Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: TfnPtJPLi2u16pUd1eQKqzY4g7kwMHZiEwNC5IjCtrA=
Subject key identifier: 7D:0A:37:61:7C:08:40:4E:EE:A6:77:1D:03:05:66:23:C6:BE:1B:CB
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 019874BE7498C801836241BE65A4B375E863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 11C4
Signing time: Mon 04 Aug 2025 11:01:35 +0000
Manifest this update: Mon 04 Aug 2025 11:01:35 +0000
Manifest next update: Tue 05 Aug 2025 11:01:35 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: oKsaIpWDrYqcq/vi7A/B3mTtY365r31X/f1Ga3YZ0fs=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:74:98:c8:01:83:62:41:be:65:a4:b3:75:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Aug 4 11:01:35 2025 GMT
Not After : Aug 5 11:01:35 2025 GMT
Subject: CN=7d0a37617c08404eeea6771d03056623c6be1bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:0d:ea:8d:f8:4d:cb:6a:a1:0a:41:bd:9c:
0d:5d:c9:75:7f:80:dd:0f:e6:20:f1:bd:13:39:94:
df:01:19:29:b7:9e:14:d2:42:79:fc:f7:65:a3:e7:
d0:90:d1:2f:a0:fd:f0:e6:57:9a:ef:46:b0:18:3b:
14:de:3d:a2:04:eb:cc:ac:b4:43:20:01:28:ac:de:
03:69:d8:24:53:22:f0:66:94:88:c5:7d:3d:a7:e5:
55:dc:24:14:9a:0c:7e:f7:27:0a:e1:44:1a:da:d0:
0e:61:4e:a2:5d:d9:b3:ea:b7:ea:70:b7:b3:a9:6b:
0f:f2:c2:ad:cc:4b:c5:aa:0f:4b:f4:93:24:8b:28:
cd:91:73:3b:06:01:8c:e7:f6:e5:f8:6c:75:86:4a:
f6:c6:8d:d8:96:83:74:5f:1b:a0:00:45:b7:03:a9:
72:7c:3b:59:89:2a:83:f8:3c:e9:cc:19:28:61:88:
e9:74:4f:c2:42:6e:65:24:43:1e:04:8f:df:a8:91:
94:45:e8:41:83:10:0d:78:81:61:b9:75:36:06:96:
f1:ea:73:08:d3:75:9c:b3:2f:6a:15:2b:60:6b:70:
38:d0:a4:48:98:f9:ce:96:2e:95:f8:56:50:9a:3b:
56:28:2b:62:37:b8:51:75:00:02:c3:fe:2f:5e:2c:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:37:61:7C:08:40:4E:EE:A6:77:1D:03:05:66:23:C6:BE:1B:CB
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:70:8f:bf:5e:c2:8e:b0:eb:21:e1:82:21:1b:7b:88:fe:
e3:12:f0:f7:65:e9:d9:08:53:12:0f:ca:c0:a8:64:d7:cd:87:
3d:1b:6f:a6:a2:d5:02:59:83:99:5d:52:ff:43:11:86:67:85:
2c:32:7a:b3:d2:bf:d2:41:f7:c5:cc:67:85:f1:16:e7:07:d0:
90:e1:1b:49:44:a2:b5:d5:0b:3b:02:ff:d0:6e:c3:03:53:a7:
f5:3b:bd:3a:57:84:a6:fc:ef:3b:53:c4:16:0d:54:dd:a6:3f:
27:74:51:95:15:b3:5b:4c:1f:c6:42:f9:f2:b2:06:a4:d3:99:
f5:0c:80:0a:d4:5c:1a:be:ef:c0:e7:b5:da:09:9d:5a:37:a8:
30:e5:e9:4e:56:a9:ca:d5:98:c9:d5:23:42:df:78:0f:40:ec:
d2:c0:4b:c8:11:9b:85:f9:78:45:2f:c0:ae:6a:c9:aa:1d:3b:
64:c1:a3:0b:cc:97:8a:dd:bd:9a:15:55:91:51:e6:7a:d0:57:
a3:2e:48:4c:13:b6:1b:86:1a:e1:e0:cf:a8:9f:7f:e8:81:65:
3b:16:42:7f:56:66:c3:57:30:30:5e:ed:f1:71:c6:31:92:8e:
a9:98:a4:f4:bf:cc:19:d0:da:de:c3:3e:ff:23:3b:c1:54:f5:
4d:6c:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:36 2025 by rpki-client