Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: kpPfPJVtalVww546/sFDK4S7syur+hB+9I9BhPqS6u0=
Subject key identifier: A9:F5:7B:A2:6F:AE:77:E9:75:61:A0:22:05:7A:1F:7E:29:59:C4:BF
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 0198744FA8CC38014B497928823D56F8BA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1185
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: zNbV8eNFXxIKTx6cMJYyv6mIxWHr79DzAX6oCk+OZhw=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a8:cc:38:01:4b:49:79:28:82:3d:56:f8:ba:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=a9f57ba26fae77e97561a022057a1f7e2959c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:96:e6:cb:52:99:1c:db:08:b1:f1:a5:d9:
bc:8d:21:fb:b0:65:44:86:9c:7e:f8:15:ed:8f:ed:
2f:66:e1:ce:ed:6e:a8:ef:8f:90:e3:00:41:35:07:
13:59:e3:dc:df:1c:4a:cd:fb:e3:38:6c:67:8a:5d:
36:9d:1c:3e:a7:1e:af:c3:e8:f8:5e:31:4c:b9:2a:
36:36:b4:c9:17:2d:f1:44:ed:22:f5:12:ee:d5:21:
42:a8:07:39:d3:c5:65:44:6b:52:6e:3d:ff:18:9a:
5f:eb:12:23:69:f1:35:90:04:89:ee:e0:d8:1e:1e:
aa:60:15:84:1f:27:ee:92:19:d5:ff:11:b7:a0:47:
ca:2b:21:67:aa:30:cd:41:12:e8:e4:8e:81:a3:3a:
61:f3:67:b5:4f:50:8a:1e:c0:92:4f:bd:41:4f:f9:
47:72:78:27:f8:e0:11:41:a2:a0:6c:1f:58:11:0e:
9f:87:a6:6b:d2:3b:0e:a3:33:c2:78:62:26:59:5f:
20:52:be:49:20:0b:3c:2e:32:a6:99:e8:9f:26:b7:
2b:be:45:cc:5a:d3:af:f9:04:d3:4f:6d:f9:05:aa:
7c:ad:2b:5a:58:f2:f2:7c:6c:41:3f:97:e2:7c:3a:
9d:52:6f:a7:2a:c2:61:6e:76:f2:94:d7:bb:62:dd:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:7B:A2:6F:AE:77:E9:75:61:A0:22:05:7A:1F:7E:29:59:C4:BF
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:2a:23:e7:48:5e:2b:15:e2:19:8c:fa:f3:05:eb:4e:41:
ec:7b:54:8c:d5:52:53:e5:55:90:c8:cf:9d:72:6a:98:09:0b:
c5:ea:c2:a6:d7:22:35:2f:bf:27:5a:bb:01:63:78:92:61:f9:
7c:5c:9b:6e:88:66:ca:f7:6a:b7:dd:7a:78:9e:0c:77:c8:4e:
ea:8c:e1:12:94:c5:9c:00:b0:1f:4d:ce:76:a1:36:06:e2:e0:
38:9a:3d:07:80:16:a9:8a:1f:5b:da:3f:d2:44:7a:88:81:75:
7d:74:0e:a5:03:df:b0:15:90:b2:ba:e2:54:ca:42:12:fe:b4:
5e:da:ea:5f:e4:d2:3e:ba:4c:f0:ad:c2:77:eb:68:29:33:5f:
ea:26:42:41:80:b6:47:04:98:43:c7:6f:43:71:a9:3f:79:aa:
02:9e:44:ac:c2:f1:c5:65:52:bc:6c:7d:5c:92:ef:fa:01:22:
c0:fa:18:73:a0:2b:80:3d:1e:17:fb:b9:ea:2b:18:a9:a1:bd:
61:1c:41:4f:8b:e9:84:ff:c3:02:98:86:e0:4c:6f:32:21:a6:
7f:40:02:72:f4:21:a6:0b:36:55:1d:a1:d9:bf:1b:b9:16:20:
33:23:b5:a7:51:46:f0:e9:29:ed:74:ec:4b:fe:76:06:06:9a:
48:7c:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:02 2025 by rpki-client