Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: eeeOr55LfRC4Y5VzHaS7y97+duuA4dIbUcWKKh3QMYM=
Subject key identifier: 68:B8:86:5F:74:76:D7:51:03:F3:CF:D4:DE:D4:C5:8B:57:C1:98:76
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0197B6D7A6032FEDC8AAD65560E309BE9A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: 32fjAkGVjCseDYLe6gIRQcKOzDspJno7gFg4RuvXSEs=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a6:03:2f:ed:c8:aa:d6:55:60:e3:09:be:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=68b8865f7476d75103f3cfd4ded4c58b57c19876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:b1:44:13:18:a4:1c:5d:76:a0:be:42:50:
99:d0:c7:cc:bd:44:9a:d7:7b:8e:09:d9:5c:44:79:
2c:0d:3a:c6:6d:dc:86:41:09:42:64:09:62:99:7e:
0a:cb:08:57:bf:cf:be:9c:e2:57:cf:d7:68:9f:45:
43:23:14:f9:6c:fe:af:73:55:21:34:ae:49:78:d7:
97:2a:b0:96:bc:8a:4e:81:bc:61:51:d1:eb:34:0c:
1c:9f:77:d0:26:9a:06:e4:54:a0:84:89:0f:b9:d9:
0e:36:8a:df:da:e8:a1:e2:ff:16:47:6b:20:1a:3b:
42:b0:98:13:f0:f8:9f:cb:76:b3:fd:16:51:3c:b4:
02:89:1f:4b:73:e7:c6:43:0f:14:6c:94:3c:2f:28:
e8:75:da:5b:88:9d:66:95:d1:7f:89:da:9c:fb:c8:
6b:33:63:2a:97:18:85:47:25:cd:9a:90:f2:29:1a:
d0:67:35:22:cf:6a:6d:e6:b5:cb:d6:75:ef:4d:e6:
8c:8a:d4:47:a3:5d:38:66:a3:eb:16:52:fa:b2:58:
76:79:76:38:ab:43:6f:cf:8d:94:ad:42:0a:b5:83:
2c:d9:5b:dc:4a:d8:b2:99:f7:fb:75:0f:d3:e6:b7:
e0:26:73:c9:90:31:87:fc:49:d8:51:fb:42:e8:2d:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:86:5F:74:76:D7:51:03:F3:CF:D4:DE:D4:C5:8B:57:C1:98:76
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:d5:59:e3:5d:49:ea:96:32:d1:c7:0e:81:d2:df:12:4d:
b4:9d:11:a6:3e:37:01:0d:fc:bb:ca:73:98:a6:eb:d5:f6:cf:
fd:dc:b5:c6:75:65:d6:6b:e2:3b:a5:b6:11:e7:c5:e1:08:c9:
b7:05:a7:fe:7d:bf:14:03:13:5e:e6:65:21:c7:b8:4d:84:8d:
08:16:ee:55:6a:f8:68:83:b5:f3:34:4b:2b:68:23:5e:e4:78:
d9:14:87:16:7c:0d:07:9f:8b:b3:6e:68:56:8f:02:46:72:9b:
5a:3b:56:fa:a5:79:73:b3:87:5a:e3:a0:5c:0b:36:96:7e:55:
4a:0d:2b:43:94:67:04:ee:0f:6e:3a:4a:5b:d3:77:7b:e1:de:
2f:9b:d2:ee:d6:35:4f:e8:a7:bd:49:aa:9d:4f:44:89:73:df:
9e:d8:52:73:b9:da:bf:4c:66:99:81:87:11:da:0a:40:07:24:
ee:23:96:ca:ba:34:ff:6e:e9:1e:cc:27:f0:2a:fc:21:2d:fc:
56:a7:f4:07:1d:c3:6a:4d:52:70:2c:17:47:64:51:65:23:b8:
43:b6:0d:21:50:ec:67:5c:aa:41:af:9a:2d:b9:f8:26:9f:0b:
8b:79:d4:35:3a:c1:c0:70:9d:9d:b5:b4:57:87:ee:4b:2c:28:
32:05:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:31 2025 by rpki-client