Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: /2KjHv6Edr+SSE1khDv8Onk6NFnAkuenDDJi+fhB0+g=
Subject key identifier: 92:3A:6B:2C:A1:51:08:80:43:D5:7C:90:89:14:32:55:02:59:23:9C
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 0198D4E04ED5F8C2E55C0380F5E07FE2C00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 12E9
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: 1uupp/5uEvM4dq0llUjbAriwpEOvPrISjJj4RKQcraA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4e:d5:f8:c2:e5:5c:03:80:f5:e0:7f:e2:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=923a6b2ca151088043d57c90891432550259239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:7f:1f:33:5e:3f:3f:c6:b2:9d:94:f3:f2:
ed:78:90:64:d1:09:86:ad:9a:f6:6d:1f:c0:f7:af:
11:a1:2a:e2:01:9b:50:91:63:e6:43:9b:2a:80:cc:
cd:c4:2c:bf:65:a1:ab:55:12:8a:d1:1a:18:e9:27:
e3:9e:dc:dc:63:d9:99:88:a1:9f:8e:08:e0:4a:73:
ee:10:2d:82:06:aa:e0:67:db:ee:15:57:3b:48:d4:
a1:4a:82:b3:c6:d6:15:89:05:da:23:62:21:81:9b:
fa:43:a7:9e:74:4d:93:ea:4d:3e:4a:d5:c9:13:84:
03:fa:e9:59:22:33:3e:21:97:c7:e5:68:e0:f1:ba:
51:b1:83:b9:a1:2f:17:7a:ca:b0:27:d0:c9:8c:08:
ed:c0:d0:0c:b6:db:e4:e1:42:ae:df:fb:18:9a:e2:
61:43:de:5d:3c:74:eb:db:7b:84:aa:d5:2c:5f:09:
73:d5:1f:3d:ba:e0:fd:2d:fc:a7:8f:27:a3:aa:9e:
28:81:d1:11:73:99:3c:2a:16:f1:67:38:37:3e:16:
25:e8:72:ff:fa:64:0a:b2:8d:b2:93:2c:65:86:7c:
a1:5b:83:e8:c3:52:52:86:d5:33:f3:ac:58:30:88:
1d:6f:32:c5:a7:9c:91:55:71:bb:ff:d4:8e:46:0f:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:6B:2C:A1:51:08:80:43:D5:7C:90:89:14:32:55:02:59:23:9C
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:0a:49:e9:50:98:ca:88:c2:c1:23:02:ec:bb:73:01:37:
38:b8:f4:cd:53:e0:c9:87:fc:e8:07:42:bb:ba:e3:f8:4b:59:
b4:74:be:85:a6:28:b3:9a:1b:55:c5:11:9e:bb:11:51:16:6b:
48:07:9c:6b:58:19:b2:9c:7c:d6:cc:b0:8c:4b:8e:0a:75:55:
03:8a:0f:a8:c2:cb:f1:06:a8:f1:c2:fe:00:f3:25:72:e4:d1:
51:47:f6:30:76:2c:f5:4f:00:47:2e:05:ec:d1:62:04:f6:23:
3a:09:44:0e:64:d5:c2:d1:b9:92:43:a5:ea:31:96:d8:4e:4c:
56:d3:95:62:f1:4e:fb:09:28:63:b1:51:bc:f9:ed:c2:14:74:
2a:dd:f5:9c:eb:08:f5:64:66:5c:ae:68:74:90:9d:ec:c7:e4:
73:f7:1a:f4:b9:aa:a3:59:15:87:2e:d3:4d:57:dd:ed:96:9c:
c2:51:7a:b6:50:a2:70:40:91:18:39:84:b4:aa:1d:22:c3:d0:
45:60:67:73:18:f2:0f:c5:85:d3:e3:e9:a6:d4:6a:2d:52:39:
4d:92:59:f1:d5:18:06:3d:21:f3:fc:da:6f:c2:55:a8:8d:ad:
05:3a:38:60:0e:19:f7:fd:f1:ea:9e:48:b7:c0:d3:a0:e5:93:
34:29:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:53 2025 by rpki-client