Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: zBl3yekFmB+72qDARMZjvQA6uJMOhYVCDRjmEHHEosQ=
Subject key identifier: D4:7E:46:34:B9:D0:DD:FF:E2:71:45:D7:ED:70:31:C9:9A:61:08:29
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019A4EF4308019FE1783E6D3BA72C35305B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0406
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: hVLwCSrSgvw4LNDdwTp8XuSQvxPfEpZ/8ktA6ud7Ml0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:30:80:19:fe:17:83:e6:d3:ba:72:c3:53:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=d47e4634b9d0ddffe27145d7ed7031c99a610829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d5:87:b5:c2:09:61:73:df:08:4e:f2:a5:
40:68:d2:bb:d7:b6:07:57:44:05:0f:55:b2:e1:df:
b4:5c:b5:57:de:3a:b4:d3:9c:11:f8:77:b5:f7:6e:
40:40:c1:f8:6b:ff:c7:27:93:3e:59:2a:a9:f8:b6:
92:bf:b5:72:00:01:7f:e3:21:af:37:7c:ac:09:d2:
9c:fe:e6:a5:c7:84:14:95:be:85:42:2f:f0:b3:32:
58:20:78:c5:9d:cc:4f:cf:14:a2:d4:b7:47:0e:53:
0d:69:b9:9f:fa:3a:76:2c:1f:96:f5:6a:61:9d:af:
bd:c3:46:c3:ce:2f:0c:c5:da:50:29:6a:e4:db:f5:
fd:ce:3d:5b:d6:b7:17:fb:c7:36:4f:be:3c:69:48:
37:79:59:94:f2:48:d5:08:24:e2:d4:d3:76:dd:75:
60:16:19:1d:21:83:7e:10:b0:b4:92:31:df:19:6a:
c8:eb:6b:57:4e:e7:d2:2a:b5:41:3c:34:cb:6e:c9:
b4:9b:18:67:e5:94:d6:e2:05:89:0b:f7:18:bd:2a:
00:68:ed:02:cd:7d:d7:08:a9:b7:1f:23:90:80:e9:
e0:e6:44:4d:c7:d5:92:6f:97:e8:90:24:24:ca:47:
fb:48:48:ea:a4:07:fd:32:f4:56:c9:0f:a5:c2:1b:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:46:34:B9:D0:DD:FF:E2:71:45:D7:ED:70:31:C9:9A:61:08:29
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:08:e2:e1:09:0e:69:45:b7:9d:5e:da:d8:70:a1:b1:ee:ab:
d0:ce:e9:d0:e2:e1:08:73:d8:7c:d5:5b:f3:44:07:f2:00:d0:
66:37:b6:40:20:23:c7:41:52:31:5a:90:2d:6b:fa:bf:39:3b:
81:48:2e:86:82:ae:19:ac:23:50:07:13:04:b7:a6:c3:93:2a:
28:c2:33:31:9b:b0:a0:32:2b:ac:df:ea:c5:b0:10:af:6b:db:
67:0b:f2:a3:94:ec:38:94:79:f8:e0:43:30:ba:a6:47:ee:3b:
99:3f:d2:cd:1b:80:f2:7f:5e:67:a6:cf:f6:5b:fb:2e:01:98:
37:fb:99:ff:4d:c1:fa:29:47:80:1e:9f:6a:c7:17:47:1f:df:
dd:f0:b6:2c:5e:0c:f8:22:ab:1c:bc:a0:a6:15:8f:e8:69:79:
d1:7c:8a:d3:7a:de:8a:df:0d:42:93:64:01:45:08:01:94:7d:
62:1a:17:21:52:f7:63:14:ec:ef:fc:98:84:95:a7:85:1d:15:
a4:a0:a0:1d:9e:a9:82:26:8e:8a:18:eb:ba:d7:bf:53:54:5e:
9b:4b:68:22:e0:20:63:7a:79:d2:94:74:01:2a:1d:eb:46:39:
4f:b3:0b:f9:a4:3e:11:8b:70:c3:43:6e:7d:a2:fb:2c:51:2d:
fb:8f:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:32 2025 by rpki-client