Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: AGB7qdnF8HJVT3V4R5YKzGoIMrHVU8IWezRMGMdxUxQ=
Subject key identifier: 46:38:B0:AC:F0:7C:2F:B9:04:81:FF:9B:D6:4C:84:B5:01:8D:3A:90
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0197499F28C102E931A2F4D6DDF0C640C541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 045E
Signing time: Sat 07 Jun 2025 09:00:56 +0000
Manifest this update: Sat 07 Jun 2025 09:00:56 +0000
Manifest next update: Sun 08 Jun 2025 09:00:56 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: jFrphW70eQBv3DbTPjXZl1C2NPrzdbtFvntNyk8d4Cw=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:28:c1:02:e9:31:a2:f4:d6:dd:f0:c6:40:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Jun 7 09:00:56 2025 GMT
Not After : Jun 8 09:00:56 2025 GMT
Subject: CN=4638b0acf07c2fb90481ff9bd64c84b5018d3a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:54:c0:98:2e:37:8c:e3:f0:ff:42:23:a4:
db:1b:f0:d5:b9:69:83:c9:62:58:80:6f:92:6c:af:
97:62:84:93:71:c9:dc:ed:1c:2b:2b:a9:f1:9e:88:
bb:94:5f:60:e7:fd:1e:aa:98:38:f9:a3:06:c2:7e:
79:73:07:3f:4f:e4:0c:1a:88:ef:f1:8f:cd:55:67:
27:5f:47:7e:07:19:7c:f0:c2:9e:e7:72:d1:52:0a:
16:b5:73:2e:56:64:34:1c:97:39:9c:9e:3b:0e:28:
be:e8:7f:54:48:50:d4:25:db:04:46:f6:8e:00:9d:
34:02:69:20:5c:2f:b3:21:f2:1c:b4:01:36:7c:d3:
78:71:f8:7a:a3:ca:18:87:d2:c9:7d:a7:c4:45:6b:
cf:3a:97:11:f3:60:1f:c6:2c:33:73:f1:7e:94:55:
73:f8:69:68:03:5f:1f:d5:55:d2:b4:55:da:82:df:
57:1a:4a:ef:b8:0f:59:11:0a:ef:e7:de:84:a6:5d:
84:c1:3c:41:7b:75:1a:3f:1e:f5:77:74:70:78:55:
6e:5f:9a:65:57:7d:be:d3:51:81:71:0e:9e:ee:23:
bd:29:b9:62:6e:1f:8f:60:83:9e:6e:8e:3b:e2:61:
d4:c2:4c:16:f3:00:66:04:5c:62:35:17:3c:bc:bb:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:B0:AC:F0:7C:2F:B9:04:81:FF:9B:D6:4C:84:B5:01:8D:3A:90
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:8f:f0:8d:17:ba:65:1b:fb:53:7f:49:9b:8c:42:06:e6:
d1:f0:ea:7a:d2:94:8f:5b:78:c8:ce:ff:8a:29:40:7d:48:b3:
a5:c1:d9:88:7f:e2:32:1a:bc:b9:95:da:df:cd:6b:5b:10:c0:
cb:8d:93:23:5f:ad:a6:6a:aa:6e:45:a6:e1:c7:48:5c:bc:ae:
24:b3:dd:56:8c:d1:4c:93:07:63:84:ee:70:41:a7:35:61:b2:
31:21:31:a1:95:ee:cb:04:81:a0:62:ec:91:50:6e:fc:8e:13:
f9:8a:35:c6:cf:72:3a:39:1a:87:a4:36:b1:0e:9f:b4:63:1a:
ed:d4:c6:55:49:f6:0a:ef:27:d5:94:ba:ad:72:5e:5b:ca:3e:
f2:65:76:8a:77:43:0e:52:91:ca:ff:41:9a:32:50:e3:b3:2c:
ca:96:ec:4b:79:68:33:86:8e:f8:bb:c3:51:2a:3d:19:c5:eb:
a2:d9:d7:d2:c3:fd:63:ab:4b:d3:e9:ad:9a:d6:b5:1d:67:ad:
19:ea:e0:1d:0a:8d:52:8e:df:2f:43:09:71:4e:2e:82:bd:db:
b6:c3:66:a6:5f:7d:ef:cd:b4:1e:fe:22:58:6a:e0:16:a6:ec:
43:fc:6c:47:e6:01:d4:e5:ea:74:6e:4c:84:ac:12:b9:27:e8:
da:a4:33:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnyjBAukxovTW3fDGQMVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjQ3NGEzM2MwNTFkMTcxNTJiMjEzMjJjY2Y0ZmYzODA4
YjQyNzAwHhcNMjUwNjA3MDkwMDU2WhcNMjUwNjA4MDkwMDU2WjAzMTEwLwYDVQQD
Eyg0NjM4YjBhY2YwN2MyZmI5MDQ4MWZmOWJkNjRjODRiNTAxOGQzYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHNUwJguN4zj8P9CI6TbG/DVuWmD
yWJYgG+SbK+XYoSTccnc7RwrK6nxnoi7lF9g5/0eqpg4+aMGwn55cwc/T+QMGojv
8Y/NVWcnX0d+Bxl88MKe53LRUgoWtXMuVmQ0HJc5nJ47Dii+6H9USFDUJdsERvaO
AJ00AmkgXC+zIfIctAE2fNN4cfh6o8oYh9LJfafERWvPOpcR82Afxiwzc/F+lFVz
+GloA18f1VXStFXagt9XGkrvuA9ZEQrv596Epl2EwTxBe3UaPx71d3RweFVuX5pl
V32+01GBcQ6e7iO9Kblibh+PYIOebo474mHUwkwW8wBmBFxiNRc8vLsXVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY4sKzwfC+5BIH/m9ZMhLUBjTqQMB8GA1UdIwQY
MBaAFDRkdKM8BR0XFSshMizPT/OAi0JwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2It
MDE1MjFlNjU4ZTk5LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2ItMDE1MjFlNjU4ZTk5
LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbu+P8I0X
umUb+1N/SZuMQgbm0fDqetKUj1t4yM7/iilAfUizpcHZiH/iMhq8uZXa381rWxDA
y42TI1+tpmqqbkWm4cdIXLyuJLPdVozRTJMHY4TucEGnNWGyMSExoZXuywSBoGLs
kVBu/I4T+Yo1xs9yOjkah6Q2sQ6ftGMa7dTGVUn2Cu8n1ZS6rXJeW8o+8mV2indD
DlKRyv9BmjJQ47MsypbsS3loM4aO+LvDUSo9GcXrotnX0sP9Y6tL0+mtmta1HWet
GergHQqNUo7fL0MJcU4ugr3btsNmpl997820Hv4iWGrgFqbsQ/xsR+YB1OXqdG5M
hKwSuSfo2qQzzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:33 2025 by rpki-client