Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier: XOFrWMz26v32KhlqgvwieodeEzhfoYW6gvYB2CxjrpM=
Subject key identifier: D9:4F:99:E9:BB:43:9C:9D:71:DA:50:CB:7A:7E:AC:51:15:30:CC:70
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial: 0198D73BB69408CC0B5ED1AF5DF3349AB80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:01:11 +0000
Manifest this update: Sat 23 Aug 2025 14:01:11 +0000
Manifest next update: Sun 24 Aug 2025 14:01:11 +0000
Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: ib9vbj9UW1pRB1NWLIvUjDYUyILrynQBPKyiVUHGRaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:b6:94:08:cc:0b:5e:d1:af:5d:f3:34:9a:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Validity
Not Before: Aug 23 14:01:11 2025 GMT
Not After : Aug 24 14:01:11 2025 GMT
Subject: CN=d94f99e9bb439c9d71da50cb7a7eac511530cc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:49:76:f0:b7:44:e7:8f:18:c3:6f:a0:56:
4d:1f:43:d8:cb:93:e9:e6:d9:d6:a7:38:f8:e2:24:
4f:77:3f:04:ff:8d:6d:4a:c1:2e:53:5a:92:b7:8b:
b3:b2:c9:c6:8a:9e:bb:67:a4:b9:e1:2a:cf:ad:a7:
7d:26:b1:30:9d:2b:cb:9a:ac:6d:14:50:75:3f:46:
0e:6e:2f:97:b5:07:82:a1:87:91:e8:5f:34:27:c0:
67:e3:29:15:e8:e5:ed:47:09:84:e0:c6:e3:a4:2f:
fc:f2:63:f8:c5:d3:19:5e:62:a0:e6:0d:de:7c:e4:
a0:71:d0:99:ff:3b:3b:db:74:32:aa:9c:96:94:ca:
1a:e5:2d:83:fa:84:4a:ae:ab:24:67:95:fa:0c:40:
bf:e9:7c:19:3d:94:48:04:6a:88:b6:fb:23:d7:98:
b1:fa:7f:32:93:8a:65:8e:2b:da:c8:d0:ff:46:37:
ab:08:18:f2:9c:b1:9f:06:67:2e:60:d0:f3:47:a0:
ea:e5:c6:35:d1:eb:3a:cf:19:84:c3:fe:ae:5c:60:
87:42:47:56:4b:14:13:86:85:73:05:04:5d:f6:2a:
49:72:39:36:97:03:3c:37:83:77:82:11:c8:26:67:
0c:12:7b:a4:52:1d:10:a4:42:00:92:94:39:6f:6c:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4F:99:E9:BB:43:9C:9D:71:DA:50:CB:7A:7E:AC:51:15:30:CC:70
X509v3 Authority Key Identifier:
keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:f9:5a:7c:fb:9f:92:07:c7:da:d6:8b:36:0c:ca:5b:a1:
56:f5:d3:bf:60:99:7d:3e:a5:19:e5:6c:18:6d:b1:10:0a:93:
3e:fa:59:c6:e7:b4:a5:01:24:95:1e:e5:b8:7b:8c:53:db:85:
84:11:40:19:21:0d:06:36:89:01:f9:f6:a8:cf:3d:31:d6:07:
7b:4f:05:a2:d3:ed:ab:cc:a9:60:d0:d0:f1:59:9c:ac:ec:a0:
b8:b5:a9:12:f8:ce:8d:20:94:56:88:5c:32:b6:8b:e3:3c:8d:
83:0d:74:3f:5e:72:57:4f:5f:4c:c4:d1:d1:70:26:f6:fa:e9:
66:7f:4a:d9:3f:5c:c5:6d:5c:e4:72:ad:4f:e2:6f:47:04:e4:
d5:2d:5a:e7:55:36:32:22:c4:a5:44:c7:3e:af:a4:86:92:a2:
69:3a:51:23:b3:fd:0b:82:0e:b2:e7:3d:8e:c9:7c:8b:15:ca:
ef:f1:07:f6:38:03:78:74:97:55:6b:eb:02:c9:03:f6:b6:41:
26:a2:4c:22:cc:31:20:ea:fd:ed:ea:0d:2d:99:c8:fc:44:b9:
d8:3b:7a:d9:6c:e6:b4:13:65:9b:93:f3:4a:04:8c:b9:ab:8c:
c9:8f:c6:b2:46:e7:79:ea:79:fc:cb:97:e1:1a:79:89:cd:ea:
dd:c9:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:46 2025 by rpki-client