Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: q+hkHsMlnjlLgg174p9g1oKW/oIic9tPRJFhpB382hg=
Subject key identifier: 3A:21:A3:63:F7:96:F7:1D:FA:9C:27:47:3F:B2:57:B8:FD:8C:38:6E
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 0199FC587301001E51AB070370601D47A8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 0A2D
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: I+akgForsmcFpaotMMFFAb239UN0yp2a+v7xbwu5C8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:73:01:00:1e:51:ab:07:03:70:60:1d:47:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=3a21a363f796f71dfa9c27473fb257b8fd8c386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:fd:15:5b:11:bb:9a:05:79:79:33:78:d0:
6c:6f:a3:35:56:fd:97:c0:3a:d6:a0:ff:48:7a:97:
37:10:be:79:e2:5a:6d:cb:88:42:ac:f7:19:6e:78:
ca:e9:03:b7:33:06:5f:2b:ba:9c:57:64:68:ba:c9:
22:d5:94:20:7a:af:94:ee:0c:b1:43:42:37:c9:9a:
3a:88:a2:14:fa:e5:22:91:29:f6:d5:33:ee:49:09:
28:5c:dd:6e:3c:d4:5c:8d:56:2a:a4:3a:8a:5b:d3:
8b:aa:bf:e1:a1:93:d7:46:57:de:eb:4a:07:0c:b1:
91:f3:01:2f:2b:36:71:60:90:37:67:6e:1b:84:97:
d8:c1:fd:e6:27:65:50:70:c1:c4:00:a4:3d:35:78:
d7:95:fe:f6:88:3f:35:66:37:01:c5:ec:d2:bb:02:
56:7e:4b:4c:00:7b:7c:be:09:1a:47:45:32:06:43:
06:5e:dc:8e:f9:c2:6b:6e:c5:7d:fd:3d:97:68:e1:
3d:73:25:57:cf:ed:9a:c3:98:84:5f:c8:df:cf:96:
71:60:59:6b:b5:88:3a:fa:5f:b2:64:b6:f5:17:96:
21:a7:d8:02:60:95:dc:42:a6:59:de:4d:1c:53:e1:
26:7d:06:83:9f:a6:b2:24:a3:c2:fe:a6:ef:53:4b:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:A3:63:F7:96:F7:1D:FA:9C:27:47:3F:B2:57:B8:FD:8C:38:6E
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:06:93:3d:b1:2c:44:e1:25:60:43:c1:91:47:82:65:50:93:
b0:10:9a:3d:69:d0:78:f1:59:46:87:1a:35:df:9c:19:c3:f0:
bf:de:1a:91:57:f5:1a:73:c6:1e:bc:2f:2c:95:50:d9:c2:6f:
b5:70:1a:25:f2:10:44:fe:82:ab:5a:4d:ad:7c:41:42:21:1d:
26:cc:05:7d:64:83:f5:e3:3a:d5:0d:f0:9d:ae:2d:38:71:e7:
a0:dc:e0:93:c9:36:ad:ea:66:34:78:21:67:c7:b1:b7:9f:44:
ab:fc:2a:f6:5b:fc:06:8d:0d:fd:88:77:6d:07:71:31:32:42:
bd:03:37:33:c4:28:73:48:ea:a2:b6:02:69:31:eb:fe:d1:47:
7a:22:2e:e3:d9:f1:86:f6:cf:75:95:46:1e:7b:76:99:88:a5:
08:eb:dd:0b:b3:95:e9:b0:b7:9e:be:af:92:e4:95:63:41:8a:
f7:df:ff:df:e1:d6:f4:49:ed:e4:e8:4c:6b:81:a8:34:39:6f:
9d:99:4c:24:44:08:79:52:17:62:4b:94:b4:88:11:2b:85:d2:
7d:94:69:eb:d3:e5:5b:be:e3:2f:1c:5e:bc:96:6c:c8:3c:95:
39:79:9d:09:ff:f2:d6:4a:e9:ae:fd:b0:35:00:49:c2:80:fe:
2a:8f:18:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHMBAB5RqwcDcGAdR6j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4
YTE5NGIwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
EygzYTIxYTM2M2Y3OTZmNzFkZmE5YzI3NDczZmIyNTdiOGZkOGMzODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCn9FVsRu5oFeXkzeNBsb6M1Vv2X
wDrWoP9Iepc3EL554lpty4hCrPcZbnjK6QO3MwZfK7qcV2Rouski1ZQgeq+U7gyx
Q0I3yZo6iKIU+uUikSn21TPuSQkoXN1uPNRcjVYqpDqKW9OLqr/hoZPXRlfe60oH
DLGR8wEvKzZxYJA3Z24bhJfYwf3mJ2VQcMHEAKQ9NXjXlf72iD81ZjcBxezSuwJW
fktMAHt8vgkaR0UyBkMGXtyO+cJrbsV9/T2XaOE9cyVXz+2aw5iEX8jfz5ZxYFlr
tYg6+l+yZLb1F5Yhp9gCYJXcQqZZ3k0cU+EmfQaDn6ayJKPC/qbvU0t2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoho2P3lvcd+pwnRz+yV7j9jDhuMB8GA1UdIwQY
MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt
NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm
LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAaTPbEs
ROElYEPBkUeCZVCTsBCaPWnQePFZRocaNd+cGcPwv94akVf1GnPGHrwvLJVQ2cJv
tXAaJfIQRP6Cq1pNrXxBQiEdJswFfWSD9eM61Q3wna4tOHHnoNzgk8k2repmNHgh
Z8ext59Eq/wq9lv8Bo0N/Yh3bQdxMTJCvQM3M8Qoc0jqorYCaTHr/tFHeiIu49nx
hvbPdZVGHnt2mYilCOvdC7OV6bC3nr6vkuSVY0GK99//3+HW9Ent5OhMa4GoNDlv
nZlMJEQIeVIXYkuUtIgRK4XSfZRp69PlW77jLxxevJZsyDyVOXmdCf/y1krprv2w
NQBJwoD+Ko8Yrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:49 2025 by rpki-client