Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: fWgatal4FHBiHmWylHABFJZE6rR8hgnOtOF9xc+iQM8=
Subject key identifier: 20:32:A1:19:C8:62:14:BB:31:2F:80:2D:6F:67:4B:D7:1A:46:86:ED
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0198D4724C059E17DFC7DE5D06A04FA25359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 166C
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: ZBlMmikqBusbgiYFgbnSoCP0h9sPLhMUcDoe51BLL9g=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4c:05:9e:17:df:c7:de:5d:06:a0:4f:a2:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=2032a119c86214bb312f802d6f674bd71a4686ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:3f:17:da:4f:d5:39:6f:83:09:6c:66:bf:
c9:15:83:86:69:d7:c4:d7:fe:f0:5b:d2:8d:e0:ae:
ab:ae:0b:88:58:f4:a1:0c:ae:05:be:c6:fc:4c:2b:
31:c7:ef:af:c5:0f:f5:e2:1e:c3:a3:53:9a:4e:f9:
41:eb:ec:4a:16:ca:72:e8:9f:47:bc:c9:cb:61:5c:
aa:c2:88:a9:de:55:d8:48:6b:65:6a:5f:85:6f:b0:
81:41:49:53:66:0d:a8:15:ae:ff:64:f2:f1:25:9e:
24:de:d2:f3:bb:5b:8d:7e:93:50:93:a8:99:68:3e:
4e:e5:94:43:7b:e2:37:4d:8a:6b:c9:24:87:f9:1a:
89:77:28:73:45:3b:96:24:fd:a9:54:bc:45:8a:c0:
b5:ab:38:42:29:66:6f:60:18:41:6b:5f:2f:2c:6c:
81:08:c0:81:4c:b5:34:33:56:12:27:f5:5d:a2:d1:
e1:51:5a:af:3d:99:19:94:41:28:97:25:5f:87:68:
9c:85:81:08:d0:de:dc:39:f1:7a:1e:48:ab:6d:f6:
8d:33:5a:cb:b5:15:a7:1b:bf:91:8c:ed:ed:ae:24:
8b:a2:2f:ba:27:5a:7c:20:2f:9b:e6:bb:47:96:92:
54:f2:61:89:0f:4b:6a:dc:0e:7e:00:4c:4c:80:c9:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:A1:19:C8:62:14:BB:31:2F:80:2D:6F:67:4B:D7:1A:46:86:ED
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:50:ca:50:d9:df:2f:ce:91:03:16:2a:9a:9b:18:f1:92:a3:
99:4a:56:a0:0f:80:08:0b:a6:34:c5:f5:77:6f:af:23:01:6d:
eb:62:6c:54:2f:01:aa:37:cb:91:f2:c6:aa:16:45:c5:9e:1c:
02:08:35:73:14:2f:1d:63:a9:6c:a9:6f:11:72:79:eb:c2:1d:
62:48:d2:e4:b9:49:ae:1b:df:14:49:c4:c7:b0:0a:21:87:69:
e5:12:d2:bd:49:45:6b:d8:93:46:4c:fd:59:70:2a:1d:18:e3:
75:fe:94:2b:46:fe:d9:d4:d0:ab:b4:08:12:b3:fd:6b:30:d0:
c8:30:d3:cf:2f:5f:e0:e8:31:eb:69:91:b3:d6:69:63:0f:5a:
25:23:0c:f0:6e:38:c1:50:fa:1d:89:98:92:f8:61:79:6f:7c:
41:1a:65:0a:f9:d4:91:70:f3:cd:52:33:3e:20:d6:60:ea:37:
2a:da:50:56:d8:d1:28:78:57:47:6c:3d:85:b0:46:aa:e1:1f:
a4:79:bc:4f:b4:a4:a8:d9:02:ea:c2:45:1e:37:71:52:b9:df:
e8:e3:e1:4a:11:f5:4d:b5:78:a5:0d:34:44:a5:e6:fb:e5:67:
ad:5c:05:83:d5:ca:10:bc:ce:be:12:6c:44:fa:9b:c3:65:11:
42:26:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:32 2025 by rpki-client