Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: NZbHcFbAx5aCcbQpwVnExov0asd5Vw2cBVp7gZlIdAk=
Subject key identifier: 6B:59:80:3D:D9:88:F7:11:B8:31:93:39:BF:8F:51:6B:EA:67:8D:1C
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019A70DC0332B884BA78892B4C3D849E2659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 0600
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: fnhn73c/+0B/aixmxO1ZPQbRdzflglZSHxkBvNOqvSw=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:03:32:b8:84:ba:78:89:2b:4c:3d:84:9e:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=6b59803dd988f711b8319339bf8f516bea678d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:ac:5a:94:c6:53:b9:d4:19:d2:87:6a:b5:
3c:8a:8d:84:6f:e2:c1:17:5e:1f:31:03:d8:07:f4:
ae:c6:9f:df:83:b3:4c:96:8b:11:17:bb:5d:79:df:
c2:e1:16:35:83:4c:2e:2d:d7:72:d4:81:e3:2a:40:
cb:73:ff:4e:19:89:07:ce:67:6d:2b:16:0a:86:31:
53:e8:72:c8:30:09:ce:71:a1:eb:9b:9f:5e:59:d5:
1d:15:b5:2a:9a:d2:67:5b:92:ed:3c:0a:a5:e4:1b:
29:c4:f5:e2:ab:8a:ca:e4:82:bb:8c:b1:5f:86:2d:
2a:c9:b1:7c:1c:ed:eb:65:69:ac:29:15:44:0a:8c:
dd:9f:05:11:7d:eb:7b:ca:6b:01:64:30:e1:d6:83:
f7:f4:a7:42:eb:3e:e7:9d:11:33:e0:36:3f:cb:32:
6d:08:c1:78:c0:e3:13:23:c8:3f:b8:07:a3:ab:d5:
6b:3a:dd:69:78:08:fb:85:d4:c0:c1:ed:a3:6f:1a:
83:34:f9:d0:10:6b:f1:0b:5d:9a:65:c1:4b:6a:98:
df:c2:18:ba:d0:8c:35:e0:06:5b:18:88:0c:34:8a:
00:b9:c3:6a:14:04:e8:a8:9c:9b:24:1b:50:cf:37:
f5:b4:3d:20:91:a0:4b:d5:fb:ba:77:62:5c:89:bb:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:59:80:3D:D9:88:F7:11:B8:31:93:39:BF:8F:51:6B:EA:67:8D:1C
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:66:ea:31:ac:29:20:16:83:8c:5c:40:2a:93:39:43:18:
1c:93:5f:c5:b2:bb:4b:e4:4a:d7:a0:25:60:21:2b:88:90:df:
ca:c2:af:15:6a:bd:7f:30:63:2e:7a:7c:47:28:75:e1:ec:d9:
25:a4:f6:63:b6:db:98:20:98:9d:76:05:63:eb:1a:75:35:94:
41:64:37:97:91:8a:66:e7:54:94:b6:e4:f3:48:8e:17:7a:ba:
e7:e0:ce:42:a7:88:f5:03:99:53:cf:02:86:e5:75:47:ac:99:
74:a0:c4:08:e0:cf:23:4b:93:b4:20:dd:49:66:2e:e6:ec:49:
f8:d7:46:5c:4f:52:18:69:dc:e8:5a:b2:f6:b5:47:4d:09:7a:
25:17:20:41:7e:e0:6f:85:4a:c3:9d:d8:c8:ba:fd:c6:a1:69:
34:61:3f:2c:38:7d:e0:cb:bc:45:04:02:81:05:a4:8e:07:de:
67:5c:d6:76:5a:cc:dc:89:dc:21:b7:10:a5:93:a8:8a:9a:71:
97:4d:04:e7:29:64:84:99:e9:2f:3e:36:15:e4:51:ae:10:c8:
e7:41:0c:02:02:cf:50:9b:72:c8:4c:68:06:6d:7f:74:c6:8d:
fb:1c:d3:13:eb:62:ad:d8:d2:7d:9b:45:8a:4e:84:e7:f5:65:
63:23:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client