Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 7GT/0HH/0irDQWgjNKEFoapHc2pe1BXCCjL+v7yn7YI=
Subject key identifier: 24:07:98:9A:7B:FE:66:57:79:81:42:19:06:58:A2:70:D7:D5:8A:93
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0199FDDA589DC0CE84E355AE76D127089611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1706
Signing time: Sun 19 Oct 2025 19:02:49 +0000
Manifest this update: Sun 19 Oct 2025 19:02:49 +0000
Manifest next update: Mon 20 Oct 2025 19:02:49 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 6vkJmtIs5SDPqau+0aL5QJrg9o1h2Q46bc++sM9lIK4=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:58:9d:c0:ce:84:e3:55:ae:76:d1:27:08:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Oct 19 19:02:49 2025 GMT
Not After : Oct 20 19:02:49 2025 GMT
Subject: CN=2407989a7bfe6657798142190658a270d7d58a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:76:fd:b5:e7:c7:b2:28:ee:f0:88:58:31:
b8:fd:1a:62:4a:58:35:e0:90:f4:c3:5c:4f:09:41:
6e:6d:1a:47:c3:c2:5e:52:8e:29:22:eb:e7:d7:56:
c6:e1:40:d5:16:2b:d9:50:23:cb:5b:c3:5b:22:0d:
c2:51:56:ef:8d:74:fc:84:b2:e5:12:6e:39:73:98:
0e:02:b2:37:b8:00:e1:0f:a0:ba:6e:df:5f:20:26:
a8:71:6a:11:49:ef:9d:00:f8:5d:3b:ea:da:27:79:
20:da:52:24:6a:79:60:d7:6a:06:01:25:13:10:00:
56:ca:2a:99:7c:74:c1:ee:cc:11:4a:82:5c:f8:05:
3b:5e:59:e3:92:74:d0:49:d0:be:9a:0c:29:d6:5d:
13:9d:f7:58:86:1d:d1:21:a0:fe:2b:b2:86:f2:b4:
af:4e:58:1c:e7:65:43:23:7e:d2:62:12:23:74:6c:
df:33:82:80:dd:b1:12:79:b8:68:7b:4f:47:74:e3:
e7:dc:1a:44:15:7a:28:e3:87:7d:9e:41:92:e2:04:
fa:5c:03:9b:3d:85:b3:d2:50:8a:91:f8:fa:d9:02:
e7:ec:7c:7a:a0:a2:cb:ce:a1:b4:ae:d9:c1:18:11:
82:5e:37:55:70:fb:86:a9:ca:cc:7a:5e:87:c7:15:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:98:9A:7B:FE:66:57:79:81:42:19:06:58:A2:70:D7:D5:8A:93
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:69:24:90:c5:b8:47:f8:4d:d2:ce:ee:b2:fb:fe:f8:52:df:
04:63:37:0c:55:1f:cc:b3:34:8d:bf:4b:2c:c8:e6:4e:b8:9c:
95:20:c2:72:d3:b4:06:18:3d:d9:b3:af:04:90:ee:14:2e:20:
7e:48:46:6f:ac:a3:e5:1e:14:db:40:ac:76:c8:c6:bd:7d:a1:
c4:79:b3:fa:48:66:9e:fe:33:f8:21:5f:69:99:61:70:5b:15:
aa:15:bb:ab:9b:9e:a6:9a:84:3a:52:77:73:12:94:40:ac:0d:
9a:a8:25:b3:bb:e4:2e:de:dd:be:47:af:b1:5d:0a:7f:40:e5:
fd:46:d9:b0:de:f8:74:c4:16:cd:78:f9:bf:5c:23:77:17:8c:
44:66:19:43:60:5b:18:ad:91:a0:0d:08:56:95:b2:46:11:10:
76:a8:ab:70:73:97:89:28:6a:5f:9f:9e:b4:80:48:9b:2b:5c:
33:6b:69:6b:f4:26:26:79:a1:52:54:e1:76:65:30:ab:fb:ca:
28:64:44:ee:43:db:45:d7:6f:b7:38:20:09:f4:30:19:7c:f7:
ff:fd:03:65:5c:b9:d7:85:d2:68:c1:88:99:65:ac:89:d4:b7:
23:03:b2:06:ce:15:0f:7a:28:92:cf:c2:27:40:9e:10:57:d1:
34:74:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:59 2025 by rpki-client