Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: bzUxVtmE0yt+OaaX8oxa0OJfgQEXS9kczr4itaSmEyA=
Subject key identifier: B0:24:3B:41:BC:A9:54:7A:E7:91:3C:60:68:CF:DE:90:05:96:21:25
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019922C391E91CB7597115EFD856466F6E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 0553
Signing time: Sun 07 Sep 2025 06:01:06 +0000
Manifest this update: Sun 07 Sep 2025 06:01:06 +0000
Manifest next update: Mon 08 Sep 2025 06:01:06 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: NNbYTJ9J2THLE5/o3R2gdUoC6ZpJwAHhwP7ES4Id/3A=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:91:e9:1c:b7:59:71:15:ef:d8:56:46:6f:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Sep 7 06:01:06 2025 GMT
Not After : Sep 8 06:01:06 2025 GMT
Subject: CN=b0243b41bca9547ae7913c6068cfde9005962125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:b0:6f:bd:c6:ad:13:55:be:ce:94:13:76:
9b:89:3b:df:6e:d1:d8:2e:d3:20:11:4e:0e:9a:9c:
66:e0:f6:80:59:51:57:5c:ff:97:d5:4e:97:19:52:
19:8f:92:93:71:4f:b9:22:0b:e6:88:57:90:71:a2:
6d:a4:20:4f:7d:f0:11:57:e0:f4:4e:c0:ce:36:05:
88:8e:7b:0d:b1:94:a6:2d:05:56:41:ad:75:43:b1:
d5:ea:95:87:1e:7a:70:cc:79:40:30:06:44:ee:eb:
f7:54:80:02:05:df:90:b1:6c:2e:db:21:a6:eb:ab:
c3:01:08:d2:76:08:08:6e:b6:1e:e7:6e:5f:57:06:
02:62:eb:e8:18:ee:20:25:be:a1:96:79:b9:b1:ea:
ca:ae:ad:d8:74:08:61:56:71:68:02:95:f2:c7:af:
55:20:a9:6e:65:af:d0:a3:f4:49:a9:de:88:37:ca:
c3:f3:54:21:77:9c:ff:ff:e0:22:0a:a4:d2:af:fd:
4e:73:51:7e:9a:c6:73:43:3f:0d:01:1f:9e:15:a0:
2b:d5:bf:b6:37:2f:92:e1:5e:78:f6:55:57:02:e1:
99:5f:03:7a:fd:65:81:06:f6:20:86:78:16:f7:27:
f9:64:f9:7f:5e:a6:85:a5:98:e6:7f:ff:fc:98:f2:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:3B:41:BC:A9:54:7A:E7:91:3C:60:68:CF:DE:90:05:96:21:25
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f7:5d:d8:09:00:db:e1:24:5b:9f:af:84:4e:7d:5f:0f:14:
a2:2e:25:91:bd:b5:9a:dc:4e:67:b2:bc:95:85:0a:47:67:13:
28:6e:47:16:b0:7e:06:80:b0:98:98:7c:45:fb:f3:70:a1:ea:
af:55:f8:d2:2d:fb:46:96:f1:4c:04:35:ad:ed:22:f5:b5:ab:
52:cd:67:c9:5d:56:5c:38:44:33:b3:f0:87:40:3d:2a:89:f5:
b5:3b:08:72:44:ad:ef:63:76:10:75:9c:c9:30:59:cd:3a:19:
26:2f:b8:91:a6:37:3b:ff:d4:1f:95:e9:44:b6:ad:05:f9:b5:
8c:36:7f:32:00:0c:95:f5:47:47:35:1e:73:28:bb:0d:b3:d1:
17:89:54:42:82:da:fe:87:f1:e9:53:48:23:cc:af:89:fa:32:
9d:1d:97:fe:f7:30:8d:33:a4:ad:01:1f:5b:7d:37:e1:02:04:
e8:7e:f9:ca:98:70:ec:2a:31:11:ab:39:d0:bf:c3:bd:ce:93:
fe:12:a8:b5:4d:a0:62:b3:42:64:d3:fb:b3:4f:0b:c5:71:69:
68:c2:69:47:70:97:f8:36:f8:b7:39:a6:9a:98:aa:42:d8:a3:
de:e0:95:a0:d6:5a:2a:be:ab:18:29:1f:52:de:8f:ed:fa:c8:
40:2c:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:43 2025 by rpki-client