Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: xixpVBD1X3OQ04J4r3ekotYmCelE6sRvvGVU9NueFEs=
Subject key identifier: CA:69:5C:8B:9A:3A:B9:2D:5A:9B:49:0E:9F:E9:68:A8:88:17:F2:1D
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0198A04DAC7F74E4176ACCE47B5F58D732F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 22:01:41 +0000
Manifest this update: Tue 12 Aug 2025 22:01:41 +0000
Manifest next update: Wed 13 Aug 2025 22:01:41 +0000
Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: FuWNNBVDCsAzZq/qet9lJNJdZRDfRNOyHFoamaA6v34=)
2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:ac:7f:74:e4:17:6a:cc:e4:7b:5f:58:d7:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Aug 12 22:01:41 2025 GMT
Not After : Aug 13 22:01:41 2025 GMT
Subject: CN=ca695c8b9a3ab92d5a9b490e9fe968a88817f21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:c2:40:3a:41:b3:4a:10:48:98:be:4d:60:
12:cf:90:53:96:e3:e1:1d:d9:e8:ed:a7:f0:89:55:
a5:92:6e:ee:21:13:9b:cf:6b:3e:62:0f:b0:58:57:
c5:71:0d:e9:13:d6:44:aa:7a:67:b8:51:14:79:d7:
4a:a9:5e:48:90:e7:97:4e:57:89:67:69:f7:c9:87:
af:13:4a:f5:15:d7:16:12:79:de:e6:2d:b6:00:49:
04:e8:c4:8d:d1:c1:b7:10:c2:a9:d7:db:d2:b1:a2:
26:44:d6:62:a8:92:7d:71:09:df:66:0a:d6:33:fa:
0b:78:28:2c:b0:c8:e1:cd:86:aa:57:1c:d3:55:c6:
74:91:a2:4e:86:df:cf:a5:c8:76:47:e1:3d:4a:2f:
8e:d8:e2:3a:c5:df:13:1e:3c:a7:94:28:c3:d6:6a:
7a:da:e5:5f:83:3a:43:97:7b:b0:2e:8c:db:4b:61:
0f:f9:e8:ef:7f:58:c9:16:fb:ae:64:a4:f6:61:97:
7c:6f:66:f9:5e:b9:a8:02:90:3f:1b:d5:91:1e:5c:
f4:2e:d4:ca:ea:d9:54:69:fe:ad:ab:44:0c:a5:86:
a3:15:b9:eb:3c:f3:17:81:e9:30:41:eb:8d:0f:f1:
7e:84:9f:79:19:2e:b5:74:88:dd:f1:eb:fd:95:a5:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:5C:8B:9A:3A:B9:2D:5A:9B:49:0E:9F:E9:68:A8:88:17:F2:1D
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:64:1a:f2:eb:45:17:7f:a0:21:d0:d4:de:59:a9:6c:34:
e3:e3:14:6e:27:f3:7a:70:10:bc:2a:12:48:24:70:fd:3f:f7:
2d:5d:46:a8:31:12:09:e8:9c:c0:f5:fb:5c:2d:2c:ed:95:7c:
ba:7e:56:01:d0:95:a9:60:8e:b8:cb:53:3f:10:2c:a0:df:15:
c2:bb:db:21:af:9c:4b:23:03:3a:57:fc:0c:ef:98:66:35:5a:
01:10:c0:f0:71:eb:c8:64:4b:5d:ca:e4:27:6b:e0:5c:26:30:
d5:09:6c:21:9c:e0:8f:82:96:d2:6d:24:d1:33:12:de:0f:77:
7f:6c:ab:3e:f3:a2:6b:b1:67:57:75:12:83:af:1a:2d:6e:a7:
86:08:0e:b5:ee:19:36:ec:5b:aa:a6:02:29:b4:a7:2d:20:08:
f7:0c:f4:c5:df:62:99:eb:11:3c:50:50:69:54:23:b2:95:1a:
ac:c8:5b:aa:26:4f:43:12:b4:33:3c:b6:6f:14:62:91:2b:be:
04:78:e1:ee:52:e8:19:98:0b:67:3b:2b:db:97:32:4f:a2:58:
00:0e:02:4f:b4:60:ab:33:6e:c8:50:48:0c:c8:5e:f7:c4:05:
99:55:d3:67:36:74:c8:5d:0d:24:f0:a5:11:a6:43:2e:b1:17:
af:0a:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:10 2025 by rpki-client