
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: 4VqC03YEl2nT0gVbEGoDjgInFv4+hhKC9fIm7jIahwU=
Subject key identifier: 9B:28:82:61:2C:AD:5E:D6:84:D8:1F:6A:29:AA:A1:64:26:05:07:44
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 0199FC58DF8A3E55CF0D739457B961687BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1250
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: QXYowloTxG9L1ZWpzlaqBuCUeCXZihCirN7XC0WAWmI=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:df:8a:3e:55:cf:0d:73:94:57:b9:61:68:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=9b2882612cad5ed684d81f6a29aaa16426050744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:d2:3d:96:f2:51:63:ed:79:63:a9:8f:bd:
4f:33:41:15:21:1f:b3:ba:70:c4:c9:66:26:9d:bc:
3d:2a:1f:90:41:29:dc:71:c2:e5:8a:23:eb:64:d6:
64:2e:52:07:51:f8:54:10:b4:47:2e:d9:6e:20:30:
c1:63:a0:e3:6d:5c:d3:f2:31:1a:31:37:7e:ed:53:
e8:95:ba:1f:5e:ce:3d:20:cd:75:b6:d5:d8:af:22:
ce:92:68:50:9f:2a:d8:37:ac:64:58:78:38:8e:1b:
ef:5c:1e:0b:66:4f:79:76:03:9d:e4:04:3e:c7:39:
bf:d0:cb:6c:f9:96:8d:d9:f5:f3:5f:62:5d:da:78:
9f:6d:00:db:d9:f9:18:e5:18:39:a4:65:30:dd:b9:
23:5e:82:8c:09:cd:11:82:ce:0f:97:d2:0a:89:b9:
d0:81:92:c5:af:87:38:f0:91:88:f6:15:af:c2:69:
be:14:6d:aa:3c:77:6e:27:7b:c3:dc:e0:b9:8b:03:
c0:44:6b:6e:60:eb:1b:0c:43:4c:66:ae:a5:58:54:
a3:e3:48:e9:6d:d1:7a:55:06:4b:56:09:ae:8f:9c:
b7:59:0d:b7:da:8d:a6:54:d0:be:4b:af:d9:9b:8c:
32:a1:85:97:56:a5:b0:a2:de:ac:4a:ab:14:f1:ea:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:82:61:2C:AD:5E:D6:84:D8:1F:6A:29:AA:A1:64:26:05:07:44
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e5:71:53:2f:09:8e:18:cd:9e:61:c5:8d:0a:b8:7f:5b:3a:
05:9f:bd:59:c5:f9:ed:82:b0:c9:d7:53:aa:13:46:09:fd:fb:
bb:5e:35:d0:4a:10:9a:43:67:1b:78:bc:a6:53:f1:ab:87:51:
a2:dd:b5:e5:04:9a:06:28:d2:c8:ae:f6:e2:55:44:05:29:9d:
74:2a:fc:0b:15:7b:72:ec:0e:83:a3:f6:61:f7:5f:0a:7d:64:
09:90:57:b0:51:2c:02:0d:7c:0c:ef:2f:25:eb:43:f9:8e:09:
8e:5e:db:f0:09:0a:dd:77:98:f3:f0:42:86:7d:da:cb:e8:a3:
c2:4b:c3:8f:89:ba:75:33:ed:5a:c1:80:0f:ca:d0:f8:11:89:
91:39:5b:0d:63:3f:18:7c:a0:bb:5b:a1:27:9e:40:43:b3:63:
d8:c4:28:82:1a:8b:c0:df:9b:88:ce:58:ee:43:38:78:3a:e9:
d1:5c:94:6c:f5:b3:5b:86:89:db:0a:c2:b3:29:f0:07:c4:e4:
a2:01:32:bd:6c:18:2d:90:85:a6:8f:3c:33:ee:17:90:26:8d:
da:25:c8:59:05:60:d6:f9:58:3d:49:a7:98:6d:98:d8:aa:44:
42:88:21:b0:04:14:c4:11:91:d1:6f:f8:3e:a6:f9:06:3e:71:
a0:af:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:59 2025 by rpki-client