Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: 1bKsLvgtx9nNEleyFjS4oSy+I5MIqfEN9aHucFWkwng=
Subject key identifier: 58:55:CC:DF:4E:6B:E1:57:E5:FA:BF:83:9D:CA:0F:6E:93:52:1A:A6
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 0198816693FA3EAC64F43A7C88F6C41FA803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0317
Signing time: Wed 06 Aug 2025 22:00:40 +0000
Manifest this update: Wed 06 Aug 2025 22:00:40 +0000
Manifest next update: Thu 07 Aug 2025 22:00:40 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: u5Np4DRYOkALD460rwmP3c07ms881bz3UNKG2DU5iAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:93:fa:3e:ac:64:f4:3a:7c:88:f6:c4:1f:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Aug 6 22:00:40 2025 GMT
Not After : Aug 7 22:00:40 2025 GMT
Subject: CN=5855ccdf4e6be157e5fabf839dca0f6e93521aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:92:02:48:43:14:69:34:d5:40:55:ef:6c:
60:e7:5a:35:8f:2f:90:5f:08:97:66:4b:46:90:ff:
93:02:79:5c:fa:7c:73:81:9d:b7:75:06:0c:3e:01:
90:7e:8d:27:9b:e1:c6:62:28:96:39:fa:11:d3:d0:
ad:ae:16:73:74:6b:97:be:52:ea:24:8c:63:5d:49:
f5:af:36:d8:0f:00:f7:95:42:3d:fa:89:19:71:bf:
53:2d:b8:ff:0b:6b:97:c1:6b:b3:47:48:a9:4a:54:
02:46:67:ff:9a:a2:58:bb:d9:c8:62:ee:84:8c:a8:
e2:0f:69:f9:41:1a:cb:c2:4f:52:47:f9:82:91:39:
3f:bb:f3:53:a1:13:99:43:94:ff:0a:75:80:ea:cd:
66:23:e1:13:2d:3e:57:d3:16:6e:76:fd:7d:14:8e:
39:f5:ee:19:dc:22:a4:17:4b:9a:82:6b:39:cf:96:
a3:d1:d9:91:a2:32:c5:ab:e8:66:d6:4b:6e:02:d8:
2f:97:37:98:0c:96:53:90:7c:19:da:88:ea:fa:9e:
24:47:d3:dd:14:19:01:6c:ad:dc:28:d4:b5:28:6c:
55:22:1c:7e:33:90:87:c3:98:a0:05:21:38:0c:70:
d2:a9:56:fa:22:e2:0f:1a:b9:bb:45:b5:52:51:b7:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:CC:DF:4E:6B:E1:57:E5:FA:BF:83:9D:CA:0F:6E:93:52:1A:A6
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b2:97:c2:38:32:a3:0e:0b:bc:05:56:ba:f8:1a:45:10:dd:
af:17:ed:70:ef:17:52:23:d7:c2:50:04:1f:06:0b:d7:74:68:
81:d7:cc:92:d2:e6:1a:57:32:87:f7:a1:99:dc:22:b0:22:c0:
dc:3b:ed:40:8d:8e:b0:81:20:5b:9d:0e:c6:0f:ac:76:8c:74:
25:58:51:1a:99:3f:57:61:73:e6:33:d6:5b:68:f3:8a:78:0d:
4c:f4:ab:e0:13:d4:2e:51:3f:01:08:09:34:59:42:06:3a:4d:
fc:3d:87:f5:40:20:25:0d:6f:62:af:b0:03:de:46:23:37:a2:
b7:57:52:4e:82:c9:15:a2:ed:94:dc:23:1f:a6:0c:ba:5f:b9:
dd:b2:b1:bb:f2:8e:c6:53:91:48:89:fe:fa:94:14:ca:8d:c1:
bd:40:cb:ab:6c:de:4e:65:46:24:a5:ad:fc:e3:25:5f:34:c7:
8a:2f:52:c2:a5:fa:23:de:45:6c:9d:f8:1f:59:4d:d0:ce:a4:
7d:99:31:b6:e9:b1:ee:e1:49:5c:5d:1f:91:04:91:91:fd:c1:
0a:a1:79:b3:ce:a4:1a:99:fd:0a:44:9f:c1:e9:c5:46:dc:39:
7d:a3:ab:37:1d:22:e1:c0:8a:ce:bf:25:16:05:05:68:1c:f7:
d1:32:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:39 2025 by rpki-client