Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: 4touiIZRo1IckbSy/l3AT6A0FYvbjl3V1pM1/w8pD3w=
Subject key identifier: 7D:A2:D0:71:0B:EF:AA:22:46:73:2C:EA:57:3A:30:2D:48:A8:CE:DB
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 0197B8211A051641E4BC9A51A72AED63C8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 04A4
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: a4dZZxyj5t9v1lrM9NrSdmvzlcfLpZWKbhJxZP7FttE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1a:05:16:41:e4:bc:9a:51:a7:2a:ed:63:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=7da2d0710befaa2246732cea573a302d48a8cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:3d:5c:5c:61:09:0a:33:26:a5:0f:0a:b9:
53:3c:c6:dd:c9:e9:25:e0:9e:1d:d9:ac:ec:10:a6:
26:7d:fe:40:92:c9:36:a6:5f:84:29:c8:d5:44:26:
db:80:59:d9:cd:15:32:d7:17:82:c6:ed:c3:38:7b:
e7:a9:e2:e9:b0:47:9a:4c:55:cd:f6:3c:b9:f6:b4:
4e:d4:91:eb:ac:12:87:16:5b:86:c4:45:9d:a4:02:
de:b4:c2:c2:c9:f9:f2:15:02:5f:1e:b2:da:4b:8a:
6e:5b:59:50:6e:c4:f5:6b:e1:1a:f0:31:40:3d:e7:
56:78:a7:f3:ae:54:2b:1d:72:5a:00:9f:90:23:2b:
fa:0b:f1:a2:96:45:91:7a:13:92:10:5f:27:d9:3d:
48:63:58:e4:ae:5b:8e:d6:67:90:90:28:76:d7:80:
34:d2:4a:d6:33:fc:8e:ad:65:dd:14:2b:8d:d4:ad:
9b:b8:a9:21:de:4d:1f:94:46:f5:d0:ef:13:b5:16:
d7:0a:72:19:ca:0c:49:17:e7:c9:89:d8:57:4b:38:
6d:3c:9d:52:3b:f4:60:cf:35:a6:52:d3:55:ed:2f:
a2:84:b9:1e:4f:6a:51:05:ad:ea:d7:84:ee:7b:ac:
ac:7a:3c:8e:81:6b:37:68:b6:bc:6d:d6:93:5f:65:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:D0:71:0B:EF:AA:22:46:73:2C:EA:57:3A:30:2D:48:A8:CE:DB
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5b:48:6e:33:34:d4:21:1c:8a:6a:db:5e:c0:32:0b:dc:4e:
33:dc:57:89:39:f8:24:d9:93:84:82:e2:b6:6b:a6:dd:be:bd:
13:a0:a6:87:6c:cd:5d:80:b5:b9:39:8b:2f:3e:84:d8:db:4c:
b9:6d:05:80:b1:f1:bc:70:a3:66:82:fa:9b:12:c6:34:96:14:
05:91:f7:1f:b1:c4:eb:63:66:a6:cd:5e:8d:69:1f:dd:f8:ba:
e7:db:f2:97:e1:af:de:51:15:d2:8c:d2:00:9e:41:4b:57:f6:
54:59:3f:91:a5:7a:1f:e7:90:45:26:ef:5f:c1:39:cb:c5:d2:
75:ab:f8:ab:d4:ff:ba:7b:54:83:4e:87:7e:98:d0:d5:67:03:
2f:7a:e5:ac:2e:2f:d2:80:1a:9c:6a:32:c2:45:d5:98:14:d6:
42:90:15:99:6b:fb:22:c9:b9:0d:b6:3d:bc:aa:5c:ca:94:08:
d6:02:39:47:c0:17:c2:be:74:4d:fb:61:de:c5:a4:e3:e7:96:
68:8d:5c:48:87:a4:b2:73:f3:d6:b8:d0:55:b8:c7:fe:21:63:
9d:b3:aa:d3:69:25:7b:95:2c:9a:4e:48:22:91:b2:27:76:e9:
bd:07:fe:95:a9:e7:35:07:fa:28:5a:46:1e:1b:eb:9f:31:63:
e7:2a:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:22 2025 by rpki-client