Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: nvVxVr3PjCWgMLnfmefjOHQYwjcIl5hdw6dStBusPNQ=
Subject key identifier: E7:86:41:0B:A3:FB:42:CA:F5:56:6B:B1:3D:AE:00:3D:24:0F:53:FC
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 0199FBEB5C846D611CEB48C8416D7E947A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 03DB
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: NfSoxeJEJUfFuLttQPAGNletPLDeYh0WrxmSzZ6ygnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5c:84:6d:61:1c:eb:48:c8:41:6d:7e:94:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=e786410ba3fb42caf5566bb13dae003d240f53fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:b8:50:a9:fd:67:b3:91:e4:f0:43:ec:0d:
a1:81:50:02:d1:90:f5:6a:08:50:d4:70:b5:0a:32:
b4:27:9f:f5:ac:c5:c4:f8:6e:11:19:85:93:6f:11:
ad:c9:b0:08:d5:83:ed:6c:0e:33:8a:84:ff:04:53:
30:6a:8b:ca:43:e0:eb:8f:65:5d:22:f0:b7:e5:f3:
05:e5:31:09:24:c0:50:aa:44:19:0f:2b:98:73:aa:
ae:1c:b8:a3:4b:74:9d:34:ca:1d:cb:a9:ad:2f:73:
09:37:cd:bd:c6:a9:ae:b9:4f:b7:1c:4c:9f:2b:fe:
9b:46:95:91:1b:91:0e:98:f3:58:4a:56:43:57:12:
d1:d3:c9:70:d1:ee:47:92:79:cd:a5:ca:80:d3:85:
46:3f:ec:18:69:e3:42:b4:f0:ab:9e:dc:c1:b8:30:
cc:59:73:a9:d9:78:a1:3d:a1:67:08:89:3d:65:04:
dd:9d:32:c9:48:43:47:c7:6d:70:ed:36:60:00:88:
29:39:4e:9f:de:fc:03:b0:ea:94:ae:57:e0:0c:71:
2e:da:1f:75:0c:3a:c0:76:6b:57:d4:bc:2c:79:78:
68:86:6b:48:4a:4f:d0:7b:ad:1c:7b:ce:7e:d6:57:
45:41:a0:9d:78:f9:4b:4b:ea:3d:73:3c:ef:83:f6:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:41:0B:A3:FB:42:CA:F5:56:6B:B1:3D:AE:00:3D:24:0F:53:FC
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:13:68:25:52:7b:d9:bd:41:ee:62:d6:c1:5c:3e:ec:dc:fb:
1b:17:4a:19:c5:7d:60:48:3b:16:44:ba:64:fc:4c:b6:42:9c:
80:8e:17:24:c7:38:d3:8a:a5:1a:72:25:7f:bf:04:da:7b:77:
74:06:c8:09:36:4d:27:1b:52:fd:69:b6:25:2e:f5:11:22:bb:
63:b6:4a:de:b6:35:e6:9f:e2:9f:2b:77:28:ef:3e:af:6e:53:
41:37:6a:68:32:44:db:d7:d9:68:16:34:10:9f:ed:bd:4c:b0:
78:71:b8:e6:3f:88:c3:b0:b4:85:3a:a9:06:75:6c:80:4e:b5:
09:df:c1:87:a6:08:dc:15:ba:ea:2b:30:db:8d:30:f5:f1:6d:
7e:46:85:89:2c:cb:d8:12:4e:48:a3:c4:9c:97:88:10:76:68:
8c:b0:0e:0e:b3:9b:87:45:2d:04:02:2d:57:a2:60:c3:a3:e5:
34:b8:6b:43:d5:5a:22:51:1f:96:a2:ff:cf:39:3f:24:f2:9a:
fd:2a:60:68:80:ce:54:67:31:6f:59:5c:b6:d0:6a:f0:e6:a6:
82:e1:ee:94:f4:2a:aa:38:7d:b9:80:bb:10:fb:3f:10:fd:12:
74:d8:ce:64:37:b6:84:51:ad:fc:37:12:03:c4:65:f8:57:1f:
0f:9e:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:21 2025 by rpki-client