Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: R4Gdjkva5XUlJH9y+i+YnMj2Q2v2TW5oilzUmGAs/a0=
Subject key identifier: 90:1B:CD:37:A5:B8:54:40:E1:32:BE:1B:14:F5:17:96:3F:78:85:F6
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 019A7293D66958434279CF3B993CF8EB472A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: oWsGpMQvBQ5PHdJpPFOPDSQlX/B/AR16lVrukm1gtus=)
3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d6:69:58:43:42:79:cf:3b:99:3c:f8:eb:47:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=901bcd37a5b85440e132be1b14f517963f7885f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:98:bf:4b:79:ac:f0:45:50:a9:08:33:5d:
3d:a7:51:7b:9d:49:5d:f2:17:98:52:9f:b4:12:fa:
76:f7:e4:23:3c:65:0d:95:fa:98:57:22:62:84:23:
d3:03:0f:8d:5d:c9:87:0f:8c:7e:6e:73:b6:36:fb:
04:92:d3:b9:76:1f:15:92:99:8a:e0:72:98:b5:78:
9d:d8:1e:94:78:53:61:9c:5c:db:34:d8:28:b0:b3:
c1:cb:77:cd:6f:00:f1:44:db:d6:56:8b:d9:c9:5e:
b4:7b:35:d9:7f:b0:54:b5:9c:ca:c3:b1:32:df:8e:
08:90:84:5f:0e:c6:f7:3a:b9:4f:b1:89:c4:f9:7a:
3b:7a:57:02:77:3d:ea:b2:97:54:ab:a0:06:a0:f8:
85:0d:b0:f9:2e:f5:86:d7:e6:c8:41:b2:c3:87:e3:
33:21:a6:1d:fa:5a:95:b7:6a:d1:1d:bc:d8:fa:a9:
ea:e0:01:91:e8:56:74:0c:5f:9d:ed:45:2b:6f:88:
83:58:77:73:b7:7d:32:a3:e1:d0:ab:1c:07:0e:5d:
b6:7f:bc:4d:50:f1:40:8d:d7:86:cf:5c:98:d8:5f:
91:75:d0:a6:60:5a:c6:01:08:5d:30:e0:e3:74:a4:
f2:fa:ab:bb:aa:22:81:15:84:2c:f1:59:eb:64:2c:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:CD:37:A5:B8:54:40:E1:32:BE:1B:14:F5:17:96:3F:78:85:F6
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:35:da:65:7a:f6:26:92:18:2d:dc:cb:b1:58:3c:0f:bb:6c:
f8:84:cc:19:02:6b:ec:ae:88:7b:92:94:d2:ea:b9:47:3e:f4:
59:89:5b:f6:15:ef:0c:ff:e7:d3:05:9c:4a:cf:53:d0:2d:70:
4f:08:7c:dd:eb:bb:b7:19:7a:43:db:62:2f:5a:de:46:32:76:
d0:c8:44:78:02:93:92:c4:ca:3e:87:1a:f9:d3:86:00:d6:d7:
b0:b9:bc:69:81:bd:da:48:38:29:dd:b3:c5:f4:4e:9a:ea:7a:
b6:3d:33:4f:c7:e3:05:23:48:f7:7b:22:00:a2:e0:39:9d:01:
ff:3d:22:34:ab:48:44:4f:bd:7d:68:54:71:e6:b7:48:7f:aa:
19:32:e5:59:7e:3f:c9:49:11:5d:ab:00:4b:f5:c2:04:6e:fb:
b1:fa:6a:ef:ca:c7:9a:7c:5a:51:50:27:6f:cb:b3:b4:9c:3a:
a8:97:72:31:24:56:e0:a3:7b:ad:5f:14:1c:39:e3:33:c1:81:
2e:89:8a:cc:dc:3c:da:a4:bd:fd:17:dd:54:28:ff:4a:c4:5d:
a5:44:37:2d:6d:b2:93:06:56:d6:1a:3d:36:d9:35:dd:60:48:
9a:25:18:cd:87:11:67:b2:7d:6f:fe:a6:86:ae:e7:00:e0:c6:
1d:b2:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:54 2025 by rpki-client