Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: c5Tdi07zcW0nVtcmABEhln4ixetYdSVsMkiHtk8/7Io=
Subject key identifier: A0:5F:FD:C7:CB:CF:59:03:27:57:52:BC:F2:52:93:D7:20:69:59:18
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0197B6A0F0FBF4503E23F3A418250D68280B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 11D4
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: UsbpXd5V2Ih/+Z2+8nquIKlK8LSKDI8zml/uCpnyZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f0:fb:f4:50:3e:23:f3:a4:18:25:0d:68:28:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=a05ffdc7cbcf5903275752bcf25293d720695918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:04:c7:54:52:57:0f:0d:ad:22:a6:01:52:
07:bc:5b:63:86:e1:e5:77:0f:3b:a7:11:fb:98:9a:
39:df:0c:51:59:2e:45:8c:f8:5b:46:40:49:55:29:
2d:60:1e:c8:13:6a:22:74:4c:d6:37:b8:a8:fe:04:
d9:c5:a0:e4:6c:2d:ed:9a:e3:d8:aa:86:50:2a:4f:
12:5a:b0:99:81:86:f2:14:d1:d2:fb:4c:81:84:b7:
21:72:9d:85:b6:68:a1:af:91:0f:43:53:85:7d:8b:
50:6f:e0:07:4c:8e:99:1a:89:73:69:04:2b:27:bd:
a9:a4:8f:d7:88:83:6b:d0:8c:05:a5:09:1f:14:78:
74:f4:03:51:24:46:ca:87:1e:fa:2a:71:d2:59:51:
3d:43:85:7f:36:9b:03:fc:4d:8f:63:28:c2:f2:95:
84:19:1e:3c:fd:ca:59:a8:c5:85:c6:ba:e0:c4:42:
5d:7e:45:1e:88:f6:36:fd:f9:7f:f2:d3:7a:d2:0d:
20:fd:35:2b:c1:37:7d:de:5d:d2:81:ad:e9:f7:e7:
f8:8d:50:66:da:c2:7b:f7:5b:01:7d:71:94:e1:e5:
f0:2a:52:c4:6f:f6:20:64:4b:4f:23:da:5d:48:73:
72:97:db:38:0e:33:5e:16:a4:ed:89:2c:33:88:de:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:FD:C7:CB:CF:59:03:27:57:52:BC:F2:52:93:D7:20:69:59:18
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:36:ac:4c:70:e0:0c:f2:a5:35:48:3f:de:22:bc:af:b8:fd:
02:0d:02:15:8d:56:2e:49:0e:f3:3b:e8:1b:76:82:d2:95:5a:
4b:0c:ff:f7:7b:52:8b:1c:6c:39:90:1e:54:ad:d4:27:07:e1:
e0:d3:e1:67:d4:e2:5f:d4:ee:fa:fb:35:f9:38:3b:ff:a0:db:
96:29:06:32:d7:0c:16:a5:53:4f:09:66:c6:53:d2:03:19:06:
19:37:aa:52:0d:2d:f9:03:48:42:4e:8c:70:20:67:9a:40:b8:
bd:e3:94:f1:e2:7a:91:8f:87:58:10:78:cd:5a:84:99:f2:f9:
ab:61:ca:d4:a9:8b:2c:f7:30:43:72:9d:eb:e8:92:63:80:3e:
93:ba:5a:92:e3:8d:f9:1a:06:02:f0:be:58:34:00:17:a3:95:
ad:26:96:b7:ef:96:9c:28:93:2d:b5:cb:8e:02:50:a5:61:df:
51:6b:64:2d:91:5d:6e:b2:fa:a3:43:2a:73:00:a7:9b:a7:40:
51:5b:08:76:8a:1b:d7:0a:01:78:d0:4c:fb:92:76:22:0d:00:
01:e0:ba:aa:c3:e7:19:5b:02:eb:ab:4b:28:60:a2:e5:34:c2:
16:bc:ac:65:e1:b1:59:40:60:c6:5e:6e:e5:46:b7:94:e8:59:
8f:36:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:04 2025 by rpki-client