Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: DJPUyO3M9iUcKzPXnXV4FjXLEOaqVKyWca8m1ZzzO7c=
Subject key identifier: 02:FF:4B:0D:F0:7E:9A:3A:04:C6:BE:F5:A8:C6:EF:23:44:83:6B:23
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0199FC8F6F8958B8A1BD9794395D335AC979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 1057
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: 8/Y6MB3mLbA/kAMeF8x99lGbWaUUtcvQPw5xl+qjtNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6f:89:58:b8:a1:bd:97:94:39:5d:33:5a:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=02ff4b0df07e9a3a04c6bef5a8c6ef2344836b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:32:c6:10:b6:04:cb:68:d4:60:25:94:55:
fe:01:00:da:5a:70:4f:f1:2b:cf:93:cc:79:42:36:
33:e9:57:6d:3a:4c:8d:ba:32:1a:91:6e:ec:43:cf:
df:f5:71:5e:e8:db:b7:e8:ca:bd:6c:67:cb:42:1d:
c5:d3:e0:51:0a:9a:d7:a1:b3:11:08:df:e3:0c:32:
44:33:09:9e:75:c5:dd:f7:7b:e9:c0:82:f6:d2:87:
be:16:d4:db:30:35:fd:64:7a:0e:be:e4:a2:38:99:
94:70:cb:96:11:6c:9e:11:03:69:b6:e4:9c:8b:54:
9f:18:14:ca:5e:e3:72:48:e6:e7:42:35:99:35:41:
de:65:22:ef:95:c3:ec:a6:ea:66:a9:8d:e1:3d:69:
a4:82:e6:b4:23:54:37:f2:49:81:23:76:5e:ae:a9:
22:cf:83:0a:df:4f:0a:7d:a2:1f:98:01:a5:20:9a:
05:05:70:3e:7e:99:3d:ef:8f:c5:e6:61:f7:12:4a:
8b:46:c4:f6:76:5a:a5:57:df:88:c9:0c:95:14:5a:
bb:9d:03:d6:97:ce:e0:58:64:ba:44:2a:b0:b8:1a:
fe:90:cd:14:b9:2f:c2:4f:57:a7:1f:82:51:dc:64:
28:f5:20:f0:58:c4:c0:3e:bb:fa:40:2b:24:92:14:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:4B:0D:F0:7E:9A:3A:04:C6:BE:F5:A8:C6:EF:23:44:83:6B:23
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b4:91:d3:a5:e8:d9:45:f5:7b:10:44:b5:b2:0a:49:d5:31:
5f:20:30:e5:19:c3:b8:89:e3:32:fa:c1:46:c3:c3:03:c0:63:
d5:b5:dd:41:9f:5e:19:9d:1f:e1:ac:54:67:30:c6:07:fa:d3:
5f:1d:2e:ec:d7:17:fa:42:82:78:74:08:13:6c:f5:44:29:3c:
b3:14:62:83:66:af:b4:d7:5f:f4:16:5a:12:cd:9e:db:1f:7b:
23:ca:cb:80:da:ac:73:15:07:70:e2:4e:f7:f8:ca:02:f3:c6:
e7:d8:3d:4b:4c:96:03:8a:ae:76:22:f2:b2:01:52:b3:da:ff:
83:57:37:e0:13:a4:0c:60:35:a8:da:ed:a7:4a:fc:c8:14:48:
68:f6:4d:b1:56:d5:fd:55:4a:e1:34:0e:76:a7:3e:b5:6c:e5:
87:02:cc:72:5f:34:b1:e5:cb:13:33:78:32:99:47:18:18:9e:
65:b0:48:90:84:6e:f2:1d:37:e5:8f:7d:ef:c9:6f:e7:dc:61:
e4:94:98:91:93:a5:c2:1b:bf:3d:bb:ed:6d:c6:ec:cc:28:a9:
28:fd:bd:de:1f:63:6c:21:54:70:f0:b4:7e:3f:53:31:a7:d7:
1c:ce:82:8c:7c:c4:19:83:01:4a:65:2b:a2:16:48:4e:a2:83:
d2:a1:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:42 2025 by rpki-client