Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: mdF8hcYz7EI1yt/u6tventW9jXjEqTXTRwui7ldwIwc=
Subject key identifier: 66:B8:3C:DE:39:E5:66:61:0B:20:1F:99:F8:D8:62:1F:43:2D:5F:D3
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0199FCFD4571A07053B38465E572D8A6A15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 05C4
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: IMtbqrEsGIRM8RbKBdr0HV5kHK0OuHsc8OsbwNtdi4o=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:45:71:a0:70:53:b3:84:65:e5:72:d8:a6:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=66b83cde39e566610b201f99f8d8621f432d5fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:79:d3:30:e2:f0:54:8b:e8:3f:ba:8a:e4:
d9:8c:7f:a9:24:b4:21:85:98:0f:83:32:75:db:01:
a5:85:e7:2c:29:83:a5:26:10:a8:03:c4:58:28:bf:
f8:bb:2a:23:f4:bc:51:40:c7:34:51:e2:bd:b3:a6:
d8:6a:93:e9:4b:ab:a0:9e:c3:ad:0c:26:d2:79:1a:
5c:2f:ee:22:e3:f6:62:f7:46:a0:44:bc:2d:1b:c7:
0b:4d:0b:a8:1e:c2:98:8a:c1:aa:19:fd:96:e5:cf:
6b:3b:5f:aa:32:dd:a4:97:38:e8:af:30:b3:8e:63:
6a:51:c6:86:6b:0d:06:06:a6:86:26:49:dd:ec:ab:
b9:cd:f5:f5:bc:b0:34:a1:26:29:8d:c0:eb:d5:d3:
45:2b:2d:17:3a:1d:19:55:26:d6:92:e1:67:2d:42:
aa:77:01:c1:35:e0:e6:c4:1a:04:be:77:cd:81:27:
fa:6d:6d:46:f9:26:be:06:d9:83:d9:2c:96:bf:6e:
a2:f7:3f:30:bf:08:f5:5b:4d:29:7a:d2:5c:2e:ad:
6e:83:83:e1:36:72:f8:65:d0:ea:72:ee:40:66:eb:
7f:f4:a0:13:83:fc:40:44:33:b9:e0:e8:9b:db:9e:
82:59:40:ab:74:33:ab:64:d1:0f:50:e5:dd:e3:aa:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:3C:DE:39:E5:66:61:0B:20:1F:99:F8:D8:62:1F:43:2D:5F:D3
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:99:15:e8:65:8f:45:ef:57:11:81:4f:7a:cc:5e:2e:9c:
42:ff:b0:63:35:bd:d3:1c:25:e6:3e:0e:27:7f:52:90:c3:13:
48:01:6b:97:b0:2d:bd:dd:01:46:80:3a:95:a6:9e:ec:22:a7:
d7:67:91:b4:bc:3a:96:09:e6:0e:0d:40:ae:1c:ff:c3:29:b1:
84:0c:85:e4:1c:e5:a6:09:83:5e:85:29:95:aa:e0:7c:f5:55:
48:86:a4:d3:51:03:ca:e0:22:01:38:88:79:17:77:86:13:57:
ec:c6:ff:0c:fe:72:00:da:e4:d4:39:4a:ad:7b:7f:bd:32:f2:
c9:29:ac:69:66:85:15:1f:99:34:9b:0b:ce:04:fa:bb:22:90:
43:19:d9:73:fe:13:d3:dc:3d:93:82:9c:76:5e:dd:3b:51:17:
d9:dd:44:a9:b8:d3:f2:6a:48:a8:49:21:52:d3:cd:14:bf:0c:
9b:c7:8e:1d:6a:2f:d3:0e:af:33:6f:39:d2:00:36:d3:41:3f:
f7:1a:14:40:e5:cc:14:4a:37:5e:6a:a2:fe:4d:78:8f:2d:32:
bf:4e:67:29:6e:a6:89:2f:ce:53:d0:7f:07:97:6d:a6:d8:37:
3d:d5:f9:ac:0f:89:2c:dc:73:cb:3a:be:57:29:47:9c:9f:4e:
cd:90:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:54 2025 by rpki-client