Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: UY0WWvc5IYaixxgYP7EXOmbIMkp5MBjBFeDe21qDPvs=
Subject key identifier: 40:AC:3B:9E:31:E2:2E:F9:1B:1C:51:53:9C:11:98:1A:FC:7C:C2:EA
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 0198D4E0D13BBA14290B474DF84CBCC5ABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0B02
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: lKia10N+jN/zlFSlcp1hPEGMkLL+/T9+idUrg6WxEqw=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d1:3b:ba:14:29:0b:47:4d:f8:4c:bc:c5:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=40ac3b9e31e22ef91b1c51539c11981afc7cc2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:94:d7:57:b6:1e:7e:51:da:f6:42:3c:5a:
c6:b0:2a:ba:89:28:56:8f:64:42:de:21:40:8d:d0:
2e:57:ca:9b:98:9a:e0:53:f8:1c:88:c7:d4:cd:c6:
44:1c:9f:2d:44:48:9b:07:b2:c1:06:da:a8:5b:33:
cb:ff:03:78:e0:93:82:b4:6d:56:9f:2a:a2:8c:48:
32:26:9b:0d:3e:77:1e:7b:48:d3:c7:33:cf:20:3b:
d1:ee:4d:11:59:19:be:f4:61:ce:fa:ec:56:24:f4:
2e:8c:08:7a:01:dc:0b:a3:43:20:2b:3c:6d:19:00:
6d:6a:76:15:dc:cd:00:78:08:d0:39:b9:78:d4:0a:
e0:38:a3:ba:0c:57:f2:ba:e2:7f:00:03:34:56:9e:
fa:7f:41:0c:89:6b:90:08:ed:ec:fa:07:98:4b:ee:
ac:de:8b:61:9e:d7:ec:d5:6e:2c:6d:1c:de:39:b8:
ce:68:e5:92:33:e9:87:fd:8a:c2:c6:ec:0c:8c:85:
0a:ed:71:27:14:5b:04:35:bf:12:54:20:99:d8:80:
a5:d0:3e:af:ff:08:8e:d3:18:5b:b0:5e:fc:2f:3b:
fa:58:a1:64:57:21:44:3c:33:d7:8d:12:9a:44:51:
69:c2:cd:94:0b:e1:88:20:2b:cc:dd:47:75:6f:83:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:3B:9E:31:E2:2E:F9:1B:1C:51:53:9C:11:98:1A:FC:7C:C2:EA
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ba:a9:9a:eb:43:90:27:7e:11:83:4a:91:44:fd:5e:a2:6b:
63:5d:59:9d:9e:18:f3:da:52:6c:24:6d:6e:91:7b:16:29:b9:
5f:5e:53:2d:44:82:5d:73:d6:a9:8a:ce:14:ad:ad:53:e1:15:
7e:32:c3:a2:6f:5f:87:cb:26:80:10:28:fd:3f:ce:00:89:b1:
c7:25:6d:8f:28:3a:aa:8b:9c:db:eb:d4:4f:11:a5:91:80:40:
6c:5c:b3:59:35:8b:8a:a2:16:2a:3f:0a:43:77:0f:05:56:25:
03:4d:a1:02:31:5c:f0:5c:ac:2b:bf:d7:e2:65:c7:63:1c:0d:
dd:5f:a2:69:e5:e3:4f:05:a0:cc:2a:f6:dc:0c:86:e3:8b:d2:
cc:da:9d:1e:c1:ab:e5:3a:73:ea:af:50:1f:b3:b5:e9:1f:1a:
f8:88:60:15:eb:bf:b9:36:83:72:e3:17:7a:3b:3b:e4:c3:ca:
91:75:46:3d:57:31:af:b1:9f:42:c6:78:ea:35:55:42:95:50:
b2:c8:76:4e:dd:aa:cc:a7:cb:de:2c:a6:d7:29:5c:f4:65:49:
c8:29:83:e7:90:64:e5:90:97:ff:1a:9e:8e:b4:18:c2:89:73:
20:3e:09:4b:9e:09:dd:e2:29:c7:be:d8:0d:79:39:82:69:69:
a3:b0:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:37 2025 by rpki-client