Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: mLsdVLNcIKsJEoDOFFZJMV33siIRlmrUoGsSP2mXiPI=
Subject key identifier: D0:EC:32:BC:8C:46:8E:27:77:97:0C:6E:96:D3:C3:34:D0:71:C1:16
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 019A4DAAA0D6F9D9151D0E815198CD5B1460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 12B9
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: a0GT4/BRhO8j6i4722tP1xu4jOeYqI1l3E3jdu165sI=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a0:d6:f9:d9:15:1d:0e:81:51:98:cd:5b:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=d0ec32bc8c468e2777970c6e96d3c334d071c116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:43:8a:17:0d:75:1e:79:1c:58:d0:a7:0e:
d5:df:d0:bc:85:fb:d6:dc:72:82:bb:16:be:57:4c:
60:7a:8f:80:53:07:66:76:29:ea:cf:c4:ed:f2:77:
11:56:de:0c:52:2c:ef:96:e7:5a:aa:6a:5c:eb:64:
5f:64:20:ee:72:94:5e:a5:51:b7:99:84:b2:bf:99:
6d:e5:c4:8f:b5:0d:31:d4:22:f2:98:e5:80:c9:4d:
09:9f:56:44:73:1f:ec:4d:26:1d:4e:c4:33:f6:e1:
6c:9b:fe:bc:f2:ae:2c:0f:7a:62:87:6a:29:62:24:
87:93:37:06:7e:68:8e:96:c0:0f:32:60:c6:5b:4e:
83:96:5c:35:73:df:86:45:02:c5:70:46:ca:90:41:
b6:14:cf:99:f3:ee:93:93:05:3f:36:75:ae:19:f6:
bb:e3:8b:80:15:9e:25:80:04:c7:3e:c5:35:2d:26:
a8:4a:7f:21:cb:86:b6:5c:56:c4:d9:13:d7:a3:1f:
a9:de:cc:91:6f:fa:f6:ba:22:4c:cc:96:64:f9:29:
5f:b4:23:d0:19:45:45:99:e7:06:3b:78:43:8e:1b:
a5:2e:fb:6a:7e:a4:93:8b:02:f6:8a:5d:07:98:40:
20:81:b4:11:31:a2:90:ef:bf:73:4d:50:b7:ce:e4:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:32:BC:8C:46:8E:27:77:97:0C:6E:96:D3:C3:34:D0:71:C1:16
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:71:c7:86:40:ff:de:7a:f4:a7:b0:ca:99:7d:79:89:51:d9:
52:31:6c:cb:a2:c3:ad:75:30:f3:88:f7:23:ec:5e:ea:88:ce:
e0:2b:95:dc:78:bf:e6:1d:0a:48:be:c1:fc:30:5a:9d:57:9e:
e1:84:72:3c:20:18:3b:2b:2a:d8:91:bc:5d:ab:65:06:ee:43:
47:05:f7:0d:32:b2:81:ad:a9:fd:a4:00:96:83:1f:4c:23:55:
70:50:e8:5c:be:88:9d:76:f7:8b:12:5e:88:6f:a0:32:11:47:
f4:6d:35:ad:8f:a6:c9:a1:17:c5:59:d9:74:b5:92:16:81:d3:
08:a8:98:09:f0:b1:5e:c8:9c:0d:38:c9:ec:b2:f8:46:5b:a8:
a6:b8:9c:bd:b2:74:4e:ee:ac:34:91:ca:26:20:da:9b:ad:b7:
11:80:a6:f6:db:fe:30:08:f7:ff:f0:d3:cc:8f:5d:3e:82:83:
69:5c:24:f2:37:13:2d:8c:0e:ea:22:43:0c:68:cf:68:52:c9:
69:89:17:0d:3d:d0:0f:56:d5:f2:27:ce:53:16:16:db:68:2b:
d9:2d:44:e8:12:b6:73:80:dd:cf:02:26:2d:19:c3:aa:0c:8c:
e3:17:41:66:0f:89:94:10:ac:53:ff:13:c2:a4:21:65:f9:60:
14:17:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:04 2025 by rpki-client