Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
File: NJI6ntps8kDsh5WeHcONNh951ho.mft (raw, json)
Hash identifier: 3jWoBbluOCcBhgSUllFzqGUfsV5TzkO0F/88z0Jw0DE=
Subject key identifier: C2:5E:45:0A:5C:66:C0:A4:73:2D:A8:3F:EC:25:E7:E4:3B:A8:11:47
Authority key identifier: 34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
Certificate issuer: /CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Certificate serial: 01988C58D08B9BB185365D3CDA443D7578A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
Manifest number: 0433
Signing time: Sat 09 Aug 2025 01:01:27 +0000
Manifest this update: Sat 09 Aug 2025 01:01:27 +0000
Manifest next update: Sun 10 Aug 2025 01:01:27 +0000
Files and hashes: 1: NJI6ntps8kDsh5WeHcONNh951ho.crl (hash: ZMhEvyXwuyjC8I0Jui6tJ/rKp+TY2O0M6L4/+PopunQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:d0:8b:9b:b1:85:36:5d:3c:da:44:3d:75:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Validity
Not Before: Aug 9 01:01:27 2025 GMT
Not After : Aug 10 01:01:27 2025 GMT
Subject: CN=c25e450a5c66c0a4732da83fec25e7e43ba81147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:b8:26:44:67:75:7a:7c:b2:d6:0e:ef:fb:
98:b0:8e:b3:03:1d:1d:95:53:70:28:a7:06:31:53:
2c:14:06:9f:53:66:88:f6:20:3a:8b:eb:14:16:33:
10:1c:fc:dc:18:99:49:ca:f9:7a:bf:1f:30:8d:cf:
d8:00:9c:06:02:19:25:82:7f:33:a4:ff:f0:e4:50:
a6:1b:af:c7:5b:bf:a3:79:ab:45:36:f7:3b:bf:95:
67:f2:eb:6e:fb:7a:a8:9e:8a:35:69:aa:09:ed:2a:
67:16:d2:4a:5d:34:e5:f3:dd:c6:33:50:38:5a:0c:
a7:57:6b:82:ab:4a:fa:3b:d5:e0:74:a8:35:ac:23:
4d:60:b4:20:7a:08:e5:c4:2f:6d:1c:62:5b:bd:87:
83:8f:ab:3f:7b:11:d4:75:5b:5a:61:17:23:d7:e2:
53:b1:cb:9c:3f:93:9f:9b:a6:dd:08:31:1f:50:ef:
da:49:d4:79:1c:05:88:84:0c:7c:0e:6e:09:00:e6:
e7:79:ec:a2:02:3b:81:d5:71:ac:55:90:23:2f:6c:
6f:b0:e7:ab:51:c1:b8:97:31:3e:5c:6c:af:f0:ba:
de:c0:97:fe:10:c1:e8:c3:3a:33:b2:10:a7:23:9f:
9e:51:92:81:7a:c5:e1:62:e9:21:78:b0:c7:d2:d7:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:45:0A:5C:66:C0:A4:73:2D:A8:3F:EC:25:E7:E4:3B:A8:11:47
X509v3 Authority Key Identifier:
keyid:34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dd:ce:4f:94:09:92:fc:eb:4b:0e:f6:12:f9:5c:ab:ce:8c:
20:4a:8d:8f:c0:bb:a4:c8:55:78:05:a6:55:ad:cd:15:70:9d:
38:24:c0:2a:07:ee:a6:e4:ce:4b:04:63:a6:0a:22:50:f6:80:
84:c6:59:4c:3c:7c:e0:08:c7:1e:e2:4d:c2:57:98:dd:93:ef:
5b:a4:00:e7:0c:f0:33:f8:eb:30:2d:e6:96:06:37:50:86:66:
3d:0f:1f:92:32:c9:93:c3:66:ac:04:a4:a2:d9:7b:ac:34:64:
bd:4d:46:d7:a8:ae:d6:e4:09:b9:0f:a6:cb:da:4e:4f:6d:02:
32:27:57:76:c9:6c:8b:e3:47:43:9d:63:cb:f7:27:6c:d8:94:
1b:26:ee:a7:a4:ac:30:7c:8e:db:2c:5a:75:c1:42:1c:0a:66:
57:11:4f:cc:8c:f6:20:04:92:e6:eb:69:9e:c6:f4:73:a4:88:
05:40:2b:a9:c9:fe:2a:4f:63:32:c7:75:38:37:31:ff:47:ac:
0b:68:cb:ca:41:b3:f4:48:cb:8b:30:3a:43:db:0d:2b:c5:e2:
9d:55:02:4d:7d:8c:f3:0f:ba:f2:13:87:81:f4:00:60:3d:b7:
8d:77:63:2f:7b:f6:41:d7:b5:7e:4c:be:6b:ba:10:7e:ac:1d:
6a:e0:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:02 2025 by rpki-client