Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: gxptJKzURbjDJMyb29wwKaWPggOYJWfNY+SQ4G6lrMA=
Subject key identifier: B2:61:19:69:1F:F2:E8:F6:13:E9:38:AD:44:C6:C6:BE:00:AE:DA:60
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0199FCC6930A798BA90D90304635364EA8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0FFA
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: I34dOSkoQ6buFBpWOTdJuVlqLGJmgw5mc2AGT2mQwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:93:0a:79:8b:a9:0d:90:30:46:35:36:4e:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=b26119691ff2e8f613e938ad44c6c6be00aeda60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:99:67:f0:fb:ab:33:7b:bc:82:c6:0f:d0:
64:4e:5a:87:f2:0e:b8:b0:92:e6:fd:a1:24:5f:06:
2a:3e:92:6e:77:b5:16:96:48:2a:b0:19:cb:d9:d5:
bf:b1:5e:68:52:4c:50:fc:37:c6:00:d4:5a:43:3a:
f9:e7:d9:93:78:11:34:7e:fc:c3:89:12:48:86:e5:
84:64:9f:69:8e:e4:6a:70:99:66:ed:12:ed:a1:4a:
48:99:e0:e2:84:df:46:12:3e:b5:e0:44:61:76:f0:
80:2e:e8:1a:e4:b9:93:98:08:fd:f2:4e:b2:d2:88:
02:fa:c9:1c:3d:bd:66:8e:52:ed:c2:9e:a9:b9:16:
f8:3d:38:cc:a2:54:a6:85:a5:e4:f8:63:fe:fd:79:
e0:f0:02:61:e1:22:3a:2c:bc:55:ee:84:ad:5c:82:
11:38:b3:22:7d:db:ae:80:0d:7b:bd:54:ec:68:87:
c9:9b:c4:13:aa:ee:1b:07:2f:2e:f7:bf:cc:8c:ab:
1f:39:89:32:7b:3f:72:28:02:a4:d1:0f:11:31:1d:
45:21:b5:bb:d9:28:3e:f9:9e:80:59:00:16:87:4f:
fc:b9:25:6c:7b:51:17:ff:71:74:73:2d:27:e9:46:
06:7f:b5:1f:b9:8a:b0:60:06:7d:cd:9a:c2:68:47:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:19:69:1F:F2:E8:F6:13:E9:38:AD:44:C6:C6:BE:00:AE:DA:60
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:42:7c:5e:c3:36:83:c3:8c:95:f8:34:4d:91:26:cf:fa:
1a:81:ec:33:7e:42:8d:97:0f:b4:23:19:24:e6:82:0d:e5:77:
5c:7c:15:1f:a7:3d:f3:dc:74:78:01:f8:c1:b8:3b:19:5c:23:
39:a0:94:a5:28:c7:89:d8:62:b7:df:2e:b4:e3:d6:86:32:d2:
6e:b3:ca:23:75:1e:bc:c1:6a:6c:01:2e:72:cb:37:42:96:1d:
75:2c:17:52:ab:f4:ae:04:23:c4:60:90:5a:a1:a2:ac:ef:1d:
61:88:bd:37:ca:a4:f9:4a:66:9c:2b:0e:29:d4:b7:da:68:6f:
92:c0:d2:a2:a2:51:f2:d2:b0:d8:61:24:e6:88:c3:00:8b:87:
94:86:59:7c:c1:2c:58:07:e3:a2:6e:64:8b:6b:24:cf:d4:15:
20:ee:42:88:ed:17:c0:51:f5:97:fe:1c:c0:cd:78:46:e1:43:
e2:48:7b:fc:25:a1:e7:94:cf:ce:a1:45:0b:96:07:f9:24:26:
9d:c8:25:e3:1d:3d:d7:79:d8:e7:f1:64:d8:2a:c5:64:d1:ca:
2c:1a:8c:34:bf:12:9c:23:22:77:af:91:62:a3:ac:38:60:b1:
b0:d5:92:6b:06:71:12:4c:b5:00:69:27:8d:de:76:db:14:f6:
77:3c:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:46 2025 by rpki-client