Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: iFJ1RAHF4UjF1PqTdikuNZiFl3NxBPMaOpvguKeKvBw=
Subject key identifier: 13:7F:FA:9F:85:BD:25:85:57:DA:11:C5:7E:14:D2:44:A2:F6:F0:17
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 0199FC5894D419358EED8E6E5E004C7D131D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0B9B
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: 9tIv4KX7yU6VQAs4M1GliIHXQCnPL6Qoz8SUQoJCyiI=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:94:d4:19:35:8e:ed:8e:6e:5e:00:4c:7d:13:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=137ffa9f85bd258557da11c57e14d244a2f6f017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:3a:8c:71:60:7a:4f:f9:7c:5e:f2:2c:35:
d5:53:27:7f:09:4d:ca:b5:cb:e0:39:17:89:8b:c2:
08:89:46:b3:55:9b:71:34:40:b3:9b:b3:eb:c8:82:
7e:32:38:f7:f3:41:c7:c8:50:d8:35:62:90:e4:36:
50:22:59:21:b9:57:e4:50:3f:ef:c3:a4:3a:1e:fe:
f1:37:53:d3:88:a7:41:b5:e0:63:64:27:10:31:ba:
ce:be:a8:16:de:62:08:7f:b5:4f:53:15:07:57:26:
ff:29:49:3c:e6:89:64:a4:0b:a6:56:e2:b5:c3:59:
36:85:4d:58:ef:d8:c9:dc:69:d6:42:7d:b3:48:35:
a3:d8:50:77:40:30:bd:80:1c:95:c8:f0:40:39:2f:
0c:98:94:5e:00:eb:ad:b5:cf:05:06:1c:f8:90:48:
7f:aa:e1:f6:f9:a2:12:48:66:cc:c3:fb:81:03:3d:
ea:49:27:b6:29:95:5c:d7:d3:4f:8d:75:7b:fc:97:
62:67:15:2f:19:ae:40:ea:1e:18:04:fb:13:60:fc:
85:aa:4e:ee:24:fa:63:92:1f:29:0b:90:96:7d:47:
46:af:33:58:50:49:fd:d0:80:c2:d1:36:01:f4:8f:
5f:7b:eb:b1:c3:ad:1e:79:1f:0c:ca:cb:fe:65:43:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:FA:9F:85:BD:25:85:57:DA:11:C5:7E:14:D2:44:A2:F6:F0:17
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:52:7b:b8:b0:77:fb:d6:31:ec:56:ca:1d:e8:87:6e:8b:03:
e4:ae:52:f6:28:5a:ad:f6:29:65:4c:4a:33:2b:71:ca:f5:ea:
d1:7b:be:2d:4f:b3:36:14:fa:13:a3:e4:a2:7a:b2:68:1c:b0:
83:0e:e9:c0:82:9b:d4:a3:bb:a7:c8:ca:20:0e:68:71:4d:e8:
e8:d7:c3:15:27:5d:ea:ad:be:d0:5d:ac:71:81:c8:9a:b5:8a:
73:3a:96:30:f4:31:e5:f3:a6:f0:cc:a9:2b:43:f7:e3:fb:ee:
31:d8:17:81:2b:70:41:c5:03:27:70:50:18:78:56:23:62:97:
d8:06:64:29:61:ab:c8:ba:a4:70:a1:5a:3c:af:95:5a:36:d8:
a9:b4:88:af:13:56:bb:0e:97:77:3a:b5:11:96:5e:28:a1:09:
31:a0:6f:ca:60:bd:4f:70:4c:c4:d2:0c:ec:88:85:fe:e3:d0:
99:7f:e6:8a:7a:2d:0e:14:9c:fb:ed:88:70:70:81:56:1f:aa:
87:c1:4a:05:a6:0e:28:c7:d7:71:cd:76:12:50:15:11:a8:d9:
dd:c3:49:0d:26:e5:7b:8d:6d:c7:3c:e4:db:d7:c3:4a:6f:7d:
73:d9:b0:03:ce:64:da:23:b5:88:4d:93:41:4a:60:d6:02:fd:
b2:6c:5f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJTUGTWO7Y5uXgBMfRMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex
ODY0ZjQwHhcNMjUxMDE5MTIwMTI3WhcNMjUxMDIwMTIwMTI3WjAzMTEwLwYDVQQD
EygxMzdmZmE5Zjg1YmQyNTg1NTdkYTExYzU3ZTE0ZDI0NGEyZjZmMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvis6jHFgek/5fF7yLDXVUyd/CU3K
tcvgOReJi8IIiUazVZtxNECzm7PryIJ+Mjj380HHyFDYNWKQ5DZQIlkhuVfkUD/v
w6Q6Hv7xN1PTiKdBteBjZCcQMbrOvqgW3mIIf7VPUxUHVyb/KUk85olkpAumVuK1
w1k2hU1Y79jJ3GnWQn2zSDWj2FB3QDC9gByVyPBAOS8MmJReAOuttc8FBhz4kEh/
quH2+aISSGbMw/uBAz3qSSe2KZVc19NPjXV7/JdiZxUvGa5A6h4YBPsTYPyFqk7u
JPpjkh8pC5CWfUdGrzNYUEn90IDC0TYB9I9fe+uxw60eeR8Mysv+ZUM7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN/+p+FvSWFV9oRxX4U0kSi9vAXMB8GA1UdIwQY
MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt
NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1
LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVJ7uLB3
+9Yx7FbKHeiHbosD5K5S9iharfYpZUxKMytxyvXq0Xu+LU+zNhT6E6PkonqyaByw
gw7pwIKb1KO7p8jKIA5ocU3o6NfDFSdd6q2+0F2scYHImrWKczqWMPQx5fOm8Myp
K0P34/vuMdgXgStwQcUDJ3BQGHhWI2KX2AZkKWGryLqkcKFaPK+VWjbYqbSIrxNW
uw6Xdzq1EZZeKKEJMaBvymC9T3BMxNIM7IiF/uPQmX/minotDhSc++2IcHCBVh+q
h8FKBaYOKMfXcc12ElAVEajZ3cNJDSble41txzzk29fDSm99c9mwA85k2iO1iE2T
QUpg1gL9smxfQg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:28 2025 by rpki-client