Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: 3oIHI7kCcHme52EWdp4DqTSdvGOFIGnlyc3NdpBVwsA=
Subject key identifier: 21:B7:8D:84:65:F4:88:9A:2E:07:23:12:F6:05:EE:AC:C0:E4:37:11
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 0198D5BBA9542390782ADB20FA7861963CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0CF0
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: b6AHrsdHRgv4xuHuhSW2LXH/gHCH76dsKLmnWeoryy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:54:23:90:78:2a:db:20:fa:78:61:96:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=21b78d8465f4889a2e072312f605eeacc0e43711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:04:c5:07:b2:c4:b2:4d:c5:02:37:88:d9:
da:73:c6:a3:26:0e:3b:ee:3c:99:57:ed:c7:09:3e:
72:4f:99:9d:7d:63:a1:d2:3a:6b:12:b8:d8:b6:63:
79:be:5d:58:42:d8:78:23:79:e0:17:aa:4b:cb:ba:
12:8f:bb:5f:c8:47:3f:31:db:53:2c:71:2a:a7:dc:
f9:c2:6c:32:93:8f:66:80:66:c6:89:77:a2:93:ba:
5a:8c:8d:e6:b9:de:8c:bd:1e:b7:f2:bb:24:7d:df:
01:b0:3f:70:d6:46:cc:fa:6a:29:18:d9:d4:c5:78:
c0:b8:57:c3:d9:96:a2:e1:e8:c4:ac:cc:d9:e4:c1:
36:b9:73:dc:2e:69:44:5f:2c:8e:54:8b:f9:d2:c3:
18:23:e8:80:b0:db:15:e0:40:9f:8b:9f:fe:c7:ca:
c0:86:13:5d:56:fd:c6:be:d1:82:5c:db:36:fa:94:
d7:17:e3:64:54:24:37:d0:eb:07:0a:eb:ef:76:c1:
a4:6f:67:54:96:06:9c:2e:dd:03:29:c6:5c:c6:f0:
62:bd:e7:7d:eb:26:dc:90:ca:82:88:73:fe:1e:b1:
00:08:77:23:eb:53:79:87:42:c7:55:a7:4f:f4:86:
71:d9:63:e7:1d:63:78:7d:bb:78:0e:1a:a8:de:49:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:8D:84:65:F4:88:9A:2E:07:23:12:F6:05:EE:AC:C0:E4:37:11
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:93:5d:64:7e:7d:59:12:4e:99:aa:42:a0:80:ef:12:df:
f2:59:04:02:7d:2f:79:aa:8a:e0:13:a4:b4:cd:12:69:e0:4d:
cd:52:d4:b3:f7:6e:8e:01:9f:a0:84:b1:ba:92:cc:b1:23:50:
a5:10:7a:3d:93:08:3d:a8:fa:df:7b:d5:cc:89:97:aa:fe:4b:
38:e5:51:b6:eb:bf:14:4e:6a:21:e1:7d:55:92:c1:45:ec:83:
43:96:45:36:45:d0:ab:cf:ef:77:42:53:be:eb:9b:bf:15:11:
a0:ee:60:1c:3e:b9:e3:9f:71:1e:e7:8d:fa:9a:17:36:ce:75:
a3:1d:f6:28:9c:0a:6f:9a:d9:dd:9b:55:e4:4f:5a:99:16:5e:
9a:ba:b6:dd:80:a8:7a:71:44:0e:4f:48:00:8d:54:13:f5:94:
33:8a:6a:ac:18:7b:80:c0:27:34:0e:69:f1:a9:8f:2c:85:51:
ba:82:2c:3c:08:f8:b7:f0:e5:f2:05:79:94:6d:b4:c4:2c:12:
99:39:be:ef:e2:85:07:8a:b4:53:94:0b:fc:90:69:07:b4:d8:
db:13:c8:f3:2d:c2:e7:4c:26:29:f8:83:04:62:06:ef:6f:1b:
2f:d9:24:1f:3c:db:94:a6:d3:27:60:77:25:f4:08:9a:c2:91:
7a:cd:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:48 2025 by rpki-client