Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: MbYu/Pe5YiOx5mt5MuOa8ZwkEoMkQpiyUXW3dOYiXhE=
Subject key identifier: F1:C2:F3:1D:82:DC:84:72:EE:7C:45:EC:3D:62:B1:47:35:FF:3E:4C
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01988768FE78E577BAB3774B70D2CAF19FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 15B5
Signing time: Fri 08 Aug 2025 02:01:01 +0000
Manifest this update: Fri 08 Aug 2025 02:01:01 +0000
Manifest next update: Sat 09 Aug 2025 02:01:01 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: uG/nrzvtUAKxWy1qSIJgLcE4aoZDk5OpipytPJBg4eo=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:68:fe:78:e5:77:ba:b3:77:4b:70:d2:ca:f1:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Aug 8 02:01:01 2025 GMT
Not After : Aug 9 02:01:01 2025 GMT
Subject: CN=f1c2f31d82dc8472ee7c45ec3d62b14735ff3e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:3f:1f:0d:a4:2d:4a:60:ad:d2:16:60:79:
a2:fc:cc:4a:39:85:2e:ac:f2:0f:58:05:59:66:be:
38:5b:04:4a:46:89:fb:5a:3c:03:97:e7:c8:32:4e:
81:b8:7c:60:ce:a0:46:f5:63:c2:b3:2e:3d:79:d0:
aa:4a:82:a4:4b:e1:8c:88:de:b8:7f:a6:ac:a4:34:
91:57:e3:c3:78:a7:85:07:1e:05:50:3b:74:bc:94:
a6:fc:4b:60:1a:b6:3d:8b:01:e9:70:8a:60:bb:5e:
f8:da:c7:5e:ee:d6:cc:93:52:88:09:d4:76:23:ef:
29:45:ff:7c:74:bb:19:46:18:f0:0e:81:60:4c:e1:
a5:da:b6:6f:fb:a5:ac:78:10:e8:6c:f9:4d:91:16:
8a:cf:9e:01:ca:da:ec:50:ff:f3:31:d0:b0:ce:e4:
d4:3a:98:41:9f:bf:f8:7e:fd:3c:3f:f2:99:46:85:
b0:e0:c3:e1:ea:41:32:ca:6f:db:8f:e2:50:64:6b:
0b:83:ff:4a:0f:d0:32:f5:f5:01:ab:9d:fd:02:e5:
5b:80:f7:16:25:98:62:94:83:e9:3b:71:8f:ea:43:
b9:68:8c:c7:a9:47:77:1f:5b:3d:c1:05:91:57:46:
60:96:d4:7b:3f:13:8d:b6:9e:4b:63:73:d4:18:c3:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:F3:1D:82:DC:84:72:EE:7C:45:EC:3D:62:B1:47:35:FF:3E:4C
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:c4:20:99:d9:18:42:b5:b2:d1:d3:08:8d:ff:77:e1:29:
90:5f:e6:c5:77:58:27:4b:54:af:34:54:65:5a:fc:20:9b:87:
79:c0:91:14:f6:80:30:54:64:64:03:a6:45:34:ee:8d:69:30:
b9:7e:6b:f3:a3:d1:d9:05:06:0b:81:3f:20:69:f9:ba:46:8c:
cf:1f:23:55:6d:7d:aa:de:d2:a8:1e:d5:74:a5:3d:e9:c6:9a:
55:15:2f:b8:cd:04:0b:4d:f7:80:7c:10:0b:c6:98:d2:47:7a:
2c:b3:05:27:71:ea:ac:b9:5b:d9:a6:5b:aa:a5:c0:54:16:b1:
5d:da:af:8b:96:43:65:b2:53:b1:02:3d:09:eb:20:55:6b:70:
1c:ac:d4:7f:16:e4:c1:be:83:64:91:58:8f:27:9c:4e:91:c9:
84:58:7d:31:9d:05:27:f2:ff:e3:fd:aa:e6:00:b7:d6:cf:05:
12:e3:d3:10:9b:81:19:89:57:07:ef:ec:54:08:5f:07:26:41:
0a:b5:d3:9c:5f:b0:76:6d:e4:10:75:de:ff:77:8e:fe:d5:f3:
46:1b:10:37:44:49:f3:1c:63:99:8e:81:54:fb:61:31:60:c0:
f9:5b:ef:d1:70:9d:fd:07:81:80:bd:74:36:2c:82:2f:4d:1e:
44:55:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:05 2025 by rpki-client