Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: K1BbuFSQEoBXwSeCQvCUgJnNlb0PKNx9bMsEys6YZgI=
Subject key identifier: 7E:82:9C:16:D5:37:29:03:23:2D:B9:40:BE:19:2F:50:EF:DF:D3:CB
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0198D583C7F727988FB6ADD063ECFA2FEAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 052B
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: qulop0DOoap3Y9E9ntW36GhWGW44sP0BAsQ84K7N2rc=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c7:f7:27:98:8f:b6:ad:d0:63:ec:fa:2f:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=7e829c16d5372903232db940be192f50efdfd3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:d7:6a:29:77:6b:8f:ea:3c:d7:00:20:df:
66:c1:c6:1c:a0:6e:25:8a:28:3f:98:d4:96:90:83:
39:74:09:25:4b:5b:f6:22:d2:c3:9c:20:5e:2b:cc:
34:94:6a:98:59:50:ed:48:dc:be:76:c0:a1:a4:39:
d0:8e:04:32:a8:cf:50:44:f9:02:f3:90:fe:f7:16:
e7:6b:d0:93:57:cd:93:55:bd:6e:a8:fa:1b:85:de:
2a:f2:0f:29:16:93:66:30:b9:ba:4d:02:e1:89:7b:
7c:75:c3:88:e5:44:0e:bd:b0:22:d8:93:07:36:2a:
9a:35:4f:85:4d:0c:7e:72:94:3f:c1:e2:ff:57:f9:
ab:6b:85:63:5c:57:94:26:c3:4b:64:0a:30:b4:53:
5f:18:dd:15:0b:30:92:22:93:dc:18:d6:a8:3d:ac:
03:fb:70:d2:04:4e:03:84:48:9a:e1:3d:69:3f:3d:
b7:61:bf:c9:fa:45:96:e7:be:85:a4:37:48:28:87:
c4:9a:0e:b6:c2:62:92:83:a3:98:e5:15:08:a9:a8:
c1:bb:2c:85:fd:0a:49:73:45:2e:00:11:df:6b:1c:
52:9f:4e:20:c7:07:5c:a3:bd:d1:10:8d:94:2f:1c:
5e:e5:ee:53:e1:5e:b1:85:29:8b:ae:c6:83:b6:73:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:9C:16:D5:37:29:03:23:2D:B9:40:BE:19:2F:50:EF:DF:D3:CB
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:56:3a:2a:e9:13:52:c0:fd:a4:68:d9:cd:b0:6f:3c:2d:
3f:f3:32:98:d9:a1:8b:97:63:62:0f:a4:70:b8:b0:a9:0a:3f:
bf:be:44:3f:15:79:ef:73:5a:84:b6:3a:84:c3:e3:b6:ae:2b:
b2:0c:69:82:99:37:a6:a6:8f:41:ee:58:b6:8e:f6:b8:a9:77:
7a:c3:99:69:6c:68:0b:84:79:c5:24:c1:6d:dd:7e:ef:49:a8:
49:f9:d1:e1:28:89:a3:d0:fd:ef:d3:c6:e4:43:02:0a:99:64:
cf:ba:1d:42:6d:ee:c5:d3:02:5f:cb:78:83:13:6d:3d:1c:55:
c0:51:e0:31:38:78:83:98:af:46:dc:04:0e:a0:44:6d:50:d3:
ea:39:f9:78:da:f5:9a:a9:87:6e:79:31:c9:a7:45:5a:49:01:
1a:c0:00:af:73:7e:8f:b2:d8:d3:08:e4:8c:5f:49:8a:e9:ee:
b9:fe:90:a5:08:85:b9:3f:5c:1f:e1:83:41:2e:e1:a0:dd:c5:
86:26:22:24:41:36:e3:71:d2:a5:43:c7:29:8a:28:b3:31:a9:
0c:b0:27:4b:9e:9c:73:56:16:c3:21:ca:d9:65:45:b2:3e:4a:
c5:55:bf:ca:b0:88:75:46:7d:26:7d:99:c4:29:38:53:b7:dc:
54:f2:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:07 2025 by rpki-client