Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File: ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier: /Ak+ZZjpBb7ePpYjRrU1/nJaqutSeLJNrvzcAhgwP7g=
Subject key identifier: 68:AC:E4:CE:87:8D:98:2B:A9:EA:5F:FB:82:FE:E4:5A:CA:05:5B:C9
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 019A71EE747F2C36B02AC43848E45A831B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: 90vahj-_hJ5i1HoZpq9u0D0BXno.roa (hash: hNcbTROFVc3qb49hFAj0UmBrANu4X9fdOG7KqwGkrWI=)
2: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (hash: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=)
3: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: 9lxIwTk8LXJ6/GsLrqHNOaQDQN2NAzmNm9GqHvsZTxQ=)
4: pchvFEtf54PSSiTi01p5PApQHUQ.roa (hash: LNaFLGgXExgOKyuOXBO2LPMxZGv4i1837UIKdLVtZOA=)
5: q3loLepsq8UUkjol44_uG7-Dp-g.roa (hash: HiKWGBwaGg7MLWq1sRr7H+Pilt+M4gjbpsaE+yrM590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:74:7f:2c:36:b0:2a:c4:38:48:e4:5a:83:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=68ace4ce878d982ba9ea5ffb82fee45aca055bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:d7:f1:8d:81:5e:3b:8f:63:74:d1:7f:81:
8b:30:12:a3:97:fe:54:61:69:c3:18:ea:9e:77:09:
a1:48:f5:58:c0:5b:19:f5:14:99:d7:0f:ee:85:5e:
aa:97:19:6f:6a:b2:aa:eb:b8:9d:03:ef:00:26:86:
6a:83:d8:fb:b0:2c:f9:56:60:d8:3d:77:ef:fc:d1:
88:88:8a:9c:b7:cb:67:88:b5:99:1f:1d:54:23:ce:
eb:cd:2c:00:b5:6c:ea:a4:8e:45:6a:80:65:83:b9:
eb:85:a6:e0:18:3d:e8:58:ec:88:d4:af:a3:35:be:
5b:09:96:19:17:18:52:e1:40:20:7e:8c:0f:1f:4a:
9a:91:ee:99:c8:7b:f9:0c:98:61:7c:4e:10:fb:5b:
c8:0d:39:21:3f:a8:a0:db:50:81:03:61:4e:a5:1d:
78:ac:9a:69:54:e2:7c:0e:0d:2a:c6:16:59:a0:30:
48:7b:ec:25:fc:06:8f:3a:9f:f9:30:65:a1:77:34:
d7:38:d4:73:6c:24:da:dc:71:3e:f7:67:4f:40:f2:
5f:b5:4a:97:29:e3:ae:8f:bf:57:df:ef:e1:28:0b:
17:1c:54:74:55:f6:10:9e:5e:97:a1:32:6f:a8:f9:
af:29:87:c6:b6:0f:85:c7:da:b4:1e:31:a3:81:16:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:E4:CE:87:8D:98:2B:A9:EA:5F:FB:82:FE:E4:5A:CA:05:5B:C9
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6b:00:03:f3:85:03:62:7b:db:02:dd:60:ad:7d:e5:09:3e:
12:e5:c6:e9:e2:ad:ce:4d:4a:dd:f5:b6:c9:26:fc:47:a4:14:
61:0e:cc:5e:bb:2b:47:89:13:52:3b:34:19:0d:a2:5d:05:53:
75:e2:6c:47:dc:70:cc:3c:96:0a:52:22:2b:f8:1c:2b:7c:22:
eb:a5:f1:e3:0b:65:78:36:31:ff:2e:67:82:a4:7a:08:df:c2:
ae:c6:4d:11:b5:b5:7b:62:fe:c8:ac:30:fc:cc:6f:c9:3b:f5:
5a:d9:fb:4b:1a:67:28:4a:ea:80:1a:2d:60:c6:f2:78:f5:44:
d9:f0:7f:06:7f:b3:35:95:89:10:dc:dc:04:41:67:ef:03:c7:
a1:47:2e:38:44:c4:55:f1:a7:03:9a:3f:e1:e8:69:a4:fa:d5:
f6:d8:5e:78:67:66:f5:7d:52:ab:f6:6e:df:4e:06:bb:ff:89:
a7:8b:30:67:1b:65:19:29:55:75:68:44:de:98:ee:11:f8:12:
1b:ba:ba:f5:6d:6f:a3:d5:63:48:be:03:73:90:b6:4e:7a:97:
2e:70:5c:1f:43:f4:0d:45:e4:c0:50:b4:33:c1:02:a8:a4:83:
55:9b:18:7b:5c:fe:6b:dd:9f:8a:fa:cd:30:b7:fd:54:08:8a:
7f:13:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:14 2025 by rpki-client