Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: ZwNCtsGplL1JCN9Lyt1goYxvarwdar7br8KlX5/Cjio=
Subject key identifier: DE:DE:42:87:0D:6C:67:B2:8B:BC:44:AA:38:B5:F3:15:67:00:DA:06
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 0198D4E0EE6C483FE060DCAAB63DD22B26ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 0994
Signing time: Sat 23 Aug 2025 03:02:47 +0000
Manifest this update: Sat 23 Aug 2025 03:02:47 +0000
Manifest next update: Sun 24 Aug 2025 03:02:47 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: UhR94mKTyoXsQAsObc1Asiw1s+JrhEmtW6r0jCMyXeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ee:6c:48:3f:e0:60:dc:aa:b6:3d:d2:2b:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Aug 23 03:02:47 2025 GMT
Not After : Aug 24 03:02:47 2025 GMT
Subject: CN=dede42870d6c67b28bbc44aa38b5f3156700da06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:3f:cb:a6:c2:57:95:0a:d6:3b:a4:af:e2:
96:16:85:22:fc:0b:b7:0f:b3:ad:2a:0a:82:6a:fb:
30:86:4b:32:6b:b2:d2:cc:7c:a3:61:9a:f4:76:78:
b6:3f:f6:18:bb:4c:58:38:b7:42:41:fb:2e:c0:db:
2f:3a:2e:8d:6b:61:f8:50:4b:81:71:8e:37:29:25:
ab:d7:67:f4:4b:d4:eb:67:b8:ed:8e:0d:c7:32:a0:
3e:6e:5c:fe:98:1d:d4:5c:f0:e3:ae:95:ac:73:43:
67:a1:54:5b:fc:c1:6b:4b:cc:e9:6c:7c:5e:34:7a:
ab:8c:56:fd:63:db:a4:f8:0c:c2:23:28:ba:2c:a4:
42:38:d1:ec:25:0a:d5:0c:ee:25:da:c4:d6:c3:f2:
79:4f:67:0b:ec:ad:f0:39:fc:39:23:2b:0e:11:6b:
fb:31:b4:20:09:80:12:9e:29:56:22:1f:91:2b:d3:
5d:aa:d6:51:ee:d2:41:4b:88:9e:cc:33:13:a8:b6:
8b:e5:f2:a5:ae:1c:71:dc:bd:2b:57:51:5d:b4:b0:
07:e7:7a:bb:36:c3:0e:32:c5:32:44:f3:e7:bb:6a:
d5:ad:a7:88:8c:28:6a:96:8e:de:51:70:b7:3d:5a:
00:d2:69:10:86:7a:c3:a9:28:7a:91:fa:f7:88:68:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:42:87:0D:6C:67:B2:8B:BC:44:AA:38:B5:F3:15:67:00:DA:06
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:db:f6:f1:6a:bc:ba:93:d4:f4:71:5d:41:d6:69:2f:bf:
a9:3f:a8:42:e4:3d:e8:76:c4:6f:a3:73:0f:cb:00:17:87:29:
f8:f8:bb:78:d2:98:ee:92:a6:2d:86:26:94:fb:22:6c:08:e0:
cf:94:3f:94:9d:4c:f1:59:6b:ee:44:4a:99:d7:8f:55:a8:9f:
72:26:29:a5:72:1f:a3:b4:ab:8c:7a:08:d4:d8:4f:a9:21:d3:
27:d9:30:a8:01:7a:31:3a:49:f9:fc:28:51:fa:8c:b4:8e:5c:
c6:22:76:7d:88:e1:56:99:f2:74:46:f7:da:28:15:1f:25:8b:
ae:16:67:63:61:7f:c4:66:c3:81:8c:6e:35:f9:e1:14:80:71:
df:20:7d:ba:a4:4c:55:27:76:d5:86:9a:5a:3d:40:8c:54:3e:
67:35:01:d7:03:f1:3e:42:46:87:2d:35:22:39:b3:4b:0d:61:
6e:56:f6:36:fa:55:18:e6:48:70:c1:5f:ad:2f:c5:87:c1:01:
69:80:a7:ca:f0:72:65:bc:bf:29:df:5b:cd:15:56:01:77:92:
d0:06:ff:b1:ff:ef:c0:a1:d8:f8:a3:99:c9:18:88:8f:dd:ea:
52:80:db:fd:0e:0b:b2:9e:1c:15:c1:52:65:35:03:f7:fa:40:
d5:48:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:59 2025 by rpki-client