Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: bRCJM24Dr+ZtWsLVxTN19N/y85sJlqd3i+5Cjck2wx8=
Subject key identifier: 6A:9E:1D:7F:6F:7A:6F:C8:25:10:B9:A0:68:B6:DE:FD:BD:AC:0E:32
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 0197B6A0A01AFAB0CCC814AFF14B7F826341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 02AE
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 0OGwdwQpP7s2+Wl6czIrWQ3IP24dXnHLnYc79NA+IwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a0:1a:fa:b0:cc:c8:14:af:f1:4b:7f:82:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=6a9e1d7f6f7a6fc82510b9a068b6defdbdac0e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:dc:fc:8e:e6:14:56:ae:e6:14:8e:50:63:
3c:5f:08:c0:a7:6a:72:88:40:73:79:db:c4:ff:e4:
8c:8d:f4:62:31:76:f2:92:5e:e0:af:3f:f7:c3:d7:
42:ca:99:9c:c5:6d:c1:21:11:5a:84:60:de:3d:69:
da:5a:75:a0:fb:c7:7e:b3:70:59:aa:0d:16:c9:9d:
1b:30:6f:e9:38:50:3b:19:27:07:c7:90:13:fb:2e:
90:9d:07:ba:1e:65:2a:5b:13:43:46:f9:3f:93:5c:
05:17:57:42:b8:4a:84:51:f4:8f:a2:b0:12:c4:8b:
87:8e:8c:ed:55:3f:21:ac:ac:59:bb:68:90:a3:27:
d9:11:11:37:c8:ab:16:7d:3c:83:ce:b8:eb:fe:4d:
27:cd:ac:40:7d:0c:21:44:57:b7:34:e7:86:70:00:
6e:87:73:28:df:e7:c3:8f:2d:ed:d8:86:87:fb:11:
a5:91:43:de:fa:c0:6d:2f:d5:8b:1d:c9:b1:21:fa:
3f:9b:f9:68:be:af:0f:e3:c1:a0:4f:08:f1:c7:8b:
6d:94:fb:92:08:b9:a7:fe:bb:86:1d:16:8e:11:c5:
4a:18:15:09:0a:24:e2:93:36:3d:e0:90:77:b9:9b:
41:16:c9:99:95:bf:7e:b9:b4:2f:ca:42:93:de:ef:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:1D:7F:6F:7A:6F:C8:25:10:B9:A0:68:B6:DE:FD:BD:AC:0E:32
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:67:b3:93:f9:bc:44:1f:92:09:5a:77:04:2b:28:55:0b:
a6:31:b2:af:7a:77:27:16:b6:e5:a1:95:1a:e4:e0:1e:37:c0:
39:97:5e:8b:f8:c6:b2:a8:b9:d4:b0:ee:23:7c:25:81:58:7e:
ce:ea:b4:22:ea:5e:2e:db:d0:de:79:52:a8:ea:48:1f:57:da:
b6:fd:ee:3d:da:47:e6:ba:36:be:84:0c:16:51:2b:81:1a:70:
23:10:d9:73:d5:66:48:44:6f:ad:f6:ff:15:73:81:5f:2d:e9:
0b:4c:7e:8e:e3:68:05:cf:e4:38:e5:a0:a8:68:53:d5:bf:e5:
dc:79:3f:b4:31:dd:d2:ba:02:ca:af:0b:30:03:fb:b7:96:9b:
5c:5e:e3:ae:fe:84:9a:4c:32:13:6a:20:13:ed:6f:5c:b8:f0:
fb:33:4b:56:20:0a:63:06:59:90:44:c7:d0:fc:b3:a4:00:4b:
b3:9a:22:69:c8:8d:7d:25:a4:88:80:a1:34:46:74:a9:ad:d4:
77:70:16:c7:74:7e:ee:07:42:c7:97:3a:6c:17:2e:66:94:74:
76:26:00:21:d9:4d:70:0e:cd:c6:e2:6f:b8:44:3c:48:ee:05:
e7:ae:b1:ab:40:ab:d6:47:da:c0:90:9a:95:9b:e5:7a:64:64:
05:5d:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:09 2025 by rpki-client