Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: 9Um+HoKTCG3rbhExOCFXlZH6KWN481rJ5ap/WlhJ6+M=
Subject key identifier: E0:8E:20:4C:09:CD:AB:F8:2B:39:57:D1:8B:22:14:6E:1D:DB:60:77
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 0199FCFDA21B53A0DAAE5C89748416E6352F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: jWA+zVwm5qdsluLAcOAvCXwxQBFodNkxw/Dj6zrM1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a2:1b:53:a0:da:ae:5c:89:74:84:16:e6:35:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=e08e204c09cdabf82b3957d18b22146e1ddb6077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:d2:8d:d1:47:42:87:4b:b1:0a:70:04:ef:
36:fb:19:c8:8f:25:2d:1c:76:2f:57:b6:01:34:84:
47:a5:ce:87:b6:71:03:03:c8:a8:7e:82:80:96:21:
55:93:d6:29:10:08:e4:0b:6b:64:0e:a2:27:b0:c3:
4d:70:04:12:87:10:1f:fa:36:d8:3a:44:1d:ba:3d:
9f:33:5f:42:60:3b:3a:48:e3:c8:a3:c8:52:15:86:
62:fd:7d:cf:53:37:0a:d5:85:5d:95:da:3b:c5:10:
e5:a0:b9:32:81:73:b0:e9:68:61:5b:57:48:bf:1f:
75:61:bb:d6:6b:71:a3:64:3c:2f:0b:16:04:dd:f0:
41:76:dd:84:2a:da:45:2d:53:e6:e0:e8:c2:64:cf:
a6:9d:6f:40:bb:fd:4f:c6:95:9e:b5:c9:33:fb:55:
00:5b:1b:43:59:6c:56:1e:bb:66:b4:82:41:3d:42:
0b:f8:98:d6:15:4f:01:a3:a2:c2:61:6f:e4:3e:cd:
00:22:f5:fb:3a:4f:de:55:3c:ee:59:c5:99:6e:78:
c4:1b:fd:56:c5:9b:d0:1f:2a:02:8f:e4:5c:60:3b:
2b:59:e0:c5:b8:8a:f5:86:f2:52:d9:54:67:c7:72:
7d:36:a0:e7:a3:ea:ed:d5:4f:6b:79:36:7b:4d:08:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:20:4C:09:CD:AB:F8:2B:39:57:D1:8B:22:14:6E:1D:DB:60:77
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:c6:88:e0:75:f6:cd:0d:67:c3:11:d8:90:9d:42:0c:73:
69:10:82:24:35:4a:0e:71:cd:be:12:e3:2f:4b:f2:3a:22:c5:
92:ac:49:c7:ca:f0:a3:09:5c:16:bb:a3:41:ae:fd:87:6f:5e:
67:f5:5d:15:1b:4a:0b:fe:fb:30:3e:2a:9e:6c:e3:88:9d:09:
34:3c:39:f9:8e:9e:25:9e:16:11:d4:83:91:ee:8e:79:75:f1:
03:8d:3f:50:f8:78:1d:59:cb:a8:c5:64:51:12:03:d5:ec:76:
e3:e8:90:5d:76:8e:f3:fb:18:2d:01:81:d5:23:46:aa:ee:e2:
65:fa:41:5e:8b:f8:ae:3c:d4:70:6a:f6:a6:f9:fc:db:ef:a9:
51:2c:4b:84:f1:f8:5a:d5:d9:c9:e9:79:26:43:58:fc:b2:bf:
6e:d1:b1:a3:a9:e5:dd:bf:56:a3:aa:94:3a:41:41:3f:d3:48:
b8:60:31:1a:f2:4c:0e:f6:98:e1:9e:83:b6:f7:bf:3d:ea:1c:
4e:b7:4d:ed:f6:fd:a2:e7:ab:3d:54:0f:25:4e:2f:0d:52:64:
6f:f9:41:eb:e9:4a:4f:0e:36:06:3c:a4:60:fc:04:66:b5:3a:
9f:60:ba:9b:d1:10:bb:76:39:04:76:31:1f:11:20:d7:22:35:
d7:c1:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:52 2025 by rpki-client