Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: xiGY26QxaolIUWmfMK6JAeiTbf5JlQ/89nfC4FazMYs=
Subject key identifier: 0E:2E:D8:9E:94:63:AA:19:23:7E:1E:BF:2A:C4:7D:F0:EA:A5:21:C5
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 01988D6AE7BD59142D57050967833DD79A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0ADD
Signing time: Sat 09 Aug 2025 06:00:50 +0000
Manifest this update: Sat 09 Aug 2025 06:00:50 +0000
Manifest next update: Sun 10 Aug 2025 06:00:50 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: c/mhiXsWoLQWzmCu8HbfFSk/gcxFKNr/bLl/8+Y3Z9Y=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:e7:bd:59:14:2d:57:05:09:67:83:3d:d7:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Aug 9 06:00:50 2025 GMT
Not After : Aug 10 06:00:50 2025 GMT
Subject: CN=0e2ed89e9463aa19237e1ebf2ac47df0eaa521c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:5a:c0:db:89:14:c5:fa:5c:5e:83:78:b9:
7e:d9:aa:b7:66:19:fc:e0:7b:28:6d:e0:0b:7a:cd:
fe:f7:3c:84:7e:0a:6f:cc:5e:f6:12:ae:20:12:6c:
bd:01:94:9e:39:0a:17:79:ce:38:c2:57:e1:53:db:
17:cf:d5:74:7d:02:a0:e5:ea:5b:9d:ce:a6:48:c9:
15:d8:b7:39:10:0f:a5:b4:08:dd:c5:1e:99:39:74:
b7:da:44:0d:39:97:a6:66:68:88:fc:91:97:03:16:
b9:9a:ab:35:5a:19:4c:8c:ae:d8:69:51:39:5d:1a:
93:df:4f:34:5a:5f:93:26:c5:6a:b2:ee:83:71:be:
d2:c9:90:be:cb:f8:ff:94:7f:3a:00:78:7b:56:29:
6f:a8:89:06:fe:27:79:fb:46:15:b4:b0:1a:fb:40:
3b:24:e5:9f:2e:76:1c:5f:e0:0c:cc:38:41:5b:25:
8d:b4:8e:9a:0a:83:99:3a:bf:cd:2a:b1:37:80:53:
0f:15:11:7f:fb:a7:7d:1f:ee:5c:79:12:76:64:b5:
f3:50:58:74:b1:a0:ae:bd:95:97:a1:b3:4d:79:d4:
a7:4a:a8:a7:17:6f:6f:41:14:35:8a:fb:70:26:73:
3d:6a:59:ce:9f:15:f0:dd:ed:c2:8d:6b:2b:7f:2c:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:D8:9E:94:63:AA:19:23:7E:1E:BF:2A:C4:7D:F0:EA:A5:21:C5
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:82:0a:21:03:c6:29:29:86:81:32:b2:55:d1:2d:3e:30:fa:
af:03:81:6c:0b:73:43:b5:a7:6a:01:ee:d1:35:9f:4d:43:0c:
47:c3:5d:f5:e9:3f:8c:06:6a:7e:fb:3a:47:e0:a6:e4:ce:39:
93:a8:1d:ee:5a:7f:69:89:3b:1d:d8:8a:9b:f3:41:e6:31:88:
e8:6a:54:11:7b:54:42:84:ca:e9:f5:74:a9:37:aa:89:b4:49:
ae:91:97:7a:b9:f3:45:d6:33:e9:72:4c:b4:0e:db:20:2b:f3:
db:77:7b:16:7b:0e:1b:0c:25:61:9d:8b:68:5c:62:8b:27:84:
7f:99:4c:52:d5:5c:ba:21:fe:e2:67:f3:51:39:7a:aa:99:36:
8d:2e:03:07:0e:93:5f:11:8f:21:83:7a:fe:f6:b6:ad:9a:da:
3a:09:ea:1c:6b:00:8e:61:94:4d:be:52:e0:0e:66:c1:0f:c6:
f6:6c:b2:1a:78:bb:ab:79:a7:5c:68:25:33:f8:31:a8:a4:42:
ae:56:df:d7:98:30:98:0c:d6:77:34:fc:3c:d5:17:af:47:cf:
1c:e6:55:a3:1d:c8:e3:d6:4d:33:42:35:8f:b1:9f:c3:c5:5f:
8a:e9:42:98:ab:c2:46:57:ae:47:31:53:ba:55:64:8e:20:fc:
c2:17:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:17 2025 by rpki-client