Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: dgNY3z1tIR0kamGVoAb0OzT4Z0OFTuzYdWlKv95eLro=
Subject key identifier: 95:07:0A:E1:90:73:2A:04:AB:45:27:0D:23:F4:D9:8D:EA:6F:08:B1
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0198808AF76F41E3877EF54EFB4823F31EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 04FF
Signing time: Wed 06 Aug 2025 18:00:47 +0000
Manifest this update: Wed 06 Aug 2025 18:00:47 +0000
Manifest next update: Thu 07 Aug 2025 18:00:47 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: avWX4r1HGYwWD8xW9vwfYgj4yNJzevtedgGaSbcjj8s=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:f7:6f:41:e3:87:7e:f5:4e:fb:48:23:f3:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Aug 6 18:00:47 2025 GMT
Not After : Aug 7 18:00:47 2025 GMT
Subject: CN=95070ae190732a04ab45270d23f4d98dea6f08b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:6c:e8:69:5e:bd:08:1f:7e:aa:bf:e0:95:
8e:dd:9f:e7:2a:ad:77:05:02:30:35:74:2c:4b:31:
a1:2f:db:c4:8b:0f:35:80:4e:62:31:bd:e5:3e:88:
02:6d:9c:d7:e3:9a:01:1b:37:bb:1e:99:83:86:fa:
7f:82:b8:e5:f6:bd:f8:4b:af:91:62:4a:77:eb:10:
85:b7:66:12:d4:3b:c4:0c:03:a0:cc:08:61:8a:60:
d2:ad:5f:d3:b2:7f:21:f9:b7:31:cb:20:a8:08:98:
58:92:e7:96:45:bd:b4:47:d3:fb:a2:80:60:f5:c7:
3d:d3:47:4e:1b:79:ea:ea:04:e8:94:a8:4a:c0:32:
61:41:d2:d4:ca:50:9c:51:52:4d:a9:c1:49:f4:38:
a3:63:f7:c6:90:e7:89:e6:de:b3:1d:74:c8:9d:d7:
9b:c8:91:1b:4f:e9:01:de:81:0a:f0:87:63:c8:66:
01:04:37:d6:2d:ec:78:9f:c5:c1:be:2e:f6:f6:a5:
27:20:04:06:ed:bb:a0:11:d5:81:79:1e:5c:1f:5e:
b1:9d:a9:b4:a0:81:eb:0a:aa:e1:1c:7f:0c:d0:26:
5d:13:fa:bd:01:e2:11:b2:f6:f5:e4:d2:49:3d:df:
5f:18:4c:aa:7e:9c:a7:39:ce:9e:5f:36:71:14:cb:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:0A:E1:90:73:2A:04:AB:45:27:0D:23:F4:D9:8D:EA:6F:08:B1
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:48:32:c6:b5:88:66:15:f9:5d:9f:c2:d6:09:7b:86:6a:
e9:c0:03:76:3f:8f:74:fd:47:dc:42:13:90:1d:a5:3a:16:79:
13:53:00:c0:46:24:ee:b0:12:76:3a:e8:ff:46:0d:78:12:f5:
c8:ff:ec:03:32:47:9c:c7:15:d8:0b:fc:54:0d:fa:26:14:f9:
46:66:96:44:91:c8:b3:db:70:b7:67:e1:c2:6c:37:92:d9:bf:
2a:3a:c9:8b:e3:46:82:83:63:69:84:82:71:eb:8a:b3:7a:d7:
d5:51:84:59:ae:e4:7c:ed:62:7c:1b:22:6c:69:9b:8d:9e:15:
11:29:0f:c4:5c:1d:60:52:3e:01:d3:14:e5:19:b7:d9:fc:a7:
76:14:ef:10:a1:ef:fb:6f:4f:f9:94:3d:c7:12:ee:9d:38:3c:
3d:6a:b7:c6:d2:5e:c6:e7:c7:c0:ed:57:37:f2:68:47:c4:86:
0f:22:d4:12:ca:07:31:da:f3:14:a0:7e:78:7a:fc:94:85:b8:
f0:e4:b9:11:cd:79:dc:0a:3f:db:8a:31:7a:8c:7e:c6:ec:cd:
49:a1:a8:58:dc:c1:2a:09:94:d1:e3:f2:3c:45:ab:f5:1f:74:
e8:f4:0a:41:05:a9:1c:ed:cb:2a:25:a6:8f:42:36:a2:db:46:
43:d7:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:05 2025 by rpki-client