Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: 1Dg/F9ki8dEEyEF9o3H1nxFS3ZFupkOXrlT6t1nKJoI=
Subject key identifier: 55:10:56:59:D8:BB:67:5E:F4:3F:EA:4F:14:B5:B6:32:4E:C8:2C:79
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 0199FC588D4014D2E5B7E3381643E75898A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1382
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: ukHnFQ/AJwT7ERA6A2fDr07VA11yfzeB8pcwmClp69Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8d:40:14:d2:e5:b7:e3:38:16:43:e7:58:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=55105659d8bb675ef43fea4f14b5b6324ec82c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:3e:bb:9d:4f:bd:89:a1:83:cb:8e:1e:6a:
ae:9e:59:40:3c:c3:7f:47:a2:8d:77:d9:58:d5:a6:
0f:f3:49:22:91:06:ae:48:59:41:5b:4d:1b:24:5a:
99:46:53:73:29:c2:ad:9e:fc:e2:ad:df:50:59:d7:
a0:a5:06:5e:42:61:45:f6:fb:19:50:84:ec:70:4b:
6f:ba:45:00:db:b9:72:8e:7a:ee:7c:df:49:c9:f6:
73:1c:a2:de:ca:45:45:78:0f:47:4e:e7:be:b7:40:
b1:65:30:3e:61:41:6c:c7:4b:2b:12:19:1c:f2:e3:
1f:b9:17:68:36:9b:91:4a:33:15:93:be:23:71:4c:
c2:4d:fa:67:7b:1c:78:d1:7b:2b:59:fa:ee:f4:33:
f1:14:1e:2e:15:14:1a:e9:d7:a3:c7:6e:ba:c6:63:
37:cd:d8:14:1d:b6:d0:79:51:ed:8a:81:96:59:2e:
12:73:c1:cd:c8:48:6d:ad:32:21:b7:07:92:44:23:
e4:14:eb:6d:01:6c:81:05:a8:9f:16:7f:5e:7f:84:
df:6f:28:81:dc:09:56:08:31:e1:b8:d3:8b:d1:65:
39:3d:44:14:5e:a8:04:8c:dc:2a:74:49:de:85:03:
2a:7c:a3:e0:76:17:fe:31:dd:58:0c:34:bd:11:78:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:56:59:D8:BB:67:5E:F4:3F:EA:4F:14:B5:B6:32:4E:C8:2C:79
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0b:17:d1:02:b9:4d:53:5d:1b:d2:cd:48:32:ac:87:93:5e:
79:8a:80:4c:6d:79:68:81:69:d5:6f:2c:2b:05:d9:85:54:f3:
ea:22:26:5e:b8:ba:01:c4:cc:b4:42:89:84:c9:d9:0c:22:0d:
74:21:4e:d9:6d:05:82:e3:ef:82:a6:ce:d3:04:10:73:bb:6d:
6b:06:2e:6a:94:cd:82:5a:3e:8e:04:28:f9:51:08:95:3b:c7:
83:37:a0:6c:c2:b7:b8:b8:38:cd:0d:fe:f0:cf:a4:b9:fc:8a:
bf:1c:52:72:0e:15:f8:a5:af:ec:72:2d:57:77:1a:c1:4e:7f:
33:6a:98:26:0c:58:bb:95:d7:1d:8d:33:d0:5d:20:73:2c:ed:
32:dd:23:a9:f9:44:09:50:59:11:03:05:93:36:fa:42:6b:21:
7b:49:7c:78:de:ed:83:85:d7:7b:3f:16:56:0c:09:4c:57:08:
7f:96:62:0b:37:18:c0:8e:5d:62:37:20:dd:6d:79:bd:dc:46:
87:04:2a:62:1f:3b:56:0d:a1:7c:34:a1:dc:97:ad:c5:e6:0b:
36:4f:9d:0c:e4:7e:7b:20:f3:8f:c0:9d:6b:11:de:71:f6:20:
da:6d:a6:27:d2:b5:f0:fb:8c:31:70:85:8a:b0:48:c3:e3:90:
14:a4:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:56 2025 by rpki-client