Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: pw2gDvEVlMf2QxOi2f6NdhbFgboHsiCxrgVbPau/6FQ=
Subject key identifier: 07:F7:48:AA:CA:05:4E:7D:7D:48:BE:B8:78:D5:63:84:55:36:E1:70
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 019A4D739497097915C14811E81133F972E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0903
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: zjOAi6JxnKsGagfqxf0px/jdByoEscNh7KPB8cmejsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:94:97:09:79:15:c1:48:11:e8:11:33:f9:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=07f748aaca054e7d7d48beb878d563845536e170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:d9:32:ff:2c:42:d6:fe:c9:4d:b6:82:94:
ef:91:da:13:38:af:93:71:72:81:b8:f2:48:08:f3:
e1:b6:02:07:12:5f:c6:9b:fd:18:e7:19:8b:ae:20:
01:a9:e2:1c:2c:63:74:db:5e:2b:60:d7:48:5e:3e:
7e:1a:01:05:0f:91:69:16:87:62:d2:ea:28:a0:0b:
1d:17:79:ec:7b:5c:3c:35:1e:3f:60:64:29:ee:9a:
fe:0f:2d:f2:f9:12:5a:bb:f1:62:e0:fa:98:ce:b2:
96:48:cb:3d:bb:76:c2:f4:32:4e:e7:8f:fc:05:05:
7a:48:8e:54:44:ca:94:49:05:ba:7b:9d:a2:b3:6b:
df:d0:b3:d2:3b:7c:64:b6:e2:cd:69:22:ef:39:b5:
ec:1e:b4:e4:82:90:72:b9:a8:67:ca:10:b2:03:b8:
7e:a9:1a:d6:83:0b:69:0a:72:72:ea:bd:6f:25:51:
2a:02:63:e4:df:19:1f:b4:8b:be:42:93:32:16:4b:
2c:9f:df:ec:d8:61:3a:f2:21:ff:14:ce:b0:3a:f3:
96:05:03:cb:a7:91:45:e3:7d:29:fa:d4:ef:0a:20:
f3:92:e2:2b:ca:1d:1c:2a:9e:57:d4:c4:e2:81:6e:
13:9c:1a:2f:55:ed:c6:19:24:d1:c8:81:69:3b:a8:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:48:AA:CA:05:4E:7D:7D:48:BE:B8:78:D5:63:84:55:36:E1:70
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a1:f0:1b:04:f9:58:34:6b:f1:fa:92:62:08:78:a6:22:56:
a6:01:30:75:ab:61:07:b6:99:e0:4c:af:3b:2f:f0:9e:f3:99:
38:be:6c:41:94:74:e8:95:84:18:a8:71:ab:46:24:b9:19:1c:
ca:1c:53:31:b5:44:2c:ee:d7:b2:6b:c1:eb:a9:2d:00:8c:bc:
69:aa:2a:5e:bb:4c:26:7c:63:dc:a5:37:9d:24:99:c7:04:5c:
81:d3:a5:61:87:2f:f2:7a:1f:68:7e:59:ab:7f:50:9b:1b:50:
b6:19:51:df:8f:8d:4c:9b:ee:07:8c:f6:76:96:38:20:0a:45:
4c:e0:6d:4e:08:d0:43:fb:62:ea:bf:35:ee:5c:8a:fe:a9:92:
8d:6c:2b:cd:eb:2a:01:66:93:54:76:29:42:87:a5:61:58:65:
2d:aa:e0:2c:34:1e:8f:2b:b6:b0:0e:5e:4d:71:67:a4:62:e0:
91:95:99:c6:b8:1c:90:0c:3b:f0:75:40:5d:ee:5c:a0:a8:e0:
b8:9f:d7:6c:7b:53:a9:9d:ae:7b:fd:d4:58:3e:a1:63:e8:aa:
34:52:a5:14:0a:bd:73:68:85:c8:1c:95:95:70:87:9e:da:cb:
1c:4b:17:76:9a:01:7f:ac:a0:0c:10:e5:d1:61:49:1c:4f:c5:
a1:0e:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:55 2025 by rpki-client