Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: XbuaL2da1EM+cRYhVCM6BNbGNz3DOoH01JtdAAHeFK8=
Subject key identifier: 57:1A:36:E0:38:A5:02:FB:D8:FD:FE:A6:BA:D8:80:F2:8F:FD:38:89
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0197B74583C750522ADD858FA34CE3EB4083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0F2A
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: TehkOeYIepfqdWf20xwqJF7wu9Wsb7NXmC1JRiH/V88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:83:c7:50:52:2a:dd:85:8f:a3:4c:e3:eb:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=571a36e038a502fbd8fdfea6bad880f28ffd3889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:c2:38:ca:3c:1e:d9:36:83:42:36:61:32:
5a:3a:be:9c:9c:88:d1:31:35:62:c7:f6:a1:c5:f5:
30:06:72:ae:ac:8d:a3:c4:21:e8:ed:59:b9:5e:ad:
6d:c0:f8:0f:c7:af:57:bf:de:50:bf:b6:ef:58:f8:
c5:7e:ba:18:0f:b1:22:1e:94:4d:74:66:29:20:bb:
d8:61:d3:b4:76:7d:a0:74:b4:16:9f:fd:3f:da:a7:
8a:be:cb:e7:2a:a0:45:b2:a1:6c:f5:4d:ce:0b:cb:
5d:a7:49:14:c3:9c:56:78:f3:ee:14:46:fb:52:7b:
fa:c1:e1:64:4c:b3:9f:12:bd:f5:e3:3e:bf:62:72:
c2:c3:4a:85:31:cb:f6:87:9f:1a:89:c4:1d:97:c3:
44:44:56:4b:97:d7:20:cc:87:e0:c1:72:70:94:9c:
1e:76:10:4f:f6:77:4f:02:54:ec:df:4c:1d:19:5e:
6e:36:0b:46:bc:0d:d9:fd:2b:fc:28:95:e4:7a:de:
13:bb:f1:6c:bd:3f:5f:84:59:75:ff:e2:ae:b9:e4:
ac:fc:e2:b3:8a:82:aa:8b:e4:07:5b:dc:aa:4c:92:
cf:09:0a:ae:1f:86:5c:a6:0d:fc:3f:ff:b4:f2:ad:
da:61:80:f3:35:fc:25:1f:20:58:fd:05:b7:a9:20:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:36:E0:38:A5:02:FB:D8:FD:FE:A6:BA:D8:80:F2:8F:FD:38:89
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:05:9b:fd:a8:59:19:74:02:b8:63:f5:2b:d4:f4:5b:b6:
8b:b1:88:6b:83:df:9a:e4:42:0b:b2:f9:02:9e:af:2c:7c:12:
48:c9:7a:7d:f5:7b:ea:92:69:8f:60:8f:74:ac:3c:3f:19:fd:
de:5e:5d:f7:4c:da:f2:e3:46:62:5b:5b:7a:fc:ee:cd:f5:5b:
7a:de:1b:a0:f4:bd:5e:b0:c7:46:6d:b8:be:83:03:7c:c0:6b:
c8:3c:a6:bb:90:97:2a:17:52:8e:45:0c:b8:b9:c2:82:29:e1:
22:4d:64:9e:c3:0c:1d:cf:22:39:4a:37:a8:5d:ed:3a:05:6f:
55:0d:15:e4:86:d2:11:b4:9a:cd:67:4e:cf:d3:6c:1a:1b:07:
11:bc:50:ba:c1:96:00:e6:c9:87:f0:52:63:ae:5d:b6:5d:7a:
e3:d8:41:5d:bb:0b:0d:dd:60:d0:13:5d:e9:71:fe:2d:55:c1:
0c:2a:40:ce:1e:13:a1:a9:f1:8f:29:6d:13:58:3c:8c:e0:82:
3a:50:cb:54:c3:d8:36:25:4a:e2:ba:60:47:d8:3e:9e:01:02:
7d:ca:13:a7:ee:7d:c2:5a:c7:4a:1d:fa:54:a1:59:aa:4e:5e:
eb:b7:9a:0e:02:a2:ad:97:fe:d4:3e:3f:30:f8:50:39:9a:63:
d5:1c:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:13 2025 by rpki-client