Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: 7qgXw+P03C8aFVaHuTwtm6Rc6C6Wblc0MbIFI+D1TMI=
Subject key identifier: 99:98:48:52:34:E6:99:70:A2:5B:EB:B6:E3:88:55:03:55:D1:34:4F
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0198D4734F8C203279CDC133C4AF49350C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1268
Signing time: Sat 23 Aug 2025 01:03:03 +0000
Manifest this update: Sat 23 Aug 2025 01:03:03 +0000
Manifest next update: Sun 24 Aug 2025 01:03:03 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: oMn6yBumhsRCyNNa3NwG9ujCbg+nh4LCk5kqxYx98U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4f:8c:20:32:79:cd:c1:33:c4:af:49:35:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Aug 23 01:03:03 2025 GMT
Not After : Aug 24 01:03:03 2025 GMT
Subject: CN=9998485234e69970a25bebb6e388550355d1344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:7d:4a:21:91:31:c1:15:36:69:c4:c4:d8:
49:cb:ac:00:55:7a:fc:fc:2f:b9:89:6f:28:bc:cb:
8b:7a:5f:3f:db:21:e3:8f:21:14:70:33:37:f6:43:
cb:ea:c1:92:0f:86:c9:ce:e7:67:e1:a2:54:3f:83:
7e:bd:3a:ce:db:f4:43:c8:23:f6:11:38:e0:94:8d:
4c:2b:5d:c2:06:72:1c:c7:5e:50:9d:4d:6f:da:62:
03:27:7f:52:f1:9f:e9:2b:f9:e5:2b:38:01:7c:7b:
ab:a6:fe:37:f7:63:ac:78:20:26:f4:3e:0c:e7:22:
d1:03:5c:06:23:e5:b0:a2:d9:22:23:07:6a:55:4d:
97:f2:2b:5c:02:9b:40:3f:c3:81:1d:ce:95:b5:a6:
84:e1:78:f4:92:6f:42:e0:e1:ae:e4:76:48:37:db:
68:06:45:31:5e:8c:be:81:37:e3:76:8a:0c:99:3a:
c3:ea:b9:a0:ef:75:da:55:e5:ea:87:e0:1d:84:5d:
d6:7b:d5:55:be:af:5b:81:eb:68:ea:f5:89:df:ad:
86:26:a7:07:e6:e8:3f:7d:9d:64:79:1d:a6:45:9b:
15:0a:a4:aa:a0:e6:e0:cb:cd:d4:eb:ee:ad:10:9b:
93:b1:1a:9c:c4:d4:6d:6f:2b:03:ab:35:74:02:3a:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:48:52:34:E6:99:70:A2:5B:EB:B6:E3:88:55:03:55:D1:34:4F
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:38:a0:04:70:2f:53:a3:ef:a9:ff:13:98:ea:e1:05:ae:
9b:de:ba:0b:ec:87:74:69:1a:ad:08:39:f0:5a:b1:d0:10:d8:
5e:6a:d7:18:f0:84:3c:4f:7c:a4:af:8a:b9:b1:ca:13:91:47:
c4:43:3a:79:ed:41:d9:86:38:80:6c:77:a0:60:59:2e:bb:09:
a7:8e:73:ef:db:59:27:32:4c:ca:d7:50:7a:e7:78:ab:cb:b8:
04:ed:ef:a5:c3:b5:1e:e8:cb:dd:f7:c3:ef:10:5b:e4:79:3b:
45:47:72:94:73:db:d8:86:44:a2:fd:76:80:ee:3b:d2:65:ef:
b7:fc:7f:55:63:c2:53:16:c4:3b:d4:05:75:0e:e7:5f:e1:0e:
99:d4:fa:3a:cb:26:bf:9d:9b:a1:79:f5:ab:a5:58:64:65:5f:
90:14:7e:10:90:00:d0:b6:3f:87:ee:90:a7:6b:08:2c:62:ec:
42:88:3f:58:b7:81:28:e4:77:67:84:f5:59:5d:11:bc:96:ec:
93:c9:8e:43:38:3e:f7:46:56:e9:39:fa:38:3d:a9:03:e7:ab:
28:9d:6b:50:f2:36:34:14:c5:3a:6c:f5:a9:ab:1b:1a:59:dd:
8e:74:a2:27:9e:ae:9e:c9:f4:e8:a1:22:59:ed:7c:bd:de:13:
9f:10:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:51 2025 by rpki-client