
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: H7n2OiNSGC6OARp3rbCMTY3JemwqGcQILlVBMXflAFM=
Subject key identifier: E4:FF:3B:3F:29:42:BF:EC:B8:5E:9F:6C:BC:53:E5:F2:02:60:F3:EB
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 019892234AAE4C37A85D9309FA1604B018A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: DE
Signing time: Sun 10 Aug 2025 04:00:42 +0000
Manifest this update: Sun 10 Aug 2025 04:00:42 +0000
Manifest next update: Mon 11 Aug 2025 04:00:42 +0000
Files and hashes: 1: CAK19XLyWpDBKtyOh5VJFJlDLgs.roa (hash: UlLhFCJZ2QmzzZ8qbAQI384c7jYogbUbzPQIMlTHrTw=)
2: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: CYjF0LX6Z2ZusLR3ofxoCtPbUbrm1Dcz40XFVM1N5WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:4a:ae:4c:37:a8:5d:93:09:fa:16:04:b0:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Aug 10 04:00:42 2025 GMT
Not After : Aug 11 04:00:42 2025 GMT
Subject: CN=e4ff3b3f2942bfecb85e9f6cbc53e5f20260f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:8d:a4:03:8b:3a:a4:4b:c3:79:2f:26:f8:
21:01:be:24:75:ec:fc:0d:81:85:93:6a:26:14:35:
d1:57:d8:08:3d:ba:6e:48:ea:e2:13:1a:1a:58:56:
64:d6:ea:22:5f:84:57:ef:86:d4:d1:2d:3a:59:84:
6f:48:b0:e6:4d:cd:47:15:21:69:c8:24:40:1c:cc:
e4:5f:b1:d0:ab:14:df:74:c6:06:47:a0:ff:f0:0a:
59:55:48:40:b0:c9:84:c2:2a:8e:5c:15:7d:12:10:
61:84:bb:85:5f:e8:3d:d2:a0:dd:04:89:d9:54:e5:
00:83:f9:d8:46:85:8c:25:47:56:ad:f0:c3:ff:72:
ba:08:a4:77:ce:34:23:6a:6a:25:fb:73:71:e8:97:
29:04:05:05:d0:fc:1d:e6:ee:a8:a4:fb:5b:cb:eb:
19:c0:9e:34:83:c7:b6:dc:00:68:1a:fb:a7:95:ab:
00:84:65:10:f1:8e:e0:87:75:94:7a:79:0d:32:1b:
41:ed:04:ba:9f:ed:ce:0a:e0:90:5f:e2:3c:b2:5c:
f4:be:df:b1:2a:d5:8a:0c:c5:40:fe:ba:a4:80:26:
c9:3a:4c:84:e5:42:b6:a4:1b:2c:e8:46:cb:25:dd:
c1:4f:25:4f:0a:f0:8b:97:67:bf:4d:0d:e1:49:c3:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FF:3B:3F:29:42:BF:EC:B8:5E:9F:6C:BC:53:E5:F2:02:60:F3:EB
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:97:6b:4a:23:ba:36:08:67:04:b4:90:d1:eb:f7:da:3a:
a1:d0:50:3f:d0:81:4e:22:7e:67:2f:03:46:e1:91:c2:ac:f9:
5a:61:34:c0:80:23:32:09:18:09:8b:be:27:1a:69:a7:83:99:
f0:dc:45:fc:92:76:54:67:6f:2f:b0:94:83:38:6b:2e:33:07:
7c:63:fd:29:ba:aa:45:be:e9:98:28:d3:02:ea:53:21:ab:53:
31:63:60:09:95:38:b7:d9:36:0a:c1:84:74:30:9f:3f:74:5b:
6a:d2:d1:ce:42:b5:65:63:5d:03:bc:20:51:de:51:a5:3e:56:
3f:2e:9e:ea:8e:78:a0:68:88:59:85:a7:88:fa:93:ac:30:f6:
10:50:9d:be:14:6c:22:dd:ea:97:02:9e:1f:81:b6:75:07:8a:
df:04:67:df:9b:86:54:95:ac:b2:1a:36:32:bd:8a:fe:25:84:
64:3d:98:f9:4a:fd:09:02:91:e2:1a:52:13:10:f0:fa:4b:13:
26:ff:d5:82:67:6c:8b:04:f1:ce:a2:a2:a0:98:6c:a7:b4:7a:
e1:8f:9f:e9:cf:7f:86:8e:2c:90:f4:06:1d:33:27:75:0d:8e:
80:aa:60:3c:98:11:c6:22:2c:2e:34:c6:c9:be:8f:35:0c:71:
06:18:7f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSI0quTDeoXZMJ+hYEsBiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5
MTdjYWYwHhcNMjUwODEwMDQwMDQyWhcNMjUwODExMDQwMDQyWjAzMTEwLwYDVQQD
EyhlNGZmM2IzZjI5NDJiZmVjYjg1ZTlmNmNiYzUzZTVmMjAyNjBmM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiKNpAOLOqRLw3kvJvghAb4kdez8
DYGFk2omFDXRV9gIPbpuSOriExoaWFZk1uoiX4RX74bU0S06WYRvSLDmTc1HFSFp
yCRAHMzkX7HQqxTfdMYGR6D/8ApZVUhAsMmEwiqOXBV9EhBhhLuFX+g90qDdBInZ
VOUAg/nYRoWMJUdWrfDD/3K6CKR3zjQjamol+3Nx6JcpBAUF0Pwd5u6opPtby+sZ
wJ40g8e23ABoGvunlasAhGUQ8Y7gh3WUenkNMhtB7QS6n+3OCuCQX+I8slz0vt+x
KtWKDMVA/rqkgCbJOkyE5UK2pBss6EbLJd3BTyVPCvCLl2e/TQ3hScOlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT/Oz8pQr/suF6fbLxT5fICYPPrMB8GA1UdIwQY
MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt
YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj
LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFGXa0oj
ujYIZwS0kNHr99o6odBQP9CBTiJ+Zy8DRuGRwqz5WmE0wIAjMgkYCYu+Jxppp4OZ
8NxF/JJ2VGdvL7CUgzhrLjMHfGP9KbqqRb7pmCjTAupTIatTMWNgCZU4t9k2CsGE
dDCfP3RbatLRzkK1ZWNdA7wgUd5RpT5WPy6e6o54oGiIWYWniPqTrDD2EFCdvhRs
It3qlwKeH4G2dQeK3wRn35uGVJWssho2Mr2K/iWEZD2Y+Ur9CQKR4hpSExDw+ksT
Jv/VgmdsiwTxzqKioJhsp7R64Y+f6c9/ho4skPQGHTMndQ2OgKpgPJgRxiIsLjTG
yb6PNQxxBhh/GQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:02 2025 by rpki-client