Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File: ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier: nGZG9aWcLiH3C68rAb/yxsW6y3UQlI2frbCH3Pple5U=
Subject key identifier: D9:C8:C2:73:A3:11:7C:FC:25:E0:E5:E2:33:5B:F2:BB:29:E8:C1:8B
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 0198D660EC336D8B9A7DD4D3B405D7A1CD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number: 1290
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: gh/H0T0H352fOwtFi2VMo8DZSZ7hc2V8SNoHiNUqNMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ec:33:6d:8b:9a:7d:d4:d3:b4:05:d7:a1:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=d9c8c273a3117cfc25e0e5e2335bf2bb29e8c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:04:ab:c3:2e:f0:00:c8:1d:f9:61:bc:41:
07:3f:44:b0:b1:e3:77:c2:b5:df:32:55:f3:c1:ec:
66:40:78:0b:d8:dd:10:01:44:c2:21:80:cb:9b:bd:
9f:8f:40:17:41:11:ce:f4:22:9d:dd:ef:00:ba:09:
48:0d:d3:10:8e:fb:2e:f1:dc:7f:f8:57:82:8d:3f:
ea:ce:d9:e9:58:8e:3d:32:f3:2e:c7:4f:86:b4:76:
80:1b:dd:0c:79:18:02:c4:22:8c:a7:0b:c5:2a:14:
d8:1c:a3:3e:2a:f0:a8:8e:64:c2:d2:b9:2a:5a:a0:
59:65:99:3f:1a:b9:eb:bc:05:3f:1c:ee:01:07:b1:
0e:6d:27:bc:1b:ab:38:ae:31:12:92:bf:1a:ea:40:
d3:46:d3:7e:df:53:ce:27:4b:e9:b1:66:2b:9e:64:
dc:7d:38:22:3f:cc:91:82:72:29:32:1f:93:23:8b:
6d:d4:66:ac:07:3b:31:82:61:c8:65:7e:86:e0:59:
a6:0f:e7:9b:d2:39:67:9d:e5:1a:88:39:4d:f9:38:
83:8f:15:39:a1:6b:02:7c:3d:f4:19:00:3b:c7:4d:
63:0a:17:2f:11:6f:82:9e:71:11:58:64:09:50:d6:
8a:e9:fb:d8:a2:e3:ed:51:ce:20:e5:e4:01:61:c7:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:C2:73:A3:11:7C:FC:25:E0:E5:E2:33:5B:F2:BB:29:E8:C1:8B
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b7:89:03:55:e1:9d:4d:72:8d:06:2a:92:70:22:cb:89:46:
fd:6b:3c:b4:7e:10:60:ff:39:df:8f:a7:85:9a:83:2f:01:02:
b3:27:e2:ad:1a:20:ca:99:0a:a9:da:da:2f:b9:bc:89:42:9c:
aa:82:2a:1c:82:bc:ed:33:ea:17:c5:07:8d:09:b6:1d:ae:58:
f0:fd:19:44:1f:26:2b:c4:61:81:ca:33:4c:f4:1b:0d:98:87:
5d:6d:e9:62:ab:3e:9d:9e:f1:e5:d8:f9:60:f1:fc:a6:8a:ef:
b2:2d:5b:90:22:3a:74:c7:20:ae:75:c2:75:f7:ef:73:8a:2f:
2c:c2:95:29:56:0a:cf:ef:0c:2b:cf:ac:ff:5c:85:9d:09:3c:
c0:42:e8:f6:69:64:dc:df:98:3f:70:59:de:2e:73:c7:4b:ca:
60:76:bd:11:ec:62:d4:38:9a:6c:d9:2d:81:d8:ec:cd:87:f1:
8c:9e:9a:df:d4:52:83:60:d1:eb:cd:c1:7d:d7:1d:ce:46:eb:
e1:49:1d:73:eb:42:a6:b8:d6:91:20:c2:30:15:9b:57:a3:97:
fc:1a:97:fd:e9:66:17:e6:d0:78:7f:fb:cb:c3:3f:5a:94:ec:
d1:3f:9a:09:4f:88:3a:4f:1c:d2:41:47:bd:30:48:2e:74:32:
59:d5:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:32 2025 by rpki-client