Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: KQlJaXUB7LtOj2ccaoft1VmOHABOUJHILLHrkh1c8Uk=
Subject key identifier: 8B:07:E7:FE:3C:4B:65:10:C0:C1:E4:CA:21:3F:E4:21:98:FE:E5:37
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0197703EE2ECBBB3A3F514ECF7887D65D6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 0472
Signing time: Sat 14 Jun 2025 21:00:58 +0000
Manifest this update: Sat 14 Jun 2025 21:00:58 +0000
Manifest next update: Sun 15 Jun 2025 21:00:58 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: Gz0ZcPphT6Y2sadrZP3CE7Btw7zJ1YKgDwGVbYVtBR8=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:e2:ec:bb:b3:a3:f5:14:ec:f7:88:7d:65:d6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Jun 14 21:00:58 2025 GMT
Not After : Jun 15 21:00:58 2025 GMT
Subject: CN=8b07e7fe3c4b6510c0c1e4ca213fe42198fee537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:4d:a4:37:2b:06:41:b6:e9:31:b5:09:96:
d8:d8:0d:12:f9:b0:14:7b:34:e7:d5:be:20:86:38:
cc:35:94:49:be:d4:bf:21:05:7a:d3:09:41:42:55:
f7:0d:83:74:7d:d0:8c:30:ad:5b:1a:6b:54:90:a1:
65:ca:fc:93:26:8f:d3:ce:60:cd:21:df:15:29:1d:
ca:57:a2:0d:cd:25:a6:88:a6:2c:7c:b9:0c:70:7d:
10:c5:a7:15:30:35:a9:ae:c2:c2:4b:b6:8c:90:cf:
91:2b:d0:49:d9:72:0a:4c:91:1d:73:e4:2e:97:cb:
fd:75:48:56:15:2a:f1:59:27:7c:dd:3e:5f:5d:55:
14:5d:63:2e:55:31:4e:c5:9d:4c:75:5e:a6:68:4c:
96:5e:a0:58:84:2c:08:7f:f8:6d:3c:69:61:de:a0:
40:f0:16:a3:f7:82:b1:d2:ac:a3:90:f8:4e:a2:c2:
90:3a:c4:c9:fa:82:d2:ef:14:be:b3:de:58:3c:37:
25:74:eb:ef:65:ed:75:82:af:58:e8:1a:4b:ba:6a:
e4:ee:4d:e7:17:91:5e:5a:59:4a:dd:78:a7:27:44:
a9:0c:da:7b:6f:33:fd:91:7e:54:21:70:b4:f7:b6:
47:67:8f:4c:f2:70:24:c3:34:4f:84:87:6c:ec:dc:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:E7:FE:3C:4B:65:10:C0:C1:E4:CA:21:3F:E4:21:98:FE:E5:37
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ae:4b:48:69:a2:b5:d8:21:41:e7:37:94:b1:ef:b5:c3:b6:
14:37:23:17:e8:3b:e5:4c:41:9c:9f:16:f5:52:bc:cc:f4:7b:
82:eb:b8:e1:66:40:8b:7a:cf:dd:a9:2c:f5:0b:5b:ce:69:ff:
56:2e:70:4e:b9:7e:7e:cc:42:36:37:0b:f2:9d:b1:72:d9:69:
06:54:62:db:7c:60:5c:5f:c3:fc:1e:7f:dd:54:5a:04:72:86:
10:7b:72:aa:26:1b:8c:1c:27:01:ec:4d:f5:94:eb:6d:31:0c:
a3:29:d5:8e:93:49:6f:04:ea:18:f0:0b:ba:ca:5b:5b:04:53:
43:41:74:e8:e6:dc:5d:3b:cc:28:04:7c:e4:2b:d2:03:b5:85:
a3:72:ab:58:91:d6:6f:67:0c:41:c7:bc:82:3b:2e:02:ab:a3:
bd:23:e2:85:55:f8:5d:f0:86:29:3c:40:cf:4c:ad:09:36:6f:
02:e6:3d:8c:b9:18:59:cf:43:fe:3f:38:58:a3:79:e5:7b:95:
64:32:d1:f3:70:18:08:ee:00:fe:c0:1c:18:ed:f6:a0:7b:38:
0a:d1:48:9b:c7:81:23:31:0d:89:16:10:22:e6:3b:2c:b0:0d:
5c:59:20:2a:1e:29:1b:75:13:0b:ef:26:13:f5:8b:1c:ae:5e:
4d:4d:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:28 2025 by rpki-client