Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: g3JTrllIXUEnF5LrqLqJ0/Xwja6MYiofj7f2W3I5dHE=
Subject key identifier: 03:5C:01:9A:57:A6:21:DA:12:44:84:54:0C:B9:FB:A9:BA:44:05:28
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 01974C321A19E87F7FB53E990BE01B942158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 32
Signing time: Sat 07 Jun 2025 21:00:41 +0000
Manifest this update: Sat 07 Jun 2025 21:00:41 +0000
Manifest next update: Sun 08 Jun 2025 21:00:41 +0000
Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: vd86+9ZoJEw1dT1x/CM5iunaswFFjZss8HgHe4PalHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:1a:19:e8:7f:7f:b5:3e:99:0b:e0:1b:94:21:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Jun 7 21:00:41 2025 GMT
Not After : Jun 8 21:00:41 2025 GMT
Subject: CN=035c019a57a621da124484540cb9fba9ba440528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:57:ae:ca:07:43:17:88:35:f2:33:e7:a9:
94:cb:13:f3:bb:ef:73:fe:6c:b7:8f:ec:2d:39:51:
fd:7f:35:26:11:23:57:ca:78:e0:eb:f2:e4:44:34:
f7:0e:1b:83:35:99:60:67:1c:27:1a:ff:ec:16:9d:
d6:e6:90:b3:61:47:64:fb:df:f7:01:92:c5:b7:21:
85:04:4d:ba:c3:30:61:9b:bf:9b:e6:f2:5b:aa:b1:
a2:4b:a5:9b:f5:ef:90:df:4b:91:7c:83:eb:3c:9a:
af:e4:d5:ab:f3:2e:97:c1:9c:76:15:3d:c3:9c:ae:
66:75:85:e2:fe:94:85:48:e3:84:ac:67:c7:c3:4c:
da:fc:48:15:61:fb:01:fe:bf:df:16:c2:aa:04:76:
d6:fe:88:76:85:99:11:21:07:0e:cb:05:78:a3:1c:
bb:b0:12:74:07:08:37:6e:71:b0:5b:fe:5d:65:52:
69:01:64:83:a8:47:00:68:19:18:b6:aa:0d:6b:ae:
6c:27:33:a7:27:ef:12:5d:33:7f:ff:9f:e1:63:6d:
99:91:84:60:b2:74:34:fd:89:a0:45:6a:58:bd:b8:
fc:c5:45:43:fc:48:88:40:98:5f:f3:12:b6:ac:07:
34:ae:14:ce:ca:75:06:f4:91:a7:7e:d7:7e:35:6e:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:01:9A:57:A6:21:DA:12:44:84:54:0C:B9:FB:A9:BA:44:05:28
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:ee:8e:0a:01:ef:14:7a:9e:93:43:89:35:a0:cd:21:e5:
1f:4c:db:fd:47:c9:f4:52:a2:c9:7a:2a:93:02:3a:06:1f:23:
15:4b:a7:96:cf:fe:ca:f3:3a:23:0e:ac:5c:de:f9:67:73:31:
15:cb:aa:ee:23:16:d7:b3:8e:33:c0:86:78:3d:52:8d:f4:9b:
d0:12:e9:ba:64:76:3e:74:21:03:d0:48:d0:8b:53:f7:a0:86:
0f:b0:34:77:10:8e:1d:8a:ce:2a:13:fc:55:2e:0e:a2:38:23:
32:89:3a:ef:1e:c6:71:51:d2:05:23:62:51:ff:c2:25:3e:91:
7c:f4:59:a4:4a:70:a0:68:bd:73:61:46:21:e2:3d:8c:db:a5:
df:34:cd:4e:42:04:1e:47:2a:a3:68:4b:bd:8d:fd:4b:41:03:
8a:15:6a:1c:ac:1d:1b:21:e1:07:6a:df:2e:29:95:15:8d:80:
e1:fd:8b:d4:53:e2:8d:35:14:fd:43:38:bd:23:ec:e3:79:06:
5b:05:dd:b3:33:99:fd:f4:69:f7:0f:7d:cc:26:89:71:b2:86:
d4:12:b0:b1:5e:f7:16:de:30:77:49:82:a2:2e:1d:d7:3b:0f:
8e:e5:1a:ae:36:2b:15:83:75:85:40:1c:15:e6:55:d6:43:e3:
88:97:9a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMhoZ6H9/tT6ZC+AblCFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5
MTdjYWYwHhcNMjUwNjA3MjEwMDQxWhcNMjUwNjA4MjEwMDQxWjAzMTEwLwYDVQQD
EygwMzVjMDE5YTU3YTYyMWRhMTI0NDg0NTQwY2I5ZmJhOWJhNDQwNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAVXrsoHQxeINfIz56mUyxPzu+9z
/my3j+wtOVH9fzUmESNXynjg6/LkRDT3DhuDNZlgZxwnGv/sFp3W5pCzYUdk+9/3
AZLFtyGFBE26wzBhm7+b5vJbqrGiS6Wb9e+Q30uRfIPrPJqv5NWr8y6XwZx2FT3D
nK5mdYXi/pSFSOOErGfHw0za/EgVYfsB/r/fFsKqBHbW/oh2hZkRIQcOywV4oxy7
sBJ0Bwg3bnGwW/5dZVJpAWSDqEcAaBkYtqoNa65sJzOnJ+8SXTN//5/hY22ZkYRg
snQ0/YmgRWpYvbj8xUVD/EiIQJhf8xK2rAc0rhTOynUG9JGnftd+NW5LWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANcAZpXpiHaEkSEVAy5+6m6RAUoMB8GA1UdIwQY
MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt
YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj
LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9HujgoB
7xR6npNDiTWgzSHlH0zb/UfJ9FKiyXoqkwI6Bh8jFUunls/+yvM6Iw6sXN75Z3Mx
Fcuq7iMW17OOM8CGeD1SjfSb0BLpumR2PnQhA9BI0ItT96CGD7A0dxCOHYrOKhP8
VS4OojgjMok67x7GcVHSBSNiUf/CJT6RfPRZpEpwoGi9c2FGIeI9jNul3zTNTkIE
Hkcqo2hLvY39S0EDihVqHKwdGyHhB2rfLimVFY2A4f2L1FPijTUU/UM4vSPs43kG
WwXdszOZ/fRp9w99zCaJcbKG1BKwsV73Ft4wd0mCoi4d1zsPjuUarjYrFYN1hUAc
FeZV1kPjiJeaYg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:11:18 2025 by rpki-client