Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: WMS/ZOFqcuJfN4pQmQinXvXxT0cs1ItW1G/LEI5SviA=
Subject key identifier: 5A:F6:DA:81:CD:B6:E9:B7:46:9C:AF:1D:74:CE:FC:33:4C:5B:F1:83
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 019A7225AC80D0B0AAB6F811ABEF13E2027B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 01D9
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: KxJRQ7McKWU4oZTunAJtnvEqoPhEbwkapuhvXD5wRyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ac:80:d0:b0:aa:b6:f8:11:ab:ef:13:e2:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=5af6da81cdb6e9b7469caf1d74cefc334c5bf183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:91:e8:d6:8c:a6:2f:92:14:b5:5c:13:88:
59:bd:8f:4e:3e:cc:67:78:65:84:b1:39:6b:9d:70:
21:cb:b2:b9:fd:61:4a:d6:d8:8b:28:31:13:aa:bd:
1a:97:14:59:49:93:8f:7a:29:27:17:f4:c4:b9:19:
1b:d9:0c:8f:e0:78:0f:c0:dc:80:5b:04:c6:33:5d:
48:b8:25:92:51:7c:f3:c7:4e:e5:53:b8:1d:38:e1:
51:f1:9e:a3:94:22:56:a6:af:4b:83:f2:64:a7:7d:
92:89:e5:9c:82:9f:8d:60:eb:68:55:27:88:2c:00:
fe:1c:05:7e:a9:ba:bf:08:b6:8d:8f:11:49:70:a8:
4a:3b:1e:41:3b:88:79:03:d1:4c:25:43:de:3f:2f:
d3:d0:52:26:c2:bf:8d:5e:59:ec:40:4b:76:e0:2f:
99:0a:5d:4a:cb:7c:4c:26:aa:ad:a5:8f:af:20:8b:
c5:a7:c0:b9:44:78:67:22:09:6c:4c:a1:1e:93:94:
67:b2:30:18:ad:a3:cd:58:50:06:88:b1:54:aa:17:
b2:80:86:68:c8:b5:d3:a5:a0:39:e1:97:f5:17:65:
3e:2c:83:53:00:36:96:01:e9:0b:d0:f9:9b:d9:62:
e1:8c:fe:c3:04:e3:e1:e0:c5:e6:0b:65:e0:47:8b:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:DA:81:CD:B6:E9:B7:46:9C:AF:1D:74:CE:FC:33:4C:5B:F1:83
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f6:18:08:b8:c2:cc:7f:3f:9a:72:1c:64:5b:0f:0c:8c:ed:
e5:8c:de:f4:df:17:16:6c:bf:ba:e8:fb:11:78:05:e9:c3:2f:
e1:16:56:33:a3:70:67:ce:22:d1:f3:21:01:83:7c:44:cf:8a:
12:46:ac:1d:28:25:72:54:ca:7c:47:87:0a:7e:a2:1d:10:3d:
fb:55:15:48:db:b6:85:dc:d4:f6:a3:ca:80:0d:e7:cd:e6:22:
c6:ed:f3:fb:da:80:bb:8c:3a:eb:0b:20:00:d1:61:12:47:9b:
a5:e4:f2:00:67:a8:a5:f2:5f:41:7c:e5:97:00:09:18:aa:d1:
07:84:fe:0f:35:ba:1b:1a:3d:07:35:c1:b0:84:90:ae:a4:ba:
20:d1:cb:63:35:f3:7b:80:ae:85:79:8e:2d:85:91:16:83:13:
69:4e:47:e3:23:09:72:28:a8:06:d4:e5:07:55:d5:f1:ca:18:
57:68:b2:7c:07:8c:93:52:66:b0:96:cb:1a:d5:24:dc:6e:71:
a3:42:db:43:7b:fd:d6:72:aa:2c:43:88:53:0b:c2:22:73:df:
2f:1b:53:ca:89:6b:6d:6c:8f:95:82:82:de:b6:eb:15:be:ff:
7a:42:e5:e8:25:66:cb:4c:29:88:a0:c3:4b:90:b4:d0:40:4d:
a8:4d:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:39 2025 by rpki-client