Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: D5E66Ar6So+TsUoUM7RHdJNAJRuGvRRMTTCKXg3PMvs=
Subject key identifier: 51:B4:04:A1:53:49:FD:88:93:33:B5:49:3D:AF:48:70:A1:2C:93:DB
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 0198D6CD1ACA856ADD2AEE49A77F32B5882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 11B8
Signing time: Sat 23 Aug 2025 12:00:22 +0000
Manifest this update: Sat 23 Aug 2025 12:00:22 +0000
Manifest next update: Sun 24 Aug 2025 12:00:22 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: MPaKvMcN8ik5xcoIVzkQ7i8tEIosDe2KtIrqSNaDn5I=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1a:ca:85:6a:dd:2a:ee:49:a7:7f:32:b5:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Aug 23 12:00:22 2025 GMT
Not After : Aug 24 12:00:22 2025 GMT
Subject: CN=51b404a15349fd889333b5493daf4870a12c93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:f7:58:49:a7:dc:6f:84:33:03:1f:b6:af:
d6:3f:60:ec:b8:e0:55:5a:38:a5:2d:aa:ec:5d:05:
7e:e6:d5:13:10:49:84:fd:c3:93:4d:20:85:76:a4:
64:39:3f:3d:e7:a2:ff:a9:a3:aa:b5:23:e9:65:fd:
cd:a6:63:16:b2:60:f0:aa:dd:e9:5f:f5:3e:a7:8b:
2e:dd:fd:74:50:5e:52:11:0b:bf:1f:e7:a9:9a:a9:
f1:7f:e3:17:8e:86:6b:3b:94:e9:78:57:d2:61:16:
3d:8a:85:bf:03:0f:34:90:5c:d4:7d:5b:2d:35:46:
c3:f4:f2:a6:a5:d9:95:e3:96:a6:4e:67:b6:dc:45:
95:46:05:5e:aa:f5:25:76:38:b5:c4:dd:ec:cf:64:
79:cb:3b:ad:6f:8b:a1:32:b7:4d:17:f9:f5:c6:82:
d0:5b:2b:59:bc:58:20:3d:bf:1d:5d:10:0d:4a:1e:
de:e0:f6:a2:85:85:72:da:40:4c:1a:b9:57:85:41:
04:8f:f1:11:37:b1:2a:d9:e3:04:20:72:cd:c6:7e:
ca:ae:83:a8:04:31:a1:01:ca:74:c1:49:c0:f9:3b:
98:2d:0d:0d:8a:ea:aa:79:5e:2e:54:ad:b5:93:f3:
c1:b3:fb:46:d7:4f:ae:06:c0:43:2e:81:c8:a9:ed:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:04:A1:53:49:FD:88:93:33:B5:49:3D:AF:48:70:A1:2C:93:DB
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:eb:64:85:f9:c0:cb:4c:c5:ad:73:68:c7:ac:2a:f9:fe:0b:
59:3a:7f:d2:1b:13:22:12:33:ee:2a:5e:2f:e6:9b:a5:47:e9:
03:2d:29:80:1e:68:8e:15:6d:15:af:69:87:27:a3:04:5c:24:
b2:ae:f2:8f:5a:d0:d8:15:aa:22:8e:36:ff:e2:3e:c3:de:9c:
16:7c:25:30:ce:9a:ea:43:08:51:1c:94:52:50:f8:73:60:5a:
4f:e5:b4:55:71:07:bd:e0:66:ed:bc:6e:56:12:bf:1b:7d:b5:
77:2a:aa:e0:79:54:94:7d:1a:56:62:e7:91:5b:2f:ce:8e:4f:
e1:49:d8:b3:27:11:b5:75:f7:de:ad:a1:a9:64:c2:c6:2a:ee:
35:2d:61:e3:9e:9b:23:0c:64:27:b9:c6:79:4b:8a:61:fd:ce:
4e:9e:77:4e:b4:3f:5d:fe:04:4e:64:dc:6d:d9:39:bf:8d:f1:
dd:41:ce:67:e6:39:55:a5:36:8d:f1:95:8d:bb:d9:48:f3:aa:
4b:dc:cd:57:be:3b:88:45:85:5c:bc:b0:5f:49:ff:2a:4e:68:
13:4a:d1:3c:50:84:97:b3:72:2e:47:b1:06:41:50:db:4e:fa:
51:cd:8e:76:4e:68:4d:96:fc:e9:ab:78:9d:21:f1:27:65:69:
04:05:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:43 2025 by rpki-client