Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: bk+drnmX30NOnn3yzpJqRUCDzf5pAHwO07emq7/btBE=
Subject key identifier: FB:E2:7C:C2:39:A2:7D:F8:22:99:6E:43:15:D6:7E:F9:BF:F5:52:37
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 01989749CFB926F988B84966DDCD0DD6E6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0F9E
Signing time: Mon 11 Aug 2025 04:00:53 +0000
Manifest this update: Mon 11 Aug 2025 04:00:53 +0000
Manifest next update: Tue 12 Aug 2025 04:00:53 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: emD2oxM39y6nFn12hKNdezEZfrPjzDU1FcFyVgCuiLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:cf:b9:26:f9:88:b8:49:66:dd:cd:0d:d6:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Aug 11 04:00:53 2025 GMT
Not After : Aug 12 04:00:53 2025 GMT
Subject: CN=fbe27cc239a27df822996e4315d67ef9bff55237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:2e:5a:d6:33:94:18:cb:34:15:6b:d3:15:
2e:01:46:78:82:13:60:53:c4:4b:e9:da:bc:b3:f2:
82:b6:ac:ba:aa:3b:b4:d1:90:85:02:67:83:28:85:
8b:a9:86:5a:1e:5c:ce:62:a4:89:20:6d:a9:e2:6d:
0c:da:6c:af:4d:49:a0:6b:9f:2b:c0:05:52:11:0c:
cb:7d:88:64:f1:62:b3:9f:6b:36:90:48:41:da:0c:
a6:4c:fc:6e:90:25:b1:0f:f4:59:6d:5e:db:29:f9:
2d:a0:97:9b:b3:22:44:35:b1:f8:5a:fa:5e:ed:82:
7f:48:ee:b5:da:5f:2b:64:f6:03:15:73:85:ec:ff:
ca:d9:05:dd:ee:62:e5:36:06:1b:94:a0:4d:28:8b:
6f:03:23:12:44:39:a9:01:97:f7:87:67:b2:3d:ab:
08:84:26:06:d5:c6:40:df:19:f0:29:ac:80:93:6a:
90:cf:af:71:02:38:0d:fd:aa:80:e8:26:32:11:c7:
c3:c3:42:4a:6a:0f:a0:b7:69:79:c2:83:ed:e3:4b:
25:9b:fb:eb:e8:cb:ef:92:11:03:b6:38:16:11:71:
c9:a4:b0:9e:f2:6b:48:b9:01:47:be:51:db:bb:12:
9e:1e:cf:cf:00:b0:e6:5e:21:48:fb:d3:97:72:84:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:7C:C2:39:A2:7D:F8:22:99:6E:43:15:D6:7E:F9:BF:F5:52:37
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:0b:2e:e7:75:a1:21:69:9a:50:11:62:42:a7:e2:a0:7f:
e8:66:52:44:8b:bd:6e:15:59:07:39:58:c6:8a:d3:de:9d:ca:
99:d7:07:09:5b:4c:08:f2:82:3d:72:bf:8d:53:56:d3:bb:09:
f8:da:de:a0:3c:ee:17:b7:62:6a:b7:44:12:09:59:cb:2a:17:
61:c9:d2:c5:5c:91:28:5f:23:4d:a3:5c:e4:fd:0a:56:a9:d6:
3f:01:8b:01:ab:56:82:78:df:9d:cf:53:18:75:e8:24:08:ab:
aa:11:1b:72:f6:a8:b9:8f:c2:7d:a5:b9:aa:a9:b7:2f:f2:b1:
0b:3a:14:74:2b:b6:5e:eb:20:3f:bf:1b:b2:09:5e:37:98:2c:
93:7c:83:26:21:85:3e:cd:7c:55:1f:4e:7f:ca:aa:16:7e:51:
3b:12:5a:7d:0c:c1:56:20:32:00:23:96:20:6a:91:a1:c7:a3:
5d:71:f0:e7:95:ea:96:f3:45:aa:ee:69:f1:32:8f:b2:c5:f4:
a4:a3:65:11:67:4b:de:1e:8d:df:2d:18:a2:f7:41:23:bf:70:
08:b9:77:40:46:a0:84:09:48:ef:1c:fb:d9:f0:4b:5d:7c:ab:
d7:23:2d:46:95:4f:e7:17:4f:03:d7:2c:3b:c3:f2:d2:4a:b5:
39:2a:99:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXSc+5JvmIuElm3c0N1ubbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl
ZDYyY2UwHhcNMjUwODExMDQwMDUzWhcNMjUwODEyMDQwMDUzWjAzMTEwLwYDVQQD
EyhmYmUyN2NjMjM5YTI3ZGY4MjI5OTZlNDMxNWQ2N2VmOWJmZjU1MjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IuWtYzlBjLNBVr0xUuAUZ4ghNg
U8RL6dq8s/KCtqy6qju00ZCFAmeDKIWLqYZaHlzOYqSJIG2p4m0M2myvTUmga58r
wAVSEQzLfYhk8WKzn2s2kEhB2gymTPxukCWxD/RZbV7bKfktoJebsyJENbH4Wvpe
7YJ/SO612l8rZPYDFXOF7P/K2QXd7mLlNgYblKBNKItvAyMSRDmpAZf3h2eyPasI
hCYG1cZA3xnwKayAk2qQz69xAjgN/aqA6CYyEcfDw0JKag+gt2l5woPt40slm/vr
6MvvkhEDtjgWEXHJpLCe8mtIuQFHvlHbuxKeHs/PALDmXiFI+9OXcoTgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvifMI5on34IpluQxXWfvm/9VI3MB8GA1UdIwQY
MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt
MTlhMTk5OWQ5ZDdlLzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl
LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0MLLud1
oSFpmlARYkKn4qB/6GZSRIu9bhVZBzlYxorT3p3KmdcHCVtMCPKCPXK/jVNW07sJ
+NreoDzuF7diardEEglZyyoXYcnSxVyRKF8jTaNc5P0KVqnWPwGLAatWgnjfnc9T
GHXoJAirqhEbcvaouY/CfaW5qqm3L/KxCzoUdCu2XusgP78bsgleN5gsk3yDJiGF
Ps18VR9Of8qqFn5ROxJafQzBViAyACOWIGqRocejXXHw55XqlvNFqu5p8TKPssX0
pKNlEWdL3h6N3y0YovdBI79wCLl3QEaghAlI7xz72fBLXXyr1yMtRpVP5xdPA9cs
O8Py0kq1OSqZKA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:30 2025 by rpki-client