Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: xLWLVS1UH9AI8oS9rNKoGKT+gAnAXVV0HXWEG6bnGGU=
Subject key identifier: 10:43:EF:69:82:5E:3A:4F:FC:60:B5:FD:F1:7F:41:24:35:23:3A:0D
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 0198D6CD1D97B43673DB43AD3C9A4CABF1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0841
Signing time: Sat 23 Aug 2025 12:00:23 +0000
Manifest this update: Sat 23 Aug 2025 12:00:23 +0000
Manifest next update: Sun 24 Aug 2025 12:00:23 +0000
Files and hashes: 1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: x2/9Q3nvpqN48snhP2aY96DaXoUc3+gdfHLeraAGfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1d:97:b4:36:73:db:43:ad:3c:9a:4c:ab:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Aug 23 12:00:23 2025 GMT
Not After : Aug 24 12:00:23 2025 GMT
Subject: CN=1043ef69825e3a4ffc60b5fdf17f412435233a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:bc:40:19:8f:6a:df:3f:a1:c3:7a:86:9f:
99:60:c0:a2:1c:d5:f5:c8:74:3b:9f:b3:9d:c2:16:
a4:92:1d:91:52:4f:55:1e:4c:ab:5c:f7:ae:3f:31:
57:c5:7b:7c:5d:7b:ba:64:9e:75:0a:78:c9:8e:60:
9c:c5:a8:68:11:16:31:54:25:f7:82:f3:c3:aa:15:
91:9a:b7:e1:21:86:fc:d3:4b:e2:53:b5:f7:c1:e2:
ea:aa:a2:3b:67:3e:f6:87:2d:c9:50:b6:f9:b9:c6:
fc:50:79:b8:7b:14:fe:19:b7:36:b6:e7:98:56:4a:
54:5d:6f:5a:5e:95:90:55:17:b2:68:54:c2:ac:e2:
3a:99:3e:e1:d8:8e:b0:2e:4c:57:5b:df:13:ef:c1:
fe:67:6e:d0:8a:4d:53:c6:55:b9:aa:1b:33:88:0d:
2c:e8:c4:9a:a5:c3:a3:01:77:2f:28:ff:34:10:b1:
6c:f6:e2:c1:f1:a4:1b:75:8f:af:65:ba:37:ed:f1:
57:a8:b0:85:cb:3e:15:92:60:4d:6d:84:af:2f:30:
8d:0e:4d:f6:17:1c:28:5d:f8:aa:7e:7e:d0:5e:53:
83:8e:b5:2c:67:cd:3f:4d:2c:64:a0:c9:78:cf:1a:
94:26:95:8f:84:f8:cb:34:69:56:c6:6c:76:24:b7:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:EF:69:82:5E:3A:4F:FC:60:B5:FD:F1:7F:41:24:35:23:3A:0D
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c8:71:f2:3d:c9:d2:c9:e4:0e:46:88:9d:50:44:2d:de:e4:
bd:9c:31:89:d9:0f:e8:07:3b:f2:dc:6a:be:5a:75:f1:26:b3:
7d:83:6a:55:94:ad:0e:20:3e:8b:9e:c7:8c:ce:fc:32:14:2d:
fe:26:6f:e1:3a:37:e0:eb:9c:c2:5e:7c:3e:f5:ed:05:0e:e3:
ce:12:cc:69:74:42:0a:2c:25:13:e9:44:1b:e7:67:f5:39:a2:
fc:3b:84:36:91:65:f5:4a:a9:ae:d3:a6:3a:00:f3:61:60:6e:
7e:3c:9b:8f:fc:75:9c:7e:56:bd:65:44:ec:d0:88:f8:04:03:
25:46:6c:35:9c:09:b3:0a:39:e1:67:d7:c5:47:a9:3b:96:29:
86:a5:52:a7:82:55:b0:84:71:67:ca:92:4b:16:61:8b:0d:9f:
ab:d0:e0:6e:7c:da:09:32:d5:70:19:a8:ae:d8:5d:34:6e:42:
56:31:bc:7a:b5:57:b2:4a:b4:6f:d2:01:a3:da:64:c8:2a:3c:
bd:63:63:c8:c9:10:87:ce:a0:25:f0:53:7a:a2:39:1f:d0:88:
0a:0c:6f:30:76:d9:e2:6f:46:ff:1c:d0:a1:81:98:00:0c:23:
47:56:ac:77:b1:2b:b8:80:e4:aa:64:ed:9f:cb:38:ec:1f:5b:
58:3c:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:48 2025 by rpki-client