Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: OCZj6zK7MmyzGlMKastT/6BYOHX0T1jHpEK5LJqQRMM=
Subject key identifier: EE:8F:B9:67:61:C3:02:4F:CC:C3:1D:69:58:A6:3D:70:8A:C4:9E:AD
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0199FDD9C05BEAAAC1F06A5948B952AFCC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:10 +0000
Manifest this update: Sun 19 Oct 2025 19:02:10 +0000
Manifest next update: Mon 20 Oct 2025 19:02:10 +0000
Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: oVyTWL2XfG7sZNJoodyGAh+LRTe1B7mrbVjJwkPT3w0=)
2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c0:5b:ea:aa:c1:f0:6a:59:48:b9:52:af:cc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Oct 19 19:02:10 2025 GMT
Not After : Oct 20 19:02:10 2025 GMT
Subject: CN=ee8fb96761c3024fccc31d6958a63d708ac49ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:41:00:cb:2a:8c:c1:9c:26:b1:ef:6c:e6:
72:3e:5e:3c:1b:5a:62:5f:2e:4f:e3:46:8a:6f:5b:
48:06:cb:34:92:2d:67:f7:c2:a9:d5:7c:60:64:93:
ed:83:d7:2f:f5:84:a1:30:ea:4c:1f:49:68:d3:a6:
96:aa:bc:15:c6:b2:fe:49:40:f2:0f:a1:3d:a3:fb:
69:5a:18:5f:16:db:61:53:88:08:1b:06:f2:63:10:
8b:5f:32:a6:96:8e:5b:56:e0:7e:fa:13:26:e9:ea:
01:85:65:35:e3:65:56:ef:68:b8:ec:e2:14:e7:ec:
05:69:fa:06:03:9e:c8:25:44:4b:d1:b5:9c:6c:ed:
52:59:a4:c3:87:98:83:86:96:ca:26:54:3a:63:70:
93:84:ff:be:a2:f6:84:c2:41:bf:bb:80:e4:69:9d:
36:32:78:b8:24:e9:d6:c8:35:ac:42:53:34:26:d1:
f3:f1:96:0f:33:66:a9:c2:13:5d:f8:d7:c3:0e:a2:
ba:af:28:d5:6c:56:e2:bf:94:fe:72:d7:cc:66:a2:
87:1d:b9:d2:d2:df:5d:a5:dd:10:52:09:07:56:85:
68:05:e0:68:3a:2a:e6:f5:40:b1:fc:c0:6d:95:95:
e1:99:2f:1a:11:ba:08:ad:cb:9e:e6:5b:51:9e:a0:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:B9:67:61:C3:02:4F:CC:C3:1D:69:58:A6:3D:70:8A:C4:9E:AD
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5a:20:3e:1e:08:fe:4f:e9:29:e7:a2:94:6f:ac:50:ba:24:
ab:86:e1:4d:be:6c:9f:7e:19:81:ad:e9:a5:56:cd:f8:34:32:
28:f3:81:f5:6b:ca:4c:6c:19:b8:f2:dc:30:05:9e:89:b0:9e:
bf:4d:29:2e:19:34:2b:a2:ec:73:39:ed:6c:37:c9:76:d7:a1:
60:94:b8:05:ac:21:b5:5e:c1:0b:7e:d5:d1:5b:fb:3b:34:a7:
1b:c4:19:f5:14:5f:4d:06:4f:41:9c:eb:8f:b6:b2:f3:29:9c:
05:b2:47:ed:7a:79:b5:2d:6d:f6:8e:35:42:8c:73:ff:99:99:
79:61:e9:a0:0b:c8:9a:31:67:cc:92:3f:ad:59:6a:c6:58:4d:
db:3d:f7:9d:6b:32:a6:2a:a0:bd:77:59:35:d5:76:a0:45:7d:
c6:2b:d5:d8:e1:cd:a5:8c:d3:45:45:56:66:dd:c1:75:e6:f0:
ee:8a:f4:2f:1a:6a:82:3b:4f:f7:a5:b4:f2:f6:88:fb:99:5e:
07:5b:18:08:e0:90:9e:03:82:e6:9d:38:9c:3b:c9:e7:3e:9d:
6c:35:32:df:28:6b:6f:17:13:78:97:52:9a:8a:cb:9e:bc:ee:
95:0d:35:98:21:ee:24:b0:b0:91:f0:4e:9a:a8:e7:5d:3f:fc:
ec:08:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:26 2025 by rpki-client