Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: yYkAE4uB3gWTjCnM+NP0imu1aK2JAbt1jNYEtGr1mSg=
Subject key identifier: FF:A6:B8:8C:E2:20:AF:28:8E:FB:4B:0A:E8:A6:39:59:44:00:71:1D
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019A4D73ABDC55B781A6E690E74645CBA96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0BC5
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: UjU0EpSe8gGikt1dSWHAFZ+N1oru2XQTYAMoB07bIO4=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ab:dc:55:b7:81:a6:e6:90:e7:46:45:cb:a9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=ffa6b88ce220af288efb4b0ae8a639594400711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:97:3d:64:3a:be:84:92:28:49:98:43:b9:
f2:38:ae:fc:a0:ad:b4:9d:b9:4a:9a:23:bf:99:6a:
cd:3d:f5:d7:2e:41:5d:0f:aa:5a:fb:15:89:de:27:
73:af:9f:1a:fc:15:c5:6b:87:f8:42:25:f2:7e:e3:
78:ba:3a:40:8d:66:53:17:63:72:c4:58:0a:f8:e9:
10:48:06:9b:1c:62:03:2d:ba:a4:5f:b3:82:70:63:
e9:4d:96:77:3e:6e:46:f6:dc:74:0f:23:c0:1e:d9:
60:32:b0:bb:87:8f:1e:ce:c0:54:43:f6:78:07:70:
c2:dc:3a:f6:dd:76:c1:97:9a:3b:94:1a:cf:36:77:
80:64:09:cc:13:dc:b0:b5:8c:89:bd:01:67:44:cc:
51:1d:1f:0c:34:8e:77:3c:33:72:19:59:33:47:45:
a0:96:04:44:b9:6a:39:89:b6:ee:5b:44:96:35:88:
ba:32:bd:be:80:d8:89:bb:5f:5a:85:76:dd:06:4f:
b3:2c:47:88:31:a8:75:92:4a:15:47:8b:0b:79:33:
02:cd:35:05:4c:74:7e:f3:c0:8d:f3:e4:78:82:36:
4b:11:db:3a:bd:c9:1b:ca:30:70:42:97:32:30:14:
ef:dd:99:37:e9:d7:43:32:35:6b:f2:52:eb:d3:ec:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:B8:8C:E2:20:AF:28:8E:FB:4B:0A:E8:A6:39:59:44:00:71:1D
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:0f:0a:80:86:b5:0a:fa:f3:48:3d:0e:7b:30:cd:78:49:
f2:27:34:38:83:f7:2e:e3:60:1e:3a:95:40:f4:b9:a0:4b:f6:
df:56:f4:fe:e0:ea:f3:cc:e5:1e:18:26:59:da:45:9d:bd:db:
7a:3e:00:48:49:e0:4b:b5:8c:d1:e7:f9:24:63:99:7e:df:cc:
1a:7a:dc:10:f1:4d:a1:90:f5:5d:3e:37:ff:5a:e6:24:49:46:
93:90:7b:38:67:33:d7:8c:ea:0c:a7:22:8e:b8:5c:64:6f:bb:
28:cf:5d:a8:24:a2:c6:50:e1:56:fe:53:9c:ac:30:ad:98:ab:
0a:23:40:53:d6:87:75:09:51:fc:19:43:71:4a:8e:94:78:e6:
51:67:99:3c:3f:21:0c:63:7c:9e:81:60:36:8e:87:84:3b:c8:
8c:26:16:fa:73:8c:b4:a4:53:ee:1e:e7:de:be:d2:de:95:bf:
f0:b1:26:1e:c8:08:d8:50:a0:c7:e6:5b:54:6d:ae:7e:7b:bd:
f1:93:27:5e:e5:8f:8c:0b:de:31:7d:73:97:0b:65:94:c7:48:
4a:09:a8:48:6a:8b:c6:89:29:b8:cb:39:9f:61:fb:29:66:28:
aa:54:52:ef:5a:03:83:a1:1a:35:60:77:8a:d8:50:95:87:40:
92:f4:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:46 2025 by rpki-client