Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: jyLatK3Ti8zbfqhyE6HG0mGfEcpVlsBjb7++N401c0o=
Subject key identifier: BE:05:E8:8F:12:88:63:D7:7D:90:B9:87:89:6B:9C:D3:DD:14:AA:0B
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 01987450B9C7A686A31EF91140E5BC78D945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 12B7
Signing time: Mon 04 Aug 2025 09:01:44 +0000
Manifest this update: Mon 04 Aug 2025 09:01:44 +0000
Manifest next update: Tue 05 Aug 2025 09:01:44 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: fOVveEps4bfQzHvWl3k8lTFILQLJpgOjQM1gukKoBwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b9:c7:a6:86:a3:1e:f9:11:40:e5:bc:78:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Aug 4 09:01:44 2025 GMT
Not After : Aug 5 09:01:44 2025 GMT
Subject: CN=be05e88f128863d77d90b987896b9cd3dd14aa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:8d:79:78:71:c6:ea:bc:c9:c7:86:7c:95:
08:d9:4d:eb:15:4b:fe:29:13:fd:9d:f5:02:74:b3:
a9:af:8d:f2:aa:f6:3d:08:e0:d9:91:d6:19:39:02:
c1:79:c8:e9:6e:22:cb:4f:4b:ed:19:69:ea:05:bc:
f8:5a:f9:00:a6:b5:c1:22:d2:b9:d7:e1:d1:93:2a:
a1:c1:5a:48:43:d6:32:9a:cc:49:ed:fd:83:65:02:
d3:8d:db:5d:5b:ae:9d:77:fb:50:a5:6a:66:2f:81:
7f:7f:83:3b:f4:39:1b:a3:3d:db:c1:cd:ce:65:2c:
c2:c6:97:76:c6:4c:8a:d1:7e:da:b7:fb:5b:4b:5e:
3c:00:72:73:e7:8f:17:9f:9e:38:77:57:2b:5f:dc:
2b:81:1f:9e:53:ec:cf:2d:cd:ae:b7:09:f4:b8:18:
32:55:1d:26:83:ec:2b:fc:b3:f0:bf:72:44:a2:a4:
5a:ed:ed:dd:15:94:b9:ce:3d:e8:3f:a8:68:b1:10:
5f:d7:7f:09:1f:e2:b6:6d:fb:35:5c:75:6b:8f:87:
65:9f:9e:c0:a0:0e:95:17:09:7f:63:7c:82:0b:a4:
de:6d:dc:e0:77:50:61:cb:c9:3c:ff:90:b2:ae:dc:
88:6a:e8:1e:39:96:63:56:f1:10:3f:c7:e3:03:50:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:E8:8F:12:88:63:D7:7D:90:B9:87:89:6B:9C:D3:DD:14:AA:0B
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:71:4c:7c:8c:49:be:bd:1e:49:cd:94:29:a2:b7:58:43:ac:
84:1c:83:b1:3c:a2:9a:5e:ec:ef:9b:95:f6:e6:13:54:73:c4:
8e:b3:a2:8d:16:48:ec:4a:a5:ff:f1:2b:37:b6:1e:02:98:5b:
4f:f4:0d:01:6b:77:30:ae:55:a4:fc:00:98:67:55:8c:67:d7:
f8:a7:19:bb:68:5f:08:71:4f:c4:6d:d4:11:7f:b3:f0:69:21:
d0:57:e5:d2:ee:4c:b0:87:cc:9e:ea:11:d2:e6:83:b2:0e:e4:
f6:8b:7c:f7:13:01:a6:8b:c8:66:04:f0:d0:2e:fb:c4:c3:21:
f2:85:04:84:ab:55:33:6d:23:9d:09:18:8b:10:26:bc:d7:e8:
1e:c1:c6:de:54:5d:74:88:0d:9e:c8:d4:e0:54:4a:eb:d1:de:
9b:09:82:4c:60:00:e2:ac:22:c4:fb:8a:d1:09:90:5e:0b:2e:
17:cd:71:3a:b5:5a:c0:e6:e8:84:13:2e:1f:3c:83:b0:ba:26:
6c:82:d8:d6:59:9e:c7:c5:fd:8a:d8:ca:fe:9e:bb:f0:8d:8f:
42:3f:0c:60:51:02:44:b7:27:b7:27:14:3e:a4:62:58:5f:79:
ea:a5:73:06:6b:ec:a7:5f:30:98:ad:9e:7c:cf:72:c6:c1:ff:
a1:80:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:40 2025 by rpki-client