Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: Oqkf6W8STKFgrw9DeD1vlTDoB7PoXMAR447Uf6jqODQ=
Subject key identifier: 4F:F5:1F:38:BE:08:7B:86:2F:05:29:E5:76:F8:C3:17:71:E5:EE:53
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 0198D773C60F4EBC315AF01171CA1CD3B1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 1379
Signing time: Sat 23 Aug 2025 15:02:25 +0000
Manifest this update: Sat 23 Aug 2025 15:02:25 +0000
Manifest next update: Sun 24 Aug 2025 15:02:25 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: ZLe7X40D92GlxN94+cj5jGDsxu+5we8mcjsEQvFPaHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c6:0f:4e:bc:31:5a:f0:11:71:ca:1c:d3:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Aug 23 15:02:25 2025 GMT
Not After : Aug 24 15:02:25 2025 GMT
Subject: CN=4ff51f38be087b862f0529e576f8c31771e5ee53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:62:0b:e8:96:42:f3:4a:09:e1:66:b3:5d:
26:fb:46:6d:29:2c:2d:36:b8:66:ad:29:59:58:5e:
8c:13:f8:45:e0:3a:2b:b4:89:84:12:cf:c6:08:13:
b6:35:b9:7a:04:dc:31:38:a1:6d:a4:75:96:17:21:
5f:35:fb:7c:23:7b:c2:c1:bc:76:34:0f:0b:41:37:
75:44:cc:41:e2:bf:53:db:e5:a4:44:96:20:1a:24:
83:5d:80:57:33:e7:70:67:3d:c3:6a:da:11:a0:e5:
d5:9a:cd:74:5c:5f:8e:70:04:f5:ca:48:9f:b7:3c:
13:66:87:d6:29:53:c3:ec:61:55:fd:f4:4e:40:0a:
7e:7a:2b:c0:06:8e:12:88:2d:0c:04:09:40:0c:47:
27:d5:d0:cc:f9:9f:b9:70:38:59:e5:ce:76:31:ce:
d0:c1:63:06:4d:70:6a:53:f4:46:63:fb:07:1f:f4:
72:c9:e3:d2:68:76:ec:42:dc:45:a6:99:c1:b0:19:
03:67:ee:e8:1d:fc:a6:7b:20:c4:8a:9f:db:e7:e8:
e1:bc:1e:9e:13:4a:02:d6:a8:23:d8:40:70:98:21:
93:4f:d5:5c:f6:e2:c1:c2:ae:3d:22:0b:47:45:99:
77:69:cb:dd:7b:5f:55:65:70:1e:20:1c:c0:58:61:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:1F:38:BE:08:7B:86:2F:05:29:E5:76:F8:C3:17:71:E5:EE:53
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bd:5e:af:e1:eb:55:81:9c:f7:80:33:62:98:87:d9:1d:89:
63:40:aa:25:91:8c:ac:82:ff:7c:7e:0e:69:d5:09:a9:60:49:
b0:65:c2:87:52:76:fe:dd:a7:58:34:81:81:98:50:79:01:97:
78:5d:3b:dd:e9:96:ac:1c:e8:c8:c6:b4:4a:02:e1:59:93:98:
12:9e:95:5a:95:a5:2f:08:a5:5b:b7:13:e5:96:c4:4b:7b:d6:
82:a9:8f:65:bd:1f:97:1c:f7:e1:36:71:9b:1d:8e:52:c5:88:
57:e1:66:c4:10:d0:76:ad:c9:5b:78:de:c7:98:58:ae:1b:5a:
38:55:61:41:21:a8:40:7b:b7:54:a2:bc:66:d6:2c:9e:7d:8f:
d5:9d:ef:8e:7a:cd:18:95:d4:5d:ac:29:4e:22:18:10:f1:9b:
a0:fe:4e:67:b2:02:bf:67:0d:ae:8d:56:fc:73:e2:fa:ac:1d:
b1:59:30:d9:0b:dc:3d:8d:c9:25:7e:2d:66:eb:17:13:df:62:
02:2e:40:d6:86:2b:d1:d0:25:bc:7b:99:a6:c5:f2:49:10:d8:
ff:e5:b7:1b:01:c9:1f:11:ed:3e:93:cc:c8:02:37:2a:44:fe:
39:9c:f9:06:95:f8:e9:b7:f3:4b:04:a0:25:f5:92:f6:04:0c:
6e:37:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:36 2025 by rpki-client