Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: hHaYIr8mjBMSqF30gf5l/g8hFITHAOzBoee/yam0XYQ=
Subject key identifier: 9C:2A:1D:35:AA:B2:C3:E0:FE:CA:1A:CF:7E:57:60:F2:92:4B:79:63
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 01977A547566F4093ED0F999635F23AD6EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 4A
Signing time: Mon 16 Jun 2025 20:00:44 +0000
Manifest this update: Mon 16 Jun 2025 20:00:44 +0000
Manifest next update: Tue 17 Jun 2025 20:00:44 +0000
Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: o/YUXwTH2F56C9DtPxCD8FT7fazoJ9tFsKrngKDjbH4=)
2: xyt3VMfbJUV58fKwH9MNTyoBkJU.roa (hash: lwI1DACE2l6hVliTMM5yznvKSIuwu90nNnBsoYcaTc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:75:66:f4:09:3e:d0:f9:99:63:5f:23:ad:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Jun 16 20:00:44 2025 GMT
Not After : Jun 17 20:00:44 2025 GMT
Subject: CN=9c2a1d35aab2c3e0feca1acf7e5760f2924b7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:5f:46:8b:57:21:c7:f1:bd:39:1f:97:fa:
e5:c9:ed:f6:13:ef:97:51:41:a5:f0:f5:cc:29:be:
2e:18:bf:a1:78:40:12:16:6b:d2:4b:73:3b:9b:d0:
d2:13:08:40:11:3b:a8:f1:72:cf:32:92:41:db:ee:
03:ac:7a:25:f0:bf:10:c4:1d:69:90:56:bf:7c:52:
ee:57:e4:3a:2f:53:86:e6:77:79:54:81:9a:c0:15:
2f:00:76:c9:82:af:c5:89:4f:20:66:af:ca:8e:6c:
81:ae:4f:e3:f6:ac:d4:42:49:85:be:70:6a:e3:d1:
f1:f0:a4:08:40:d7:5e:26:a5:f5:e2:fd:57:18:63:
ba:8c:1c:b2:3f:4b:41:d3:c5:38:5a:10:57:66:27:
20:a7:93:b5:85:04:59:3a:55:c9:a5:a7:04:80:ea:
c4:77:6a:79:b7:29:44:13:7c:10:1a:e3:04:73:92:
e7:a0:5e:fa:c7:d0:30:88:e3:9d:e5:79:d0:49:cb:
3c:cc:f8:88:73:30:62:c3:e3:ba:b8:8a:d2:f1:a2:
33:72:37:19:95:61:64:72:ca:cc:1e:ae:4d:06:80:
43:a7:1b:4b:c6:d6:f2:ff:c5:13:e9:c7:f4:d0:f6:
7d:1b:2a:5d:ec:d8:5f:7c:50:68:73:f7:c1:b0:30:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:1D:35:AA:B2:C3:E0:FE:CA:1A:CF:7E:57:60:F2:92:4B:79:63
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:54:7e:2d:27:75:2d:80:22:17:bd:b2:29:f3:14:17:c1:c5:
b6:2a:b7:3e:47:96:19:1b:87:28:74:ab:55:71:9d:a1:58:50:
00:c5:55:23:4c:4e:89:25:47:d7:36:12:d1:55:c9:a1:82:97:
c6:fe:5c:6e:0e:f5:8c:71:b8:99:78:9f:1b:54:a1:31:c2:ea:
ab:08:da:30:7d:30:89:c5:62:99:72:dd:1f:28:16:c4:3c:52:
e6:e6:47:8c:de:07:43:02:77:0b:fb:d8:f5:d5:bb:5f:63:45:
ea:35:3e:fa:68:64:b2:19:b1:36:a9:aa:d3:ce:35:4c:95:37:
fb:2b:83:35:42:52:21:30:bd:0e:39:9c:55:3d:78:8c:d3:3f:
44:1c:a2:0b:35:8d:dc:e8:8a:09:ef:29:59:94:80:b6:5e:97:
b3:c3:a2:cb:47:b9:fb:6e:9f:99:67:6c:5d:7b:06:47:18:b5:
23:b6:a3:6c:b5:86:08:ce:87:2d:17:90:1f:0d:72:11:8e:1c:
81:a6:5f:71:3e:b4:43:f4:15:d9:90:65:52:3e:9c:d4:f0:55:
ba:58:c1:8c:e7:eb:33:2b:52:d2:44:44:a3:f0:4a:af:2b:f5:
4e:cd:5c:25:d2:9e:af:86:42:60:3e:a2:3c:35:da:30:c7:2d:
65:7e:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:26:09 2025 by rpki-client