Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: GxkJF7M3+YF5VQsFkxwmDnXi0INDz9SckZy5atgH7d4=
Subject key identifier: 9A:A7:22:A3:16:29:24:CB:07:CE:14:D7:62:AC:A0:7A:7C:FC:DC:F5
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019A71B941BCB71397E8F7B669BAEC590EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0418
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: PbLHc6wS63/zZ5Ey4m6wv6iLvHmv7e0mCjReolaa28g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:41:bc:b7:13:97:e8:f7:b6:69:ba:ec:59:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=9aa722a3162924cb07ce14d762aca07a7cfcdcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:17:6e:5a:28:ad:58:65:83:01:4a:37:82:
f8:9b:24:b5:c5:26:f8:35:0b:5f:93:52:b5:ad:a1:
65:86:c7:98:83:aa:f3:ce:bd:77:ff:76:69:7d:d4:
1c:b5:64:7e:a0:89:c0:99:8f:0c:c1:c4:21:d6:83:
a6:77:f5:ca:21:ca:5b:72:b6:d6:d2:ad:e5:19:1e:
88:d4:38:46:71:a1:77:44:b1:fa:47:2f:c9:b3:f0:
32:b6:de:67:27:79:23:5b:dd:f4:d4:c3:fa:0c:3c:
34:2a:21:b8:45:6c:9c:b2:55:bf:2d:71:2f:9b:22:
45:93:e9:a8:44:fc:e3:e3:d6:6a:c8:ea:04:f5:9b:
47:64:02:9c:58:61:ac:63:0e:23:c2:1d:e0:bf:4e:
31:0c:2e:dd:ac:72:79:57:48:7c:4e:90:c4:08:9b:
f8:93:90:9b:1f:4c:4f:45:42:63:29:f9:d6:60:a7:
90:75:00:1e:fc:14:d1:4d:75:04:75:f6:33:99:d9:
90:3f:57:c6:26:1a:45:c3:36:de:d8:3f:cc:f6:4e:
fa:73:41:5c:40:70:ff:07:c2:fa:84:7a:cc:8e:f2:
48:38:62:96:de:ae:fe:b5:f2:9e:44:58:4d:bd:3a:
cc:7a:78:aa:a7:02:d1:82:54:eb:a0:e6:b8:71:2a:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:22:A3:16:29:24:CB:07:CE:14:D7:62:AC:A0:7A:7C:FC:DC:F5
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:da:35:62:50:c2:90:05:1c:f0:46:f2:f6:2a:b5:4d:a0:
be:fd:53:50:e7:87:00:a5:76:31:81:1b:c8:ed:f5:22:34:8c:
36:8d:17:b4:8f:74:37:4d:f7:0f:6c:98:d1:9a:83:10:a1:6a:
5f:c9:df:7b:9c:d4:0f:ad:a3:1f:9d:4a:58:77:09:08:29:cc:
05:6c:32:5d:ca:19:89:b0:12:ac:c0:5b:5a:88:ec:0d:54:c7:
d6:15:65:ac:9e:d0:f0:54:a9:8e:9a:76:a2:11:fd:09:89:4f:
4a:b5:56:48:71:66:ff:9b:5f:8a:1f:08:8a:3a:77:73:8b:4b:
c0:56:a9:f5:76:42:2b:ff:05:bc:7e:d8:74:02:da:79:67:c4:
c3:29:b7:54:5c:1b:0b:ff:a3:99:25:24:12:8e:68:4f:6a:a3:
5b:ae:8b:9d:69:b0:bf:1c:ae:e9:e8:66:10:b6:38:49:e4:9d:
aa:b3:31:43:da:3d:f4:76:e7:c2:2e:71:31:d9:8f:05:8b:f5:
6a:7e:0b:3a:7a:3c:d1:35:a3:b9:f6:93:66:22:98:2c:2c:1d:
d9:a9:fc:2b:b2:85:8d:90:08:b7:25:48:ec:c3:4a:ee:13:42:
34:d3:87:cd:78:dc:8e:17:7a:9e:4b:30:25:86:ff:56:6d:ea:
10:42:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:30 2025 by rpki-client