Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: ijLbVKgjux1HoQDLy/KvIqaTOYfuvpyUBIAP+3rFKIQ=
Subject key identifier: FA:54:CB:BE:90:2A:F3:81:24:B4:D0:33:AB:FF:75:4F:75:25:21:DC
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 0198D5BC018ABCA8A28401ED20A2199E85AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: OxAUScVy3G2K9+qe5/6+Rfn0dLNTWpll5ovNWndzFyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:01:8a:bc:a8:a2:84:01:ed:20:a2:19:9e:85:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=fa54cbbe902af38124b4d033abff754f752521dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:11:81:f7:fd:08:ad:d0:e5:a6:36:12:7a:
36:e6:fa:10:5f:e1:1b:46:d9:f9:08:b5:1f:ee:35:
2f:68:0c:98:1b:97:f4:d5:5c:e0:19:e4:83:41:4c:
22:49:6a:43:c4:75:c2:50:50:f6:6f:27:ae:fc:29:
10:24:87:5b:b4:b6:92:ae:d6:9d:2c:56:a9:4f:aa:
cd:39:96:15:69:26:24:5c:01:4a:e9:54:1d:e1:47:
34:ed:36:5d:af:52:87:9c:7a:57:eb:bd:76:12:7f:
66:26:60:f0:2b:c6:0b:1e:41:1b:cc:7f:62:37:ef:
4a:91:02:be:43:40:e2:24:5b:98:41:c4:de:de:91:
1c:01:ff:5b:21:0f:78:3f:c2:f8:5c:f8:67:1e:92:
94:4d:2f:61:9b:fa:c6:ca:59:85:b1:ab:e3:f5:89:
e9:f5:13:6f:7a:1d:e9:56:3e:2e:03:f1:2e:e0:88:
50:28:f7:ee:d9:81:c2:6c:32:7d:1e:38:ba:bf:fb:
db:5f:fb:f3:04:fe:ea:5e:ff:e7:50:d4:be:15:db:
85:ae:16:9d:6c:38:0d:4e:76:75:4d:c0:18:71:35:
63:93:ee:9f:e8:f7:8f:84:05:53:98:37:3a:d3:6d:
1a:91:5e:4f:a4:08:19:86:18:b2:f1:74:55:bc:40:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:CB:BE:90:2A:F3:81:24:B4:D0:33:AB:FF:75:4F:75:25:21:DC
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:cb:b5:5c:cf:3d:ee:21:e0:ad:07:d8:42:7a:24:fc:21:
bc:9f:4d:e4:10:7a:20:a6:81:35:fc:bf:a8:79:11:e3:d9:fe:
b5:c4:bd:59:9f:37:ad:02:a5:1e:59:1d:df:eb:80:6b:ee:8f:
ab:f4:00:ea:76:74:5e:4b:ce:12:46:04:7d:5b:d7:31:7f:7c:
26:b9:46:9b:b5:10:34:1e:74:0d:39:c6:6a:b0:9f:53:6c:f8:
21:1e:c9:68:c8:ef:a0:f3:fb:35:30:ac:a1:55:b1:0e:4e:5d:
89:8d:46:70:65:c7:a4:de:41:03:e4:ef:dd:9b:c2:2b:32:e5:
10:78:5d:47:18:3b:65:82:a8:ab:3f:bf:a4:5e:91:c9:6d:c7:
d3:7f:f0:13:df:eb:e3:db:c1:d3:1c:fc:ef:71:cb:44:18:db:
dc:08:e6:65:9f:38:8f:f7:c4:a8:ea:c7:66:6b:e1:ee:1c:9f:
ae:cb:b1:2b:10:f2:ba:6d:66:93:b5:92:e9:76:85:ba:0f:ca:
b4:e2:06:fa:b3:5c:ff:23:ef:ea:48:a8:9c:7e:00:5f:74:c5:
82:f5:47:db:da:15:b3:22:b4:01:71:5e:90:c5:e7:16:0e:5b:
c6:76:04:86:e8:07:fb:c5:40:76:95:c0:3b:43:aa:7c:ee:b5:
09:2a:20:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAGKvKiihAHtIKIZnoWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1
M2UwYWEwHhcNMjUwODIzMDcwMjA0WhcNMjUwODI0MDcwMjA0WjAzMTEwLwYDVQQD
EyhmYTU0Y2JiZTkwMmFmMzgxMjRiNGQwMzNhYmZmNzU0Zjc1MjUyMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4gRgff9CK3Q5aY2Eno25voQX+Eb
Rtn5CLUf7jUvaAyYG5f01VzgGeSDQUwiSWpDxHXCUFD2byeu/CkQJIdbtLaSrtad
LFapT6rNOZYVaSYkXAFK6VQd4Uc07TZdr1KHnHpX6712En9mJmDwK8YLHkEbzH9i
N+9KkQK+Q0DiJFuYQcTe3pEcAf9bIQ94P8L4XPhnHpKUTS9hm/rGylmFsavj9Ynp
9RNveh3pVj4uA/Eu4IhQKPfu2YHCbDJ9Hji6v/vbX/vzBP7qXv/nUNS+FduFrhad
bDgNTnZ1TcAYcTVjk+6f6PePhAVTmDc6020akV5PpAgZhhiy8XRVvECW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpUy76QKvOBJLTQM6v/dU91JSHcMB8GA1UdIwQY
MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt
NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl
LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWDLtVzP
Pe4h4K0H2EJ6JPwhvJ9N5BB6IKaBNfy/qHkR49n+tcS9WZ83rQKlHlkd3+uAa+6P
q/QA6nZ0XkvOEkYEfVvXMX98JrlGm7UQNB50DTnGarCfU2z4IR7JaMjvoPP7NTCs
oVWxDk5diY1GcGXHpN5BA+Tv3ZvCKzLlEHhdRxg7ZYKoqz+/pF6RyW3H03/wE9/r
49vB0xz873HLRBjb3AjmZZ84j/fEqOrHZmvh7hyfrsuxKxDyum1mk7WS6XaFug/K
tOIG+rNc/yPv6kionH4AX3TFgvVH29oVsyK0AXFekMXnFg5bxnYEhugH+8VAdpXA
O0OqfO61CSog6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:06 2025 by rpki-client