Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: KWyCRP7CGzRmi6B43/IxERc5V+fd2ZsmZjE6I7lw5iE=
Subject key identifier: 9D:38:62:DD:55:78:F5:44:DE:B1:6F:9C:C9:1F:9E:3C:F2:CA:D5:FA
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0197B88FD3FA7299FBEED3A42F803351C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:02 +0000
Manifest this update: Sat 28 Jun 2025 22:02:02 +0000
Manifest next update: Sun 29 Jun 2025 22:02:02 +0000
Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: OGP85lvNCZ2D5hvirSmQuYFna9eLRU5i+VSUPZ8QXOI=)
2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d3:fa:72:99:fb:ee:d3:a4:2f:80:33:51:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Jun 28 22:02:02 2025 GMT
Not After : Jun 29 22:02:02 2025 GMT
Subject: CN=9d3862dd5578f544deb16f9cc91f9e3cf2cad5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:c2:d3:18:e8:91:c9:f9:a7:87:ba:9b:3b:
0d:89:5c:4e:8c:05:a6:c6:5a:d3:42:fd:80:48:e3:
85:c0:82:db:ff:f9:54:06:e1:0a:6a:f7:a6:1f:ff:
f0:db:95:85:56:4d:41:dd:75:10:14:0c:5c:23:42:
19:32:aa:84:d1:c1:3c:3f:4b:cf:c4:e9:d7:24:d2:
9a:e5:99:f1:cc:3a:04:99:c6:25:9f:19:4e:b6:13:
a1:10:31:bb:b8:7c:bc:0d:db:08:b8:b6:90:33:57:
85:e9:01:87:d5:c2:4d:2d:3a:91:0e:b5:20:6b:6b:
c7:3b:7b:16:86:a8:85:b9:88:12:47:24:69:bf:75:
77:3d:49:08:ab:43:90:67:c5:33:e4:9c:a7:d3:65:
00:c6:ba:06:29:5f:5e:bb:c3:54:05:61:62:9a:0f:
2e:79:4e:37:d0:7f:98:a5:10:a4:f0:d8:73:11:18:
1a:16:17:f8:cf:b7:6b:71:87:f4:5e:be:e7:dd:84:
9f:d7:3c:81:a0:fb:b8:51:68:38:78:ce:d4:a1:4b:
d4:44:6d:ac:d8:78:24:05:d0:e1:1e:a2:a1:68:9d:
7c:f4:59:6e:9f:de:a6:da:d1:9f:f1:8b:01:0b:c0:
4d:0f:de:67:10:e6:84:f0:b5:0d:28:08:94:24:cf:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:38:62:DD:55:78:F5:44:DE:B1:6F:9C:C9:1F:9E:3C:F2:CA:D5:FA
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b2:21:36:ee:14:39:e1:f9:19:e8:15:02:2b:5d:e5:7f:ab:
bc:b1:56:d4:a2:e6:f9:52:9b:fd:22:34:03:ae:08:3e:02:b4:
a3:ec:6e:02:c2:09:dc:42:e6:a9:3e:a8:bb:64:c9:2a:93:4b:
5f:77:f9:97:c7:33:6c:86:17:2e:4e:46:50:bc:2f:0a:9f:69:
57:7c:be:90:02:5d:86:f5:85:cf:e4:81:a4:e0:05:74:d4:90:
4c:86:9e:e7:12:91:f9:d8:26:22:3b:81:e4:6c:48:f9:c5:4c:
ac:19:a5:04:20:b8:25:98:0e:db:90:52:f2:28:79:83:f2:85:
ec:9f:7c:b2:d9:99:bd:d0:1d:51:5d:c2:f7:57:49:82:e7:8c:
00:1b:89:0b:04:70:80:ac:3c:83:28:77:5f:1c:d6:1f:1a:50:
ec:9a:a6:64:8c:e2:76:fd:0d:d5:5e:13:f0:0f:01:d3:78:8d:
0e:d4:4d:2e:ab:1f:87:fd:ab:9a:ba:18:88:5b:d4:de:a2:e6:
cf:00:e8:86:ae:b8:0b:fa:b5:ad:67:a5:ef:4d:31:ac:4c:a6:
67:e9:41:8e:00:e6:5a:51:14:c9:66:5a:dd:7e:6a:b0:f9:fa:
99:91:f2:f2:82:45:98:6f:a1:c0:88:02:1b:7c:1a:ea:cf:8e:
c8:61:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:44 2025 by rpki-client