Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: GhS7+VY6tyLDs1H/KHuHSNEaNmLENQqTaLK+pYaY+R4=
Subject key identifier: 0C:9F:91:C5:D6:7B:B9:50:62:3F:7E:19:B5:09:52:0F:4E:59:E1:C7
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019A5007557620B7FBDAB1414362F0346B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 05EF
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: QJHfAxAfVSRL8PFQQ2DndkkSTIQqBU5crvTYndkERbY=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:55:76:20:b7:fb:da:b1:41:43:62:f0:34:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=0c9f91c5d67bb950623f7e19b509520f4e59e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:08:ef:22:a1:c4:4a:59:a9:ac:5b:c5:f7:
34:d9:02:82:6c:cd:d9:b1:1c:f0:6f:0c:ee:c2:d7:
1c:33:19:3c:42:37:87:cc:94:30:93:81:4d:c0:ed:
13:25:dd:43:80:04:c2:6e:0c:fe:ab:54:9f:41:8b:
9d:75:04:fc:3a:7f:2f:4b:c8:86:2c:bc:e7:9c:8b:
57:d7:55:d3:0d:ff:84:fa:3b:65:f1:c3:be:6e:97:
34:96:ea:5d:14:94:15:48:0d:b4:7f:43:78:02:e6:
fd:c2:56:25:08:14:13:ab:01:c3:f7:8f:f6:d0:b3:
d8:b6:e4:60:84:d7:6c:f6:19:79:6d:bb:75:f9:2f:
09:19:66:fe:2a:23:01:1a:01:ff:78:ee:33:ff:83:
9a:c6:52:9b:c1:33:2f:14:e6:0f:ba:28:a6:77:61:
b5:a4:1f:09:97:50:c1:48:c8:ec:6c:d9:93:d2:98:
dd:0f:d2:fc:91:62:89:28:64:fb:25:bc:4c:42:f2:
5f:a6:94:df:a5:0a:55:e0:88:ce:ab:e3:50:18:4c:
6c:81:a6:bb:8e:74:e0:57:85:bf:f2:e1:12:a8:77:
8f:82:d8:d9:ff:5b:e8:c0:06:94:6d:4a:41:96:11:
56:b0:50:47:5a:bb:3c:c8:81:80:09:1e:02:03:0d:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:91:C5:D6:7B:B9:50:62:3F:7E:19:B5:09:52:0F:4E:59:E1:C7
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2c:4c:ed:3b:fb:38:c3:05:e3:92:e0:7e:c8:cf:67:99:ad:
1d:75:27:16:f5:06:da:87:49:e0:f4:be:ae:cd:19:d0:a6:36:
53:68:e0:dc:20:d8:b0:5a:94:ea:92:33:2a:90:03:06:b2:ea:
37:02:94:95:a8:ba:08:7d:53:04:cf:fc:01:30:24:5f:85:15:
37:be:3a:a4:80:3f:a7:e4:c1:2b:66:74:60:fe:de:c1:6e:c8:
94:92:df:6e:b8:b4:a3:cb:21:a4:8d:8a:76:66:04:1d:26:0f:
c4:80:c3:de:a8:96:90:56:69:47:ea:bb:6c:7f:3c:f7:98:a2:
ae:68:77:fe:35:09:42:fa:33:5a:b2:ba:c3:f1:2f:ca:85:91:
8b:3a:ee:91:6a:cd:73:2f:26:14:19:61:67:4d:e9:77:30:27:
0c:8c:78:ea:37:66:a9:73:f5:c1:c8:27:4b:08:c3:ee:a1:b8:
80:d6:06:48:7a:74:58:32:34:c9:78:02:36:f9:b0:71:07:04:
91:34:44:82:4c:b5:4a:1b:08:2b:96:2d:68:e8:f0:7f:74:aa:
51:c9:de:77:cf:83:0e:0c:87:e2:fe:62:03:51:14:48:d7:32:
33:d0:4c:06:b4:92:dc:5d:1a:c4:47:c2:79:21:4e:04:9c:79:
9d:9f:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:22 2025 by rpki-client