Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: LWmgQ7Vxn7bpUl8b4m2inMx2u4CKo++eOaBdkOUVD6A=
Subject key identifier: FF:71:79:78:A4:11:F1:37:BF:03:8F:89:64:28:98:3F:01:A9:E3:F0
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 0199FBEB84871E957CF82758AE7868112918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: MJiGkYR45zRgYJJ2xn8pgB+hNzq4Dz8TPJgShdqBUoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:84:87:1e:95:7c:f8:27:58:ae:78:68:11:29:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=ff717978a411f137bf038f896428983f01a9e3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:1b:f4:f1:ea:aa:61:92:b4:84:aa:8f:3b:
12:bd:fa:48:10:7f:e1:50:85:04:e2:9b:5f:38:ed:
77:ba:30:cc:59:f4:fc:29:58:64:b0:47:5e:cd:82:
18:b4:f2:22:c6:31:53:f6:2d:5e:61:64:2c:78:54:
97:01:86:f3:1d:ee:a4:22:74:11:91:97:e2:ed:ea:
7b:df:f5:c6:4c:9a:3b:39:e9:06:65:00:00:6a:1a:
d5:e8:53:99:59:8f:74:b9:ab:f5:c1:40:10:97:c5:
e4:fd:02:3f:a5:28:41:43:df:1c:d3:b8:ac:f7:0e:
34:87:50:4b:7d:c4:6c:5c:87:42:36:23:f3:fb:1d:
2b:c6:51:e1:f1:a1:cc:e7:f8:3e:b0:ad:38:62:01:
56:e2:c8:94:14:a0:66:1d:0b:53:c2:eb:7d:c3:15:
09:23:43:0d:a5:4f:07:0a:52:1c:ed:26:d7:db:69:
0c:da:c5:64:cc:c0:bf:72:bb:26:a8:6b:80:af:eb:
ed:f8:7f:8f:40:51:48:dd:14:f0:7f:37:7e:44:21:
67:2a:ce:e0:4f:1e:ff:4a:f8:54:9d:3a:38:f1:39:
49:85:57:4f:73:92:fe:13:35:bb:49:18:fb:57:31:
64:95:f5:a7:ee:bd:28:60:85:93:76:4d:78:6c:c3:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:79:78:A4:11:F1:37:BF:03:8F:89:64:28:98:3F:01:A9:E3:F0
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:fa:61:e4:7b:5c:56:aa:69:b5:56:b4:50:d5:41:17:bf:
6a:f8:b1:a0:74:6f:ed:1c:0c:93:96:6d:62:3f:95:a9:f5:75:
9a:e7:1e:8b:67:30:ba:b8:0e:72:d7:1e:a1:ff:c7:1a:a3:61:
b8:e8:9a:bf:43:ec:52:66:cb:d3:06:62:5d:a6:0c:34:da:0a:
31:4a:61:d6:50:b5:8a:b7:83:92:30:6e:23:ea:f5:38:05:55:
f4:b6:a5:b6:8e:15:c8:7a:8d:1d:fc:00:8d:30:9b:53:77:f0:
08:36:9d:89:2c:e0:4d:15:34:5e:19:de:2d:f2:09:d4:9e:78:
f4:08:7d:50:e2:a8:80:e4:66:31:d6:41:00:27:3c:6c:5f:68:
4c:81:ed:db:87:da:37:73:72:41:01:c1:29:69:d7:81:69:d0:
d9:cf:6a:17:69:76:7b:42:27:ef:e0:bf:7a:35:88:09:91:ed:
6f:f5:d8:6e:dc:d9:8a:f5:79:31:3e:4f:63:44:fd:9d:d5:52:
a9:da:52:d5:e1:6d:6c:1c:81:0a:4f:8f:1e:e8:de:6c:4b:d5:
32:8c:c6:14:c8:cf:7b:27:0a:4b:55:57:32:6d:c6:0d:25:14:
2e:04:8a:00:b9:fc:0e:99:eb:49:52:da:a8:97:fc:be:2d:28:
3c:19:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:03 2025 by rpki-client