Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: P2A46twerTslxsTjedOvVWaIvieUTJp4iipxKJb8t00=
Subject key identifier: BB:45:E5:B6:CF:B8:56:58:47:38:D1:2C:FA:13:51:C0:A8:65:37:B6
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0199FC2181910D57505C1FDE9DB82A4D291D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: JosIgKN4VHPeOsneUwFT/sBk+H2jjS2HL+XeOh8Qqe0=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:81:91:0d:57:50:5c:1f:de:9d:b8:2a:4d:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=bb45e5b6cfb856584738d12cfa1351c0a86537b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:61:01:99:9e:d4:21:c7:05:06:8e:0b:2e:
5b:13:3e:37:ca:c7:d0:16:f0:71:65:14:6e:c7:c6:
d8:d6:7e:50:fb:a7:ab:4c:6f:bd:e7:35:d2:b6:69:
60:39:da:ef:83:85:e9:38:cc:88:67:f6:bf:34:2f:
c0:16:0d:2a:a7:62:cc:5e:93:65:30:b0:dc:67:82:
1b:59:dd:13:b4:9e:57:5a:a8:27:4d:1b:f5:a6:92:
fc:a6:95:0c:86:96:3c:20:05:c8:ee:69:11:92:c7:
c3:f9:c8:73:8a:1d:e4:1f:bf:c9:d9:68:1b:b5:c8:
9d:74:3b:53:6f:4c:db:16:3c:86:d8:69:ad:de:69:
5a:a4:91:5e:1d:cc:6e:11:80:c1:43:e0:6a:20:09:
26:2a:f7:28:4a:33:43:4c:ab:d8:a0:67:75:4b:55:
01:59:b9:2b:e9:8c:9d:4e:01:a5:69:f2:31:b8:47:
26:83:a0:0e:ef:d4:0f:8d:fe:b0:93:6c:f9:60:e4:
44:89:da:ff:6d:f8:48:08:ba:e0:43:79:3f:01:c0:
11:b6:c5:1a:54:ed:a9:3e:8d:67:59:3c:54:e6:be:
65:74:5a:f5:a5:7b:90:ba:45:3a:29:88:34:37:83:
80:50:56:df:3d:1d:31:0a:e2:88:9d:c5:fb:9d:c7:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:E5:B6:CF:B8:56:58:47:38:D1:2C:FA:13:51:C0:A8:65:37:B6
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:c8:43:24:8b:38:dc:6a:ad:6e:ae:ac:1e:c3:ba:7f:43:
e6:86:7d:5f:5a:2a:5f:e8:1a:81:5a:ed:08:ab:b0:96:6e:6d:
5d:b0:fc:87:a0:75:e3:b7:39:4d:8b:a2:de:c7:9e:a5:e2:73:
a5:f5:5b:79:a4:85:d5:87:a9:2e:31:94:4c:06:d7:1a:16:88:
d3:27:3c:0d:18:41:20:66:e8:6c:7a:a2:b3:bd:7a:e3:5e:ad:
ae:d9:cf:b0:de:11:c4:49:92:56:94:d5:32:ab:ab:53:d7:c5:
a6:c6:ea:dc:ba:d1:fd:bf:68:b5:57:dd:26:c0:11:78:11:0c:
0b:73:9d:12:cb:be:79:82:2c:ad:5b:5b:1b:4b:fd:10:eb:6d:
e7:4d:d9:0e:a5:3a:b0:93:7f:d1:a0:26:91:8f:4a:ca:72:b5:
5a:dd:a1:be:88:62:b7:be:ba:b8:6a:92:1d:a5:30:cf:94:82:
e4:e9:25:b3:6f:f4:92:e3:55:62:0e:81:a5:da:2a:e5:8b:a4:
e1:ee:e5:8c:04:74:2b:02:a6:5b:f2:7d:1a:f7:b2:05:32:b0:
47:fc:97:49:dc:52:00:de:16:10:b8:30:5b:ef:04:3b:c8:4a:
d0:4f:73:39:02:15:04:10:a2:ee:0d:ff:fa:61:ed:cd:7b:a9:
87:8a:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:40 2025 by rpki-client