62:21:85:8e:25:01:10:d2:a8:56:
70:a6:6f:02:7e:e7:5e:d7:4e:cb:a4:b1:aa:f8:48:
ae:f6:6e:38:6d:21:c2:e1:79:eb:ab:dc:97:55:6e:
f9:a6:2d:05:a9:10:22:fe:77:94:12:37:df:75:1c:
15:60:e6:11:34:7b:79:f8:ef:1a:61:82:de:bd:d1:
4b:de:27:4a:e8:7b:aa:c6:ba:9a:81:09:4a:c9:1b:
1a:27:64:c3:1e:fc:54:89:15:44:ac:03:8c:62:ad:
b7:87:9a:f9:33:d7:4e:4a:d3:51:ab:4d:1e:d6:75:
95:08:b7:5f:ff:16:c5:1a:ec:99:b7:08:bb:aa:f5:
b2:dc:0f:53:1b:b8:22:54:64:13:af:ad:1a:a0:42:
f0:22:c6:43:8a:55:34:64:20:4a:56:59:e9:d2:74:
8a:9f:19:4d:94:3f:48:c1:95:3f:f8:e4:f8:a9:90:
63:ff:76:2b:9f:70:7c:65:00:89:ec:0e:29:aa:71:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:77:F1:F3:CC:D6:34:5C:55:E6:6D:53:26:2D:56:02:0F:EE:AC
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:0c:ae:de:2e:af:4e:ea:27:5c:28:bc:44:2c:ea:a6:92:
2e:39:d2:4f:ea:8c:f4:d8:14:4f:67:5b:ff:0a:09:30:46:70:
02:bd:a4:50:cb:63:71:08:03:f0:8a:a5:7c:66:dd:36:77:17:
eb:89:64:b2:48:ad:2e:2a:d7:f3:d6:a8:3b:47:39:e4:9d:03:
6b:16:91:40:65:41:bf:f5:af:c8:ae:2f:bd:5c:00:f9:c5:b7:
6a:bd:78:ba:5b:f7:fb:7d:b3:58:79:bb:80:6d:bb:33:12:fe:
31:ec:a3:4e:62:87:6e:70:c0:87:a6:08:bb:1d:ed:fc:38:10:
d0:7b:d5:76:66:50:08:3d:f8:01:6e:f6:93:4c:7f:d7:03:89:
80:df:12:25:ec:da:f1:fd:be:f9:01:a5:ef:81:4b:14:b1:a8:
35:66:49:4d:69:ab:72:6a:7c:4e:4c:7a:46:c0:86:33:41:25:
f9:55:eb:77:47:0b:17:41:c0:ec:59:54:2d:4e:7f:5c:9a:4a:
27:d7:b9:b7:91:22:c7:f7:2b:e3:51:ea:b0:d0:6c:25:55:24:
b1:b9:97:b9:4b:f0:cd:49:cd:e3:13:c8:cb:d0:ee:80:e2:3c:
fb:96:ec:b5:b2:00:4e:f5:b3:33:4b:83:e9:42:77:69:fb:3c:
e8:47:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:30 2025 by rpki-client