Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: ptvcHwlrfmWyF1N7+JpAh4K9a5iagSHbwucqFtBTVVM=
Subject key identifier: FA:B4:60:7A:46:52:A2:E9:4E:C6:37:43:E0:15:58:13:D2:1D:32:FA
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0198D4A82E357BF0EFE77D4501A5A6FA2810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: VSBbWVHUJyQzB202RDCWqNdKVSLjVoaAxPJ8KUCm6aU=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2e:35:7b:f0:ef:e7:7d:45:01:a5:a6:fa:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=fab4607a4652a2e94ec63743e0155813d21d32fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:fd:23:74:ce:76:26:fb:f8:51:3b:b8:87:
5c:83:e1:ea:aa:da:80:4a:44:8d:1a:d3:15:0a:fc:
6b:7e:17:71:c8:86:32:28:11:57:70:5e:c6:c7:18:
9a:44:1e:be:c2:75:11:e0:a4:ea:91:37:75:be:a9:
d0:94:54:a9:7f:1f:e4:68:4f:1a:a7:71:0a:d7:fc:
4f:89:f1:36:07:03:86:67:b8:fe:8a:8a:38:7f:53:
f9:92:c2:5f:87:d8:4f:22:62:48:65:c1:a3:32:8e:
ad:e4:38:66:0e:c5:da:88:0b:ed:ff:b7:9b:57:aa:
4d:b5:1c:3c:ee:fb:c0:2a:5c:47:4a:6d:28:fe:69:
6e:38:eb:05:a2:87:73:20:5a:ad:63:6f:0b:be:bc:
89:32:c5:75:ce:20:88:fc:e5:07:f8:cf:04:d3:9c:
82:ad:07:8f:de:1b:0a:ae:57:d1:36:57:37:fc:4b:
1a:83:fc:52:fb:7c:06:d0:74:b0:e8:e7:48:29:d0:
23:34:2e:b9:a2:26:6a:43:38:ce:cd:82:0e:bc:0e:
59:2c:f4:90:39:37:8d:9a:ac:a8:d4:4c:48:1b:bd:
c5:ce:0f:e7:88:25:5c:59:de:83:cd:1e:da:99:4f:
83:7b:d7:cc:0a:cc:74:55:62:9e:90:2d:db:e6:1d:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:60:7A:46:52:A2:E9:4E:C6:37:43:E0:15:58:13:D2:1D:32:FA
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b9:22:5a:38:e7:04:3f:21:22:75:23:16:ae:52:f5:1b:59:
72:f4:02:13:b9:a8:e7:eb:a0:fd:0e:91:6a:95:db:71:fb:40:
af:9b:80:40:56:b3:a1:a5:99:e5:23:a6:ad:ef:79:7f:13:06:
da:79:85:a9:94:88:14:8d:07:5b:0f:21:ea:cd:29:8b:b8:f1:
00:e6:83:ba:cc:69:49:da:ea:b8:92:ca:49:6e:0d:4a:f4:72:
09:48:35:32:f0:34:d3:2c:69:ee:2a:3b:55:ea:e1:12:96:a6:
2a:a6:5f:cd:4d:b3:26:05:c3:11:d0:a3:67:fa:ff:db:47:da:
60:bb:17:c1:af:ce:7e:6d:d6:25:58:1b:25:24:10:90:87:e9:
15:cb:ca:2f:3a:1a:dc:e6:08:71:68:3d:13:1c:42:79:92:8e:
73:45:4c:ad:26:f3:a8:41:2e:ce:eb:43:d3:58:2d:67:2b:0f:
ff:a5:52:2b:04:9c:bc:b2:1b:07:58:f2:79:a8:ec:49:43:22:
3e:ab:84:01:97:2e:30:52:db:27:dc:9a:e7:00:52:2e:68:32:
9a:54:67:e2:a6:42:58:84:89:03:2a:f0:76:4e:c9:d5:0e:01:
3d:4d:fd:60:69:df:e1:96:b0:64:b6:01:52:66:be:c2:6d:5e:
93:75:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:25 2025 by rpki-client