Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: wjty0lqrB8IOVeMLVFfbTVp1UVd02jtQzY1pykSL5UA=
Subject key identifier: 3F:A7:6F:24:31:F0:A9:DA:77:D9:AC:37:40:39:53:13:2F:05:08:FF
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 0198D474870E981DB012813C1BE1758C8023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:04:23 +0000
Manifest this update: Sat 23 Aug 2025 01:04:23 +0000
Manifest next update: Sun 24 Aug 2025 01:04:23 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: KmBiCIQ4rdU0Ie459iA9ndsy76KmZneFU4Cc7lkKvCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:87:0e:98:1d:b0:12:81:3c:1b:e1:75:8c:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Aug 23 01:04:23 2025 GMT
Not After : Aug 24 01:04:23 2025 GMT
Subject: CN=3fa76f2431f0a9da77d9ac37403953132f0508ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:0c:d5:1d:08:9a:cc:98:cf:94:02:ae:15:
ce:05:b8:93:4e:2d:f0:27:44:20:ec:44:d9:36:31:
52:1b:5f:51:56:55:ee:66:3c:e1:b8:84:35:0a:0c:
01:e5:4a:80:12:29:62:7e:8a:09:87:8e:a7:da:f7:
40:8c:f1:72:60:43:58:53:85:b4:42:05:e8:09:56:
da:53:9d:54:0d:63:f3:d2:07:f4:22:9f:2d:18:d1:
8e:85:35:59:b4:13:f3:e3:ce:46:62:05:52:a9:47:
63:3e:9c:78:c9:2e:9a:ea:74:b2:83:27:a1:4f:94:
47:4c:8c:d2:63:a8:44:8b:7f:45:98:10:75:34:6b:
0b:11:e9:a6:15:91:e8:48:d0:92:e5:e5:39:59:1b:
60:8a:9a:db:3f:0f:3c:2f:a9:2f:83:27:f3:03:88:
db:ac:c4:ee:2d:c9:77:43:4b:e6:ea:b0:ba:ba:6f:
67:0b:ad:93:65:ae:73:b1:c0:23:23:77:73:59:af:
f8:c5:42:9f:34:fa:0a:3d:16:a7:12:d5:a7:a5:07:
af:c1:26:17:41:4e:4f:82:85:fc:97:f5:90:54:c8:
88:31:c9:e7:85:16:0c:7b:fc:48:ca:19:06:f2:1c:
4f:0d:54:ec:68:a5:69:86:17:ea:e0:95:0a:c8:45:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:6F:24:31:F0:A9:DA:77:D9:AC:37:40:39:53:13:2F:05:08:FF
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:39:af:fd:82:83:40:23:9b:d4:24:ca:d8:d3:ac:df:32:5d:
f8:9e:f3:d2:aa:b8:62:a3:d3:28:39:a5:53:9d:e6:47:87:a8:
3a:2f:b1:aa:e7:ea:77:fd:f8:84:1e:32:90:12:0a:ba:83:d2:
bd:dd:c6:63:48:58:e1:56:67:d1:03:6a:fb:b2:92:7c:99:cc:
f1:3e:bc:63:99:54:7c:b2:37:99:db:9e:c6:e5:88:92:05:3b:
6f:2c:60:2f:81:79:85:9c:24:f3:32:64:f6:af:98:c5:4b:9e:
a2:4f:e0:0c:06:ea:6a:63:a5:12:9e:3f:8b:d8:78:4f:c3:9f:
dd:12:bc:3d:fd:c1:ec:ad:db:8d:7e:aa:f9:d4:f1:db:5c:b7:
13:26:6a:b4:07:ba:c7:04:27:4b:0f:a9:95:3c:9b:7f:75:21:
73:2d:ca:a9:bf:5e:6a:c1:6c:d8:bd:5c:02:cb:60:a8:eb:48:
60:d9:a4:33:af:3b:d1:4b:a3:f0:08:e3:db:99:23:ad:79:e6:
db:cc:e8:26:26:5c:df:b7:cc:6a:77:60:61:ee:4c:92:f7:86:
31:5e:a5:6a:32:eb:7e:cc:84:e6:99:86:27:d8:98:98:83:d7:
ea:a3:a9:3b:8c:08:e2:12:53:32:54:57:cf:66:f5:46:3e:6c:
a0:fc:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:38 2025 by rpki-client