Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: UXrHmCh948/eiAvfSdUHq2yMSpJa0TN4LnjuaftegXQ=
Subject key identifier: C8:47:C2:52:B8:7B:B5:5B:41:79:BE:A2:1C:98:26:1C:38:BE:B1:22
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 0197C8DE5FB4CA5BED653FED02DEEE5A1CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 02:01:45 +0000
Manifest this update: Wed 02 Jul 2025 02:01:45 +0000
Manifest next update: Thu 03 Jul 2025 02:01:45 +0000
Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: 7PLiUgvH2zcE06IwyLpWKKT5043nWjTmrXS66EJet+Q=)
3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:5f:b4:ca:5b:ed:65:3f:ed:02:de:ee:5a:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jul 2 02:01:45 2025 GMT
Not After : Jul 3 02:01:45 2025 GMT
Subject: CN=c847c252b87bb55b4179bea21c98261c38beb122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:7b:fd:8a:c4:fd:8c:25:0b:25:18:a6:e2:
44:48:90:5d:a3:17:33:db:c2:d3:8e:a5:b8:89:85:
c1:35:f9:1d:da:24:90:af:b4:f3:cc:0a:66:13:2b:
1d:c8:b1:dd:cc:b1:f3:be:f0:9f:b6:70:29:ec:43:
86:64:da:a7:79:05:8b:64:e9:cc:5a:60:ea:03:49:
a6:dc:53:38:97:47:b0:da:26:38:6d:7b:34:a0:02:
c7:b4:88:a8:c1:ce:9f:d9:d7:0a:0e:68:e5:eb:69:
5e:c3:3a:c3:d9:7b:e1:9a:fa:bf:d6:1c:c4:cd:bf:
d1:95:85:70:d6:98:93:e1:83:e8:ba:02:d5:6b:08:
9b:44:6d:ab:20:c5:99:be:61:4f:4d:82:d4:3b:6a:
27:0c:83:75:8f:92:e4:51:cd:1b:5e:ec:55:a2:58:
91:83:08:02:bc:3e:73:51:c5:44:a3:0f:2c:cb:62:
6c:cc:86:e7:e5:d6:5d:61:f7:4b:c0:8c:b6:ae:69:
ba:5f:01:b6:6f:d6:4c:f6:7b:52:5d:f1:87:80:ee:
fd:c2:a0:64:f6:45:78:17:37:2d:1e:22:0d:0a:73:
0f:2b:5c:8a:bb:9a:5f:8a:f4:6d:0e:e4:11:35:e9:
e9:5a:ff:b1:f1:15:f1:98:da:4b:32:60:f8:43:85:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:C2:52:B8:7B:B5:5B:41:79:BE:A2:1C:98:26:1C:38:BE:B1:22
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5a:7f:29:3e:29:4e:27:57:fb:e5:18:43:50:3f:88:f6:54:
a7:e7:39:0a:10:7f:52:1d:43:eb:b3:68:88:c5:9e:ba:2d:3d:
78:cc:2c:13:92:91:18:08:55:19:ca:ef:14:d5:ba:e5:19:e9:
49:7d:fe:12:2f:8e:e0:f3:fb:79:cf:cc:e5:a7:55:67:86:ec:
7f:0e:c2:c3:61:0d:61:72:1c:0b:2a:e8:c4:be:de:11:85:09:
4b:78:4c:59:45:09:32:16:1c:cb:d8:53:49:e5:73:fa:ef:10:
9f:e8:f6:46:19:0d:b3:ba:72:33:c0:32:5b:1e:1b:8c:77:9b:
a5:be:71:4b:1e:58:e5:b4:ed:86:ab:82:4f:f5:63:3c:d4:32:
f3:16:93:b3:df:b4:d5:83:56:36:30:1b:f6:51:4c:9b:23:45:
63:c4:78:31:99:95:85:2a:6c:b0:0e:43:75:27:ab:6d:45:c2:
96:37:5d:07:86:ce:7c:59:42:a3:49:0a:5d:a9:7c:4a:16:0b:
3b:c8:6f:92:b3:56:63:8a:3f:7d:0a:a9:64:63:be:57:fd:8f:
79:42:f5:61:74:f5:7c:7c:41:05:e7:54:cc:20:04:5c:ab:2a:
1d:72:8f:11:1d:15:f4:08:ef:d3:f2:ea:88:6b:28:90:14:da:
83:7e:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:10:02 2025 by rpki-client