Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: qXXyJeVCLvCayL/WOMDTRVFn+3Pb7mCDQD1hQWTXFl0=
Subject key identifier: CC:60:7D:1E:6D:FB:60:3B:DD:37:6D:AA:50:B0:3D:B9:AA:2C:3E:F3
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 01976960D5CB6BA345B3569252C66F010310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0286
Signing time: Fri 13 Jun 2025 13:00:43 +0000
Manifest this update: Fri 13 Jun 2025 13:00:43 +0000
Manifest next update: Sat 14 Jun 2025 13:00:43 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 4dBYrvuxzrvpA5vaagJGaqmMif6N7LgqUNhrD0LtffE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d5:cb:6b:a3:45:b3:56:92:52:c6:6f:01:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Jun 13 13:00:43 2025 GMT
Not After : Jun 14 13:00:43 2025 GMT
Subject: CN=cc607d1e6dfb603bdd376daa50b03db9aa2c3ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:ba:40:93:c1:12:12:99:28:04:e6:1e:4e:
20:67:38:5e:c3:7b:b1:86:0d:d9:a2:6d:a1:07:c6:
d9:40:da:b2:26:9e:9c:a7:1d:3b:3a:a7:47:1a:c4:
f4:df:33:f2:fb:28:17:4b:86:96:55:e4:65:7b:0d:
7e:53:82:8a:59:ae:2e:ad:05:6b:33:f4:69:1a:2f:
c8:37:dd:d6:d5:17:40:46:5d:00:b8:dc:76:61:c3:
92:fe:3b:2a:5b:ca:84:e5:3b:4b:58:5e:f6:af:ce:
78:97:d7:7f:7f:e0:1f:e6:cd:ae:24:51:15:c0:85:
34:3e:91:2d:6d:a3:7e:c8:63:14:c0:63:e3:67:07:
8b:5c:4c:d5:07:01:24:48:81:cf:64:4a:2b:ea:92:
d3:f5:05:4e:e7:5d:b4:8a:6d:ed:f2:ac:0f:57:bf:
57:c7:8f:24:c7:b8:92:16:5d:e3:aa:d6:c9:7a:19:
64:68:e9:08:c8:34:df:cc:63:7c:4a:99:37:55:83:
1a:e8:d7:82:e1:3a:3e:74:63:d8:2f:b2:e3:bf:e5:
dd:88:41:d4:72:46:05:df:b2:09:d5:5b:17:c2:9a:
5b:1c:e5:f5:00:1f:64:9e:be:8f:30:fd:82:92:b8:
de:72:6e:40:85:c2:04:68:70:f4:35:c0:7a:ed:2a:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:7D:1E:6D:FB:60:3B:DD:37:6D:AA:50:B0:3D:B9:AA:2C:3E:F3
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3d:45:88:72:f9:8c:aa:c4:b4:3b:54:62:9b:f2:a3:f3:92:
b3:c5:6c:de:b9:d2:73:68:b7:82:a7:86:15:e2:40:59:e3:e4:
92:24:30:91:40:a6:8f:f1:5c:60:98:99:ea:f6:d6:4c:d2:1f:
14:ab:d2:7f:d2:44:f8:41:d3:5a:8b:46:6e:d2:7f:76:37:36:
69:b0:6d:3c:54:f0:96:0e:89:ce:7e:a0:f8:b6:36:03:99:03:
b8:db:5c:53:37:f6:d2:6f:21:8b:06:c4:0b:09:e0:e0:48:d7:
53:87:d0:b9:53:84:89:64:08:51:c6:ab:81:4e:89:22:be:33:
4f:7d:e9:08:1d:42:26:59:57:51:af:38:58:20:00:86:5e:58:
92:78:47:0b:e9:67:7d:9b:ef:d1:f8:5c:af:7a:d8:36:e9:0a:
5b:13:e5:35:d7:00:09:ac:4c:cc:da:05:4e:cb:89:d3:b0:01:
0d:96:0f:07:94:50:71:59:eb:0c:32:8e:72:9f:0d:42:a5:b2:
c4:77:76:2a:14:f8:d2:0e:c6:55:dc:cd:20:85:b9:b8:a7:cf:
25:ed:d8:a1:9f:cc:7a:61:19:07:e2:de:07:f0:4d:55:eb:de:
3b:bb:02:bc:3f:1b:2e:2a:6e:df:f7:2d:f7:b4:25:55:d1:f1:
e2:e7:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:23 2025 by rpki-client