Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: aLvtAusCmvweYrzR/ram5j62x05oksvFOo2ufBQ6xVU=
Subject key identifier: 58:09:56:B4:11:62:F0:FA:0A:59:2D:AC:F8:22:41:5B:F8:5E:20:09
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 0196C984953FE21EF0132FF3BDEB3D0DC978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 09F3
Signing time: Tue 13 May 2025 12:00:31 +0000
Manifest this update: Tue 13 May 2025 12:00:31 +0000
Manifest next update: Wed 14 May 2025 12:00:31 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: illPaXxpJlOMZ3NTjXPLgkWfSUJgvvg7qL2L/L9/8vY=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:95:3f:e2:1e:f0:13:2f:f3:bd:eb:3d:0d:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: May 13 12:00:31 2025 GMT
Not After : May 14 12:00:31 2025 GMT
Subject: CN=580956b41162f0fa0a592dacf822415bf85e2009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:94:e2:dc:08:9c:b9:38:d6:0e:62:25:5b:
5c:dc:02:13:d1:63:7a:d2:0b:70:7b:0a:62:3d:c9:
c8:4c:8a:db:42:fb:95:6e:b0:2a:a9:e6:9e:65:65:
9b:9a:41:0c:20:7c:e3:19:63:96:25:59:d3:2d:c2:
a6:ce:63:9b:02:2d:7f:86:f3:e0:a9:22:73:21:e0:
bb:07:45:f1:52:55:bb:d2:2d:85:50:ad:37:75:6f:
de:a5:cb:1f:6c:24:08:e3:9a:98:b4:38:80:4a:f2:
dd:22:98:c3:d1:42:d8:6d:b8:9c:44:52:53:74:f5:
87:5e:a7:e1:b1:6e:7f:73:7d:c6:9c:ed:87:4f:fd:
20:c6:7e:56:9b:ed:16:e3:4d:17:2b:01:9c:c6:b2:
01:65:0f:c6:f4:c8:58:85:24:6d:42:e6:3a:45:30:
cf:b0:e6:76:f8:df:fe:71:08:48:f0:87:3d:e3:f9:
43:72:7f:77:df:a9:e2:8f:2b:d5:25:35:c0:87:18:
d0:32:52:e7:e1:e3:68:f5:16:5d:e2:f7:a3:87:ca:
63:4d:30:b5:8a:ac:9a:fa:93:ef:27:a1:11:df:5b:
1e:04:93:df:e7:d7:78:20:a4:6c:a4:7c:51:3b:5a:
bf:89:1f:3b:b9:91:ad:09:ee:80:b8:5e:92:e0:18:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:56:B4:11:62:F0:FA:0A:59:2D:AC:F8:22:41:5B:F8:5E:20:09
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:cb:53:2b:aa:cf:f4:cc:8f:ba:bc:1f:a1:e3:c5:46:de:
5a:44:b6:0c:6b:64:b7:92:d8:61:f5:07:57:c5:ab:3e:8c:08:
67:fd:f1:e1:c6:fe:92:93:f8:93:b8:a9:32:2f:79:3e:e7:ac:
25:4c:27:47:18:43:3b:fc:d7:89:db:0c:bf:4e:cc:ae:b7:7d:
3b:b8:73:89:f7:21:a3:c6:8e:28:6c:eb:87:e0:b6:94:f2:80:
52:c3:4b:04:25:38:9c:14:cf:a6:ce:e2:33:39:81:02:2f:00:
08:6d:e2:74:7e:06:b8:51:d3:1c:43:b0:7c:14:15:f4:d6:2e:
25:51:7e:34:0b:6e:79:04:37:9f:e8:bf:6a:00:3c:fa:3b:43:
c1:2b:1f:ab:1a:df:1e:1a:78:19:06:db:5d:f9:79:98:1a:32:
08:a4:bd:59:d0:89:c9:d0:40:50:f1:e0:67:96:aa:e2:b2:62:
c0:95:48:30:6f:41:a9:8c:88:ec:96:c5:1c:c7:a0:2a:b3:2d:
19:8a:1d:d6:f8:ee:5e:20:94:db:ff:f6:43:67:0d:8e:c5:6e:
92:46:70:1a:25:13:1d:c2:86:a0:5f:af:a0:38:be:64:63:1f:
10:9c:f1:17:8a:b2:a8:f7:b4:88:2f:df:6f:d8:7e:7f:1e:b7:
0d:cf:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:44:58 2025 by rpki-client