Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: 2x+rC9W0POZ3aILURyoqdVcyFkvvWmGNZTm7oAxLMW4=
Subject key identifier: BE:EB:CE:A0:64:C7:F7:2F:97:4E:C2:84:A0:47:55:AA:5C:54:08:05
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0198D54E3C38954B22AF75D1FC391B1FA42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0F61
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: i9nm3/IM/18PCPsCU2dWgZ/Z/wmvcGqk0eqiExaHdpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3c:38:95:4b:22:af:75:d1:fc:39:1b:1f:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=beebcea064c7f72f974ec284a04755aa5c540805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:d9:34:20:21:f6:1e:7b:0e:0b:d9:73:7d:
81:63:31:9f:46:95:6c:63:2c:ac:16:71:f3:36:6e:
72:30:21:d9:44:10:20:da:bc:c1:08:05:0c:df:53:
c6:5f:57:ad:3f:9e:6a:44:21:a7:b2:52:5f:09:2c:
4d:3e:52:71:80:33:21:80:1a:4c:ed:bd:fb:15:18:
d1:b9:18:df:0b:2b:75:fe:f2:e3:83:ce:b4:09:67:
6a:5f:dd:e0:53:da:30:91:36:bf:cc:28:4b:ac:e0:
4b:00:75:11:ce:87:cc:fd:41:9c:d6:a7:d1:ae:07:
8d:1d:5f:5e:90:9b:de:ae:66:70:31:d3:fb:56:9e:
42:d6:d3:c8:17:f3:bc:45:aa:a2:4b:45:7f:91:e1:
aa:97:b3:c7:fc:31:ba:0e:2e:68:f1:62:51:52:dc:
40:31:fb:ee:0c:ea:f6:75:25:98:24:e7:e6:a5:bf:
99:3f:99:5f:e4:5e:ed:d3:51:83:91:ae:9e:13:53:
6b:6e:f9:b0:78:1d:2f:09:85:78:53:3a:21:32:06:
54:8d:ea:ef:9b:9a:cb:ec:c2:eb:a4:0c:8f:5c:96:
9e:5c:24:e3:22:93:8b:81:99:f0:f0:b0:36:8f:cb:
3f:9d:eb:d4:fc:5b:c4:cd:78:8f:4b:a1:c7:24:69:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:CE:A0:64:C7:F7:2F:97:4E:C2:84:A0:47:55:AA:5C:54:08:05
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9b:e0:ad:f9:ba:0a:50:88:4d:64:4d:a3:21:88:c2:c2:91:
ca:54:79:77:39:96:a1:92:e5:68:37:55:89:f2:7e:90:7c:e9:
a8:a8:7a:a1:c1:65:12:3a:b5:3f:20:98:7f:19:b1:33:52:58:
42:61:8b:c2:2a:ce:56:02:20:62:ce:a5:57:5c:e3:b0:78:83:
52:bc:10:61:de:0b:ed:2f:0a:df:c7:b4:8e:d1:5b:70:ed:a9:
e5:61:38:2e:4d:13:00:74:5d:1e:27:83:25:93:4c:fb:92:be:
b3:8a:a2:6f:c3:aa:71:00:78:69:cb:d8:d7:29:d6:f5:10:61:
66:3b:03:bc:e0:40:db:96:95:5e:05:cd:ff:fb:e7:16:10:1b:
2c:62:ca:41:fd:d8:5e:aa:21:ea:ac:21:5b:51:ea:21:6d:cb:
89:05:17:2f:cb:d4:95:0e:f2:9c:5e:b7:0f:94:2a:df:4d:0c:
35:23:4b:4f:81:af:cc:c7:2f:f9:8f:b2:e3:c2:e1:1c:f1:41:
9d:17:0e:2e:02:02:68:89:0c:74:03:ba:b2:67:1a:49:36:8b:
ce:6e:95:41:b8:54:66:2b:6c:2c:bc:d9:fb:f9:59:ef:80:d8:
99:33:74:c8:c1:70:8f:0f:b1:a8:c6:36:ea:37:f4:8a:b1:57:
f6:ae:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:38 2025 by rpki-client