Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: 6Q6aH982K8IFj0UPjoOu01+g6NA6Ks3Q1IuiKqp6feo=
Subject key identifier: 16:AF:F2:CC:C9:C1:E7:E0:31:81:09:0A:8A:91:89:31:13:E4:4F:E2
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 0198D5BC35466622ECFE843F5E3DE7399862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 0101
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: CAK19XLyWpDBKtyOh5VJFJlDLgs.roa (hash: UlLhFCJZ2QmzzZ8qbAQI384c7jYogbUbzPQIMlTHrTw=)
2: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: hztuHQ++J2ne+9vglgz3tqJ+XkJ8eScbM1OALhegPZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:46:66:22:ec:fe:84:3f:5e:3d:e7:39:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=16aff2ccc9c1e7e03181090a8a91893113e44fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:b7:6a:a9:98:2b:08:b0:71:36:0b:5e:3e:
99:0d:05:4d:6e:85:e2:8b:68:1d:04:fb:9f:0d:52:
39:c4:f7:85:b7:b4:ee:a7:81:e7:5e:a8:7f:33:44:
4e:0c:58:cc:35:8f:c7:5c:a0:18:b6:8b:a5:11:51:
e3:8f:8a:8b:de:93:16:1c:17:a6:a4:4c:7a:38:f3:
64:aa:fb:6a:9c:ee:c5:fb:93:ea:64:ee:25:04:46:
da:48:71:95:dd:8b:0a:1b:f3:68:6a:17:76:0e:7c:
8f:a8:81:70:40:bc:33:90:47:85:32:55:b1:79:68:
32:cc:e4:f5:c4:4f:81:28:dd:89:0f:77:7b:b1:92:
a4:cc:5d:c6:96:ac:91:eb:c4:65:41:a5:12:06:01:
0d:fc:82:b7:4b:9d:6e:f4:26:84:e1:f7:cb:f1:dc:
52:6c:a2:05:e8:81:53:b1:de:a7:75:e5:c7:be:ae:
44:7d:18:11:a2:af:4d:41:08:ea:d1:bc:da:ca:fc:
ac:67:79:cb:1a:8c:e3:fa:1b:c5:26:85:e7:08:1a:
c7:55:48:f3:95:b9:23:65:8f:a8:9f:94:b1:d4:80:
36:5b:80:cd:71:21:81:00:4d:66:b5:83:85:f8:aa:
8f:28:31:82:39:bf:aa:c1:ea:cc:30:f6:67:94:58:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:F2:CC:C9:C1:E7:E0:31:81:09:0A:8A:91:89:31:13:E4:4F:E2
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e5:66:7f:e3:f9:c7:b9:8c:9d:0c:ee:a9:91:6f:3a:62:49:
ee:ff:16:70:73:76:38:d2:f7:ec:37:5f:36:cd:b5:f3:74:b9:
73:8d:48:c7:8d:7d:10:1c:76:a9:0f:20:98:be:90:e2:74:0b:
b9:6e:57:5b:82:2b:c1:04:79:23:55:45:09:25:ec:40:ea:f4:
a4:57:92:a3:9c:da:76:fb:dc:97:13:4e:99:04:06:4b:2a:3a:
72:b4:e6:5d:d2:84:10:aa:23:1f:7f:cd:3a:90:b3:a2:30:5f:
26:9e:e6:7b:a4:71:9d:0d:32:c2:2e:bf:05:7d:e1:4e:6f:ea:
33:da:bf:64:77:2a:26:69:2f:00:be:71:d2:5b:f2:bd:24:d9:
08:ce:1a:96:81:06:c1:39:eb:d6:8e:63:42:97:81:dc:c8:4a:
c5:95:d2:d5:cc:f1:a3:70:c9:1f:14:6d:70:5b:06:16:b5:76:
50:1d:16:27:85:3c:35:f2:83:a7:c8:64:97:35:aa:ac:a3:9d:
1a:66:9a:db:b1:0f:31:c2:4e:05:a2:f2:bc:da:d5:e9:18:33:
13:dc:33:5b:fc:7f:22:ce:df:dc:09:49:43:20:1f:07:71:ff:
02:e2:67:ba:7d:42:66:d8:fb:69:14:b0:20:cf:99:b0:0c:33:
a5:e2:f7:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDVGZiLs/oQ/Xj3nOZhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5
MTdjYWYwHhcNMjUwODIzMDcwMjE3WhcNMjUwODI0MDcwMjE3WjAzMTEwLwYDVQQD
EygxNmFmZjJjY2M5YzFlN2UwMzE4MTA5MGE4YTkxODkzMTEzZTQ0ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hy3aqmYKwiwcTYLXj6ZDQVNboXi
i2gdBPufDVI5xPeFt7Tup4HnXqh/M0RODFjMNY/HXKAYtoulEVHjj4qL3pMWHBem
pEx6OPNkqvtqnO7F+5PqZO4lBEbaSHGV3YsKG/Noahd2DnyPqIFwQLwzkEeFMlWx
eWgyzOT1xE+BKN2JD3d7sZKkzF3GlqyR68RlQaUSBgEN/IK3S51u9CaE4ffL8dxS
bKIF6IFTsd6ndeXHvq5EfRgRoq9NQQjq0bzayvysZ3nLGozj+hvFJoXnCBrHVUjz
lbkjZY+on5Sx1IA2W4DNcSGBAE1mtYOF+KqPKDGCOb+qwerMMPZnlFgQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBav8szJwefgMYEJCoqRiTET5E/iMB8GA1UdIwQY
MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt
YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj
LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+Vmf+P5
x7mMnQzuqZFvOmJJ7v8WcHN2ONL37DdfNs2183S5c41Ix419EBx2qQ8gmL6Q4nQL
uW5XW4IrwQR5I1VFCSXsQOr0pFeSo5zadvvclxNOmQQGSyo6crTmXdKEEKojH3/N
OpCzojBfJp7me6RxnQ0ywi6/BX3hTm/qM9q/ZHcqJmkvAL5x0lvyvSTZCM4aloEG
wTnr1o5jQpeB3MhKxZXS1czxo3DJHxRtcFsGFrV2UB0WJ4U8NfKDp8hklzWqrKOd
Gmaa27EPMcJOBaLyvNrV6RgzE9wzW/x/Is7f3AlJQyAfB3H/AuJnun1CZtj7aRSw
IM+ZsAwzpeL37w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:36 2025 by rpki-client