Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: 2YEs3UTIkXyWeC2KQX+kxUgtq2CaGqJ8pX1rUyIgUG0=
Subject key identifier: F2:95:4A:7F:E4:CB:E8:96:99:FC:4D:FF:59:25:C4:07:A7:B1:4B:EA
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 019873E36C157D48BB9C62B304A609E1FB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 0288
Signing time: Mon 04 Aug 2025 07:02:20 +0000
Manifest this update: Mon 04 Aug 2025 07:02:20 +0000
Manifest next update: Tue 05 Aug 2025 07:02:20 +0000
Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: UzGWd3OEFOmmSYbexbJ62KXcR7NDe0t52SvhY5UfsTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6c:15:7d:48:bb:9c:62:b3:04:a6:09:e1:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Aug 4 07:02:20 2025 GMT
Not After : Aug 5 07:02:20 2025 GMT
Subject: CN=f2954a7fe4cbe89699fc4dff5925c407a7b14bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:8f:27:5a:f7:24:41:e0:90:f9:2e:5f:30:
5c:84:bf:f5:6c:88:ab:66:a1:ce:fa:82:f9:da:b0:
6a:ab:65:be:ff:12:c0:49:c8:e9:fa:24:96:74:74:
cc:05:f2:5b:49:18:18:df:4b:c4:59:77:f1:a3:62:
eb:7b:0a:07:c6:65:b2:a6:15:62:8c:8f:c5:c6:63:
9d:29:b1:8b:be:c5:5c:0d:b4:8f:b5:37:7b:7b:a1:
ec:22:53:f8:7d:51:83:c4:c2:ea:10:2d:39:2a:7f:
b9:f4:1b:ff:76:51:a4:68:fc:75:bc:7e:da:0e:67:
48:34:de:15:0c:f2:e8:be:59:65:f5:bf:9d:e6:16:
3e:2e:47:b6:ed:37:71:42:c5:b4:e9:73:88:d0:76:
96:31:ff:45:27:fe:2c:cf:06:48:ec:2a:75:40:36:
5c:53:9d:ee:ad:16:bc:f9:98:66:57:64:c0:d3:bf:
48:cf:c0:96:e6:06:43:71:22:d2:a1:ce:bd:3b:7f:
5f:56:86:a4:79:45:8e:5d:b9:d9:95:36:a9:04:c8:
af:4a:1c:40:cc:68:07:d1:5d:02:2e:50:99:f9:a9:
26:51:df:b9:da:0b:b5:17:42:ec:51:12:a5:db:29:
59:85:95:6e:10:6d:9d:c5:86:cd:58:88:31:a1:cf:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:4A:7F:E4:CB:E8:96:99:FC:4D:FF:59:25:C4:07:A7:B1:4B:EA
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:80:91:53:d5:0c:c9:60:a5:91:2e:96:8b:e2:fd:9a:10:d3:
f3:f7:37:aa:87:b3:4c:5a:5b:e2:0c:9e:c8:65:6d:3e:7d:9d:
43:a3:73:3c:fc:ff:89:04:68:21:5c:20:f1:b8:d0:7e:ea:8a:
4c:33:77:61:f1:ed:71:18:73:09:76:88:8f:b9:fe:da:45:99:
3d:98:96:2b:d1:5a:c5:c7:a8:53:db:ea:88:b1:ee:73:e3:d1:
41:c5:04:d2:66:ec:80:f5:b9:ab:62:f5:3a:7b:4f:a1:43:5c:
3f:bf:e4:bd:0c:86:00:3e:d6:0d:a8:32:d3:b6:2c:71:c2:1c:
d6:7c:a9:ec:5b:f2:53:37:d6:b7:ee:da:32:33:46:07:56:e9:
57:55:4e:fa:7f:77:f1:89:f8:80:ca:f0:1c:24:b1:06:10:a1:
49:07:b5:8b:4d:3f:7f:40:ec:d5:80:19:2f:40:4d:ce:71:b8:
fd:f6:5d:0c:45:6c:48:ec:4e:a2:ac:eb:88:ec:33:96:cc:f1:
74:71:e3:2a:df:2d:3f:67:e7:28:f0:26:83:1f:58:8f:f3:a1:
8a:64:29:67:3c:08:5f:fe:74:7b:b0:9c:7a:26:76:e2:4e:16:
3d:19:4d:eb:08:15:fa:b9:87:fc:d0:31:0f:a5:b3:9b:5d:06:
25:55:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:32 2025 by rpki-client