Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: 9AUoBC2HgP8YRF5+dpHuYYh4XBbSzbDbjZu/UxmNXms=
Subject key identifier: CC:5B:50:54:C8:3F:67:97:57:EE:FD:FA:BB:4C:D9:D6:38:F6:A8:57
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019A5119C5FCADFB04E99FFE9805E92A2D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: IV3+ZkwGv05xJuwbFyez7n6frRZ9HbiaViGHUslZFTo=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c5:fc:ad:fb:04:e9:9f:fe:98:05:e9:2a:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=cc5b5054c83f679757eefdfabb4cd9d638f6a857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:24:d1:24:a3:a7:84:08:91:1c:fa:bb:53:
87:a0:12:16:42:ea:dd:8e:55:65:33:30:67:d9:33:
ca:93:c4:e0:7e:c8:37:f6:98:48:c6:a7:aa:8e:47:
83:5e:e1:59:0f:d4:bf:41:ea:1c:e7:17:a2:a1:4f:
9f:c8:2b:6d:49:ca:9b:cf:9b:48:de:08:98:75:08:
30:81:fb:51:62:ca:d9:97:8f:ae:d5:d8:73:25:61:
33:c6:d0:bb:f9:6f:4a:c8:4b:41:d3:6b:24:7a:9d:
60:57:ff:1e:48:a0:66:67:e7:d8:8a:6a:39:99:de:
68:c2:75:97:75:2d:6a:ec:db:58:2a:3b:6e:dd:8a:
15:1e:0e:f7:63:26:c1:f0:5a:e8:5c:59:2e:43:02:
0c:8e:cb:78:12:76:18:ae:c7:e1:9a:f9:62:81:c1:
e2:0b:6f:b4:f9:e2:91:cc:9c:47:c8:a0:21:ab:3c:
20:d3:61:40:80:32:a5:6e:ce:c1:43:81:80:98:86:
f2:94:2b:1b:0e:e3:dc:88:8b:31:47:e7:b0:d3:52:
b9:5f:ca:21:55:f8:85:6a:04:12:74:9d:97:22:51:
9d:20:37:c8:d6:ca:40:23:7f:17:58:79:50:65:bd:
db:ac:4e:8a:de:17:f4:69:92:1f:18:81:94:ab:74:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:50:54:C8:3F:67:97:57:EE:FD:FA:BB:4C:D9:D6:38:F6:A8:57
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:29:22:7f:77:17:65:b6:74:46:2b:b3:43:3f:13:72:fa:
1d:79:ad:36:ae:a0:1b:23:69:12:35:d9:37:7d:65:4a:02:06:
96:6f:41:fe:3f:ec:e9:65:d5:ca:fa:0b:56:fa:ec:f9:27:33:
75:77:d2:13:fb:35:40:d3:d5:8b:ab:f3:c4:ea:92:eb:95:37:
c6:b4:62:b5:3f:7f:cf:b1:39:23:9f:17:46:55:25:93:7d:44:
55:a8:94:96:d2:af:42:2a:85:04:2c:57:8b:1b:4a:2e:09:a3:
ef:5a:c4:32:db:9c:76:7c:eb:4b:de:3b:e6:56:f7:25:e9:02:
c5:72:be:9e:8e:e4:f0:cf:f7:c8:22:27:55:89:4e:fd:a6:4c:
cc:a3:a2:9a:28:c5:5f:8a:37:b6:64:49:ff:f5:fe:53:41:ab:
c5:44:5d:8d:4c:ca:ec:25:99:f9:bb:1e:b1:fe:b7:dd:3e:c6:
f5:f6:4b:34:3b:e6:d4:9e:f8:d9:b0:2b:52:2b:f2:e6:b0:e6:
f3:58:7b:35:90:c5:20:58:00:3e:6f:dd:1a:8c:8a:3d:8f:92:
1d:4e:f9:27:96:88:14:89:de:d5:43:38:45:26:f8:79:06:61:
2a:84:66:44:e1:13:4c:2b:f9:df:5c:a0:f2:10:f8:71:9a:e6:
db:18:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:12 2025 by rpki-client