Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: 90IzOH/0fm3QFxL4lrUXJR37EwOcVt8PPDDb53KFpOU=
Subject key identifier: 85:22:6A:D4:99:8C:70:40:0F:7E:BF:7C:08:BA:C5:35:20:49:44:62
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0198D515690013C244D30DE6F1ED744622E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0FBE
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: zRUN+ZJIEdEnfyHta2XL5JkZk+M+Mkuy56b0yNw01yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:69:00:13:c2:44:d3:0d:e6:f1:ed:74:46:22:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=85226ad4998c70400f7ebf7c08bac53520494462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:d4:88:3a:f6:88:0a:88:7a:e1:83:ff:49:
62:a3:d4:47:e5:54:b1:45:60:0d:f8:bb:ee:80:ed:
3a:f0:0f:81:0b:ca:83:f4:4b:df:c8:7a:50:b3:a4:
a7:ff:39:8c:b2:15:d1:4d:59:2a:09:01:b2:e2:8c:
75:c7:ec:27:44:0b:c6:39:76:11:78:f4:94:f7:c0:
02:56:cb:1c:3f:13:27:c2:42:85:3a:b6:73:99:37:
c9:5d:27:86:41:fd:37:43:df:30:61:d6:24:7b:26:
e3:e0:92:f9:32:81:46:9e:85:e6:ef:3a:cc:93:27:
59:75:98:2d:17:97:04:b7:1d:93:a6:6e:8e:d9:3a:
06:68:d4:d3:19:f6:dc:28:ed:98:1b:8b:b9:5a:e8:
63:bc:c0:2c:19:73:54:15:fb:89:a6:ee:36:58:06:
65:a9:b7:42:8d:e2:35:f0:9f:5d:cf:de:99:21:77:
75:44:4f:45:fb:7b:82:c9:48:14:03:8c:5d:b0:0a:
13:78:fa:45:f8:c7:e8:4f:d8:01:ce:36:20:82:91:
14:d1:56:1b:b4:55:03:ee:ac:3b:5b:bc:31:aa:6e:
30:74:14:fd:69:0e:4c:ae:78:f7:64:db:f8:0e:eb:
99:12:f2:7d:5a:5f:ac:2d:62:5d:c7:1e:b0:7f:6a:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:6A:D4:99:8C:70:40:0F:7E:BF:7C:08:BA:C5:35:20:49:44:62
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3d:94:f4:ab:08:7f:95:6a:99:d7:d4:d9:97:27:69:c0:28:
3d:2e:51:3e:f6:65:9c:c1:35:ae:16:a8:b4:98:60:e8:4d:f4:
d6:16:54:41:62:94:ba:96:28:9f:58:9f:38:7a:8d:2c:15:49:
75:c0:ea:ff:d7:7c:b1:90:cb:96:80:6e:e2:d2:dc:b6:e0:b0:
73:56:f9:f7:aa:3a:ea:b6:c6:5b:2a:1b:be:3e:3b:9d:af:cf:
e5:95:b1:d2:3b:9a:e4:81:e6:eb:a1:0f:6f:a2:e5:61:0a:f7:
f9:60:8e:3c:4d:2e:b8:f4:06:c2:a2:e0:99:58:11:d2:5c:6c:
ad:7f:45:d1:9c:61:94:8d:6a:e6:03:aa:d7:64:ae:f5:6b:df:
c4:17:dd:37:22:26:03:f9:fb:90:fe:ce:0e:03:d8:2a:bd:2d:
8c:69:44:65:19:46:2f:78:0d:21:e1:30:03:a5:4a:b0:62:4c:
11:02:95:91:15:47:5b:a4:e5:1e:cf:77:71:bf:30:4f:f7:37:
66:a8:c0:e8:dd:7c:11:60:7b:c2:b4:2e:cb:1e:73:95:4a:56:
33:17:05:e3:be:d8:2e:24:33:26:c2:8d:84:11:8d:07:e8:6d:
29:75:33:dd:6f:0f:41:cf:73:43:2f:c5:43:8c:97:d7:21:1c:
42:99:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:13 2025 by rpki-client