Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: Bnd7827cs79YcEinEzi806pr4K8XZKpf0aopufBGeNk=
Subject key identifier: DE:8E:87:94:D3:63:59:22:48:90:52:AE:5B:11:35:A8:98:B5:D0:4D
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019847E4FDA8618763A7B8A002DD23D3B9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 12A0
Signing time: Sat 26 Jul 2025 18:00:46 +0000
Manifest this update: Sat 26 Jul 2025 18:00:46 +0000
Manifest next update: Sun 27 Jul 2025 18:00:46 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: eG5UzZeiSR+qdoEJqIcPlNyiFPSY2Q11NvMLmaltGp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:fd:a8:61:87:63:a7:b8:a0:02:dd:23:d3:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jul 26 18:00:46 2025 GMT
Not After : Jul 27 18:00:46 2025 GMT
Subject: CN=de8e8794d3635922489052ae5b1135a898b5d04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:f5:c2:6b:94:ce:b0:21:19:bf:dc:51:df:
4f:ac:6b:26:37:0c:3b:13:5a:a0:ad:1d:1f:8b:6a:
2e:07:1a:1c:ce:9f:89:ac:3d:6a:53:ed:56:00:03:
1a:f6:ef:73:15:ca:86:89:80:f2:67:53:f8:38:bd:
ad:38:bb:27:38:83:c9:f8:37:41:dd:8d:fa:bb:a5:
9f:e5:74:22:41:bf:2b:3e:ae:d8:a5:f1:d5:3d:7c:
5d:50:ea:37:1f:08:05:06:50:9a:13:9d:be:ad:6c:
0d:d0:90:81:d0:45:a5:3b:6c:7d:22:41:b2:7f:7d:
51:ae:06:9a:cb:f5:fd:af:0f:42:73:a2:bf:16:88:
7b:ff:5f:52:3e:93:d5:85:21:53:95:b9:b8:d9:04:
a3:b6:63:2b:0c:dd:d3:a4:81:9a:f8:d3:35:ca:11:
d1:6e:92:6d:70:89:a8:99:76:17:a6:97:0b:71:f9:
af:e9:ec:c7:ef:10:56:0c:69:fb:dc:51:75:fc:91:
21:35:3c:67:0f:f5:0e:38:d5:89:27:5f:63:05:dc:
70:74:64:c9:ff:8b:4a:07:88:7b:e6:93:18:5e:18:
c3:9f:2c:a3:87:a4:a3:c3:00:7c:d0:a1:3f:fa:20:
e2:03:67:85:ba:6e:8d:d6:02:76:85:a0:b8:59:c8:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:87:94:D3:63:59:22:48:90:52:AE:5B:11:35:A8:98:B5:D0:4D
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:19:00:50:a6:3a:52:0f:31:69:41:fd:65:e2:10:06:23:
ed:6f:db:c8:19:ae:ff:2f:68:b8:93:7b:21:cd:13:80:8e:e6:
cb:03:a3:74:85:39:34:c7:8e:e5:76:a3:bf:5d:48:15:46:ea:
45:1b:71:53:2d:f8:50:08:ab:48:72:35:00:5a:31:bb:df:8e:
a1:13:e3:e2:56:20:2e:21:03:db:14:30:6c:42:0b:ec:0a:45:
75:de:f2:f8:04:54:ab:87:ff:54:89:62:8f:1c:97:d0:a4:0a:
98:b6:6e:68:42:d4:6b:72:4b:26:84:d3:68:44:72:1a:13:28:
f6:90:44:f1:6a:db:05:e1:18:b5:d2:7a:f3:e1:32:db:7c:1f:
7d:28:d0:c2:32:a7:ec:61:27:74:6d:1f:8c:f7:80:48:84:43:
0c:f7:df:06:20:42:a3:19:bf:e2:1a:ac:92:08:59:ce:7f:55:
24:f7:23:dc:f7:a9:58:2f:72:28:7e:7f:fb:a3:42:ad:93:b4:
15:39:9e:5b:2b:1e:89:46:50:e6:32:dd:2e:78:af:30:1b:26:
ac:82:15:34:92:de:51:9d:ab:d8:53:51:e0:93:12:2e:b0:61:
e8:9c:01:29:1d:a8:73:e8:9c:16:a2:16:e4:74:43:91:17:5f:
57:6f:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:20:04 2025 by rpki-client