Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: G9Nj5N9dfuOwS4nydsSZH0cbKDP5dsJqp1u7WJtDeVI=
Subject key identifier: A3:25:7F:E6:42:8B:63:83:F7:94:B9:4B:A3:D6:B7:4C:57:46:C0:38
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 01989713ABD53BB098425E3F0151664E51F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0820
Signing time: Mon 11 Aug 2025 03:01:45 +0000
Manifest this update: Mon 11 Aug 2025 03:01:45 +0000
Manifest next update: Tue 12 Aug 2025 03:01:45 +0000
Files and hashes: 1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: W/5AJQtKZrxanYrjgQh7n76Nfr9YBmpcRSpwOFtmCys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:ab:d5:3b:b0:98:42:5e:3f:01:51:66:4e:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Aug 11 03:01:45 2025 GMT
Not After : Aug 12 03:01:45 2025 GMT
Subject: CN=a3257fe6428b6383f794b94ba3d6b74c5746c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:ef:90:17:ef:5f:7c:72:c2:c8:61:68:9b:
b0:ac:1f:6f:3b:f1:8d:be:5a:7e:5a:f1:71:3d:b1:
1d:1a:66:d3:a1:8f:b7:0e:40:7e:fc:74:fc:e9:0c:
e8:8d:f8:ce:0c:1d:de:43:9d:34:4c:cf:1f:2f:54:
76:06:dd:88:f0:bc:ee:b9:4d:bb:54:49:8e:76:ca:
ce:bd:36:c7:be:36:75:c4:17:ce:e0:bc:21:89:1c:
e7:48:87:dc:87:6e:9a:9e:ac:90:46:c5:e6:5f:eb:
ef:6e:ce:b6:5f:b8:b8:bb:f3:c4:d1:b5:ec:1b:29:
12:51:e3:98:09:67:d7:6e:01:b8:d3:c2:ae:72:3a:
66:30:a3:7f:c6:91:f3:13:92:3b:02:56:da:10:a6:
33:0d:c8:63:0b:82:b9:2f:4d:16:31:a4:61:f8:57:
ad:1e:a1:bb:e1:76:ec:27:38:dd:4d:c4:42:48:2c:
67:cf:a5:4c:73:79:f2:cd:70:92:ad:0c:63:fc:d7:
f0:9b:a5:1c:31:00:fe:df:9d:75:99:81:63:78:93:
b6:20:d6:e9:48:df:51:29:dc:e7:79:05:59:1c:16:
bf:5b:98:a3:90:1e:4c:be:e4:f1:7e:0a:fa:64:32:
b6:ab:25:5c:a4:f4:05:f7:93:77:95:5b:26:9d:dc:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:7F:E6:42:8B:63:83:F7:94:B9:4B:A3:D6:B7:4C:57:46:C0:38
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:bc:84:64:92:7b:6a:9b:e1:ea:fc:37:68:1f:21:aa:a8:
e2:09:17:32:8f:8c:26:09:11:63:a6:cc:44:42:62:08:51:23:
5d:69:c4:e7:bc:f0:91:83:23:29:ba:95:28:1d:47:43:d0:a0:
0b:25:aa:62:83:64:52:84:65:59:e9:8d:c4:d0:b2:df:24:35:
84:75:25:10:c3:e9:db:83:de:65:f2:5b:ad:ae:e5:1a:e9:56:
33:b0:c0:89:df:1a:b2:18:bc:79:91:3e:33:d1:2b:2c:56:bc:
56:1d:03:a9:0e:7e:fa:13:cd:1a:64:34:3b:f6:ed:ec:21:2f:
8e:f6:82:f9:d1:a2:fa:b0:ef:d0:77:03:82:db:3d:94:55:da:
27:21:34:b1:00:ca:7b:57:da:7d:0a:a4:d0:ec:d6:b2:78:11:
a4:17:ce:a8:53:42:d5:87:4c:0f:c7:42:d4:16:9e:54:68:a1:
74:8c:79:86:d9:26:01:df:be:0f:eb:e5:1b:8d:48:24:9d:b5:
f2:7e:0d:c7:66:c3:bc:4e:43:6f:1f:90:c5:1a:42:b2:29:6e:
a4:63:4b:32:59:e5:f9:eb:76:57:e3:c2:fb:cf:9c:c3:14:fc:
d5:6c:92:3b:ab:db:a8:e0:c8:b2:39:8e:01:73:93:ab:47:c4:
62:e8:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:13 2025 by rpki-client