Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: dP2ySOtX7Hqip5MJmrxMxSKU0g1zS75EeQ73GkUmx88=
Subject key identifier: 57:2A:71:22:C1:77:F1:C2:6D:89:57:C6:07:19:5C:96:D9:B4:62:C8
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 01977F0D3D8061211909375FD7620E16A465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0A51
Signing time: Tue 17 Jun 2025 18:01:03 +0000
Manifest this update: Tue 17 Jun 2025 18:01:03 +0000
Manifest next update: Wed 18 Jun 2025 18:01:03 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: Bl1ZCdZoFbNq2uSfwX0PxQIm7vgONx0ISJJ7BUAwA+M=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:3d:80:61:21:19:09:37:5f:d7:62:0e:16:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Jun 17 18:01:03 2025 GMT
Not After : Jun 18 18:01:03 2025 GMT
Subject: CN=572a7122c177f1c26d8957c607195c96d9b462c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:29:d8:2a:af:06:65:d9:5e:44:57:ec:76:
39:ae:ae:ec:69:72:e6:72:11:16:b8:15:7c:5f:33:
68:5a:1a:40:b9:1a:55:37:29:6a:bf:5d:04:96:ff:
fc:0c:46:e8:5a:0d:61:70:9a:2e:34:78:bc:02:52:
71:de:d6:aa:33:b5:cc:ac:1a:37:a9:aa:81:de:b3:
42:f7:d0:a8:d5:b1:96:9e:4d:54:a9:78:4c:78:3a:
89:36:15:be:90:7e:70:95:94:32:0c:b0:80:62:40:
e7:28:e6:2e:83:60:df:26:1d:2e:6e:97:d4:db:18:
fe:25:61:98:1d:10:a0:8e:b7:aa:73:43:81:cf:bf:
97:ae:51:72:eb:ac:c4:6d:9a:2d:7c:32:85:d5:ee:
93:a2:09:b4:8a:14:79:35:4f:68:28:29:22:cf:f6:
f2:e7:14:57:a2:fd:a4:8d:86:eb:25:9a:1d:50:59:
7e:2f:fe:ab:fa:09:78:78:cd:e2:45:f8:27:b4:7d:
3a:8a:ba:77:61:f4:e3:c7:87:66:2d:ec:8f:a8:23:
30:d5:60:49:fb:bf:c2:23:f0:ce:eb:08:79:de:95:
db:28:81:eb:fc:e1:27:1d:94:d6:c9:da:48:06:8d:
5d:a3:4b:4b:16:2c:7d:1e:0a:ac:04:49:af:b2:7e:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:71:22:C1:77:F1:C2:6D:89:57:C6:07:19:5C:96:D9:B4:62:C8
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9b:49:5c:42:e5:c3:3b:d5:23:b4:0f:3d:1e:aa:be:da:af:
37:6d:da:9b:ff:e1:36:0a:24:93:37:5e:bb:ce:b5:d1:2f:6b:
89:71:f1:21:3b:06:cb:f0:46:9d:69:f5:b1:8b:36:59:9c:33:
e3:96:53:be:a1:b2:61:2b:a0:1e:d4:c1:94:ea:4e:f3:8d:fc:
38:35:e3:9a:1a:06:0a:e0:7b:84:a8:03:ad:da:d7:77:83:30:
9d:d7:b1:e1:4a:96:b8:87:7f:8d:26:82:16:e8:3f:48:0f:80:
57:a1:59:95:f0:46:e2:d6:22:b2:07:aa:97:1d:17:8a:99:07:
8c:76:f9:17:81:58:fe:87:a0:c1:2b:1a:88:c7:54:81:04:0d:
d4:5e:7f:a0:03:73:e9:b4:58:d1:06:eb:14:83:0e:ed:6d:71:
7e:bc:fd:52:3d:20:b6:3b:6e:84:7a:92:64:a6:84:60:2c:e4:
05:e7:9c:da:2d:a8:da:91:16:6f:12:13:77:6e:2d:c8:4c:4b:
54:5e:4c:ac:c0:ab:b0:de:ef:bf:2c:ca:a9:ca:9d:d4:b1:27:
38:26:b8:16:a5:b7:39:4f:05:bb:bb:d2:18:d0:fa:9c:40:d4:
9d:51:ab:98:c5:c8:6a:15:f8:92:53:17:91:d1:51:6e:76:82:
e2:6b:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:27:12 2025 by rpki-client