Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: Hpc0cr7SzsdYrtw2XTlvwFe52bOccPMSt0f8S649sgQ=
Subject key identifier: 45:51:4F:C0:7B:5A:4E:A2:0E:A4:C7:04:6D:06:ED:53:85:4C:9F:FD
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 019A059349B3922C03B79BCD6495DDC3A145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 1428
Signing time: Tue 21 Oct 2025 07:02:09 +0000
Manifest this update: Tue 21 Oct 2025 07:02:09 +0000
Manifest next update: Wed 22 Oct 2025 07:02:09 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: MTwQeKQnWsSQt2KmWM6bF8Pb8xbZAkMwvbRPnpx6jU4=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:49:b3:92:2c:03:b7:9b:cd:64:95:dd:c3:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Oct 21 07:02:09 2025 GMT
Not After : Oct 22 07:02:09 2025 GMT
Subject: CN=45514fc07b5a4ea20ea4c7046d06ed53854c9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:f1:a3:cb:6d:a7:ca:37:4a:d9:dc:b6:f0:
6f:7b:62:c1:24:11:22:ea:fe:85:94:68:2a:3e:46:
f4:93:7a:61:34:07:c6:fa:1a:70:89:42:d0:05:ad:
39:43:ff:ed:73:6c:43:4d:1b:5f:9e:a2:d9:c8:78:
50:d0:17:f8:be:9a:c0:a0:cd:e8:19:f1:d3:4a:6a:
30:1b:a9:1c:4e:fd:e9:cc:fe:a8:36:6f:a0:5f:9c:
df:5b:dd:59:9c:54:89:f9:8e:c0:4e:a0:68:ee:62:
74:b3:fd:b1:69:e6:69:0e:aa:e7:5f:51:84:5a:e8:
a6:78:96:b2:df:fc:fa:36:86:05:6e:51:d0:e1:39:
97:47:af:50:e7:bc:f2:28:5c:31:c4:9d:16:ee:26:
d2:b5:42:63:31:b1:c8:58:fd:40:de:18:db:4f:33:
af:0e:f3:df:0a:76:48:b8:31:34:4b:a1:23:8f:7c:
56:f8:00:d7:4d:03:ef:b4:31:f9:ca:49:5f:ee:e5:
8a:03:25:c0:2d:c1:63:92:3c:72:7b:f8:83:8c:5b:
c7:d9:3a:71:c2:80:e5:17:4a:f9:f1:1c:f5:a3:89:
34:14:cb:72:6c:9d:95:d6:ad:62:e1:97:16:43:ae:
00:55:6a:d3:4b:20:c4:c5:c3:7d:c0:d3:54:8b:9d:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:4F:C0:7B:5A:4E:A2:0E:A4:C7:04:6D:06:ED:53:85:4C:9F:FD
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:f6:76:40:12:d9:54:a5:39:89:76:2c:6a:03:1b:64:9e:
3c:63:56:b4:26:5b:5a:0c:8c:6e:3b:ad:7b:12:82:fc:9f:88:
e6:0e:94:97:31:f9:3a:bb:a1:4f:92:88:fd:b7:3c:e8:9f:e4:
8e:b7:57:ee:4e:34:2c:33:8f:83:8e:65:09:4f:3a:ca:58:cf:
39:40:a4:1a:08:1e:c6:cf:4e:ff:81:85:fb:09:94:31:77:82:
2b:3b:b3:52:52:0f:03:9c:5a:b9:8d:db:d6:8f:15:34:dc:58:
21:69:a1:20:3b:a1:e5:f6:8f:04:65:45:d3:12:b2:ad:b7:22:
03:44:18:40:2a:3f:fc:1d:b4:94:eb:17:51:2b:88:3b:27:82:
2b:e3:ed:aa:d6:46:19:92:0e:23:bb:2e:03:f1:f9:d7:f2:5f:
86:c0:4e:b5:a5:c4:fd:7b:bd:e9:f5:b3:21:29:d0:00:69:c0:
9e:73:b0:c0:04:e6:aa:b7:39:06:6c:75:4f:48:2a:8e:b5:ac:
77:61:81:4a:40:bd:d8:f1:1b:37:5a:a7:bc:88:6e:62:5d:61:
2a:90:f5:1d:46:53:39:b9:0c:f6:1e:90:6e:7b:3c:4d:ee:25:
cd:88:15:a1:c1:a8:97:bf:12:ca:4a:bf:c3:57:02:fa:05:01:
7e:e0:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:12:28 2025 by rpki-client