Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: XvZG1zkKp+6HaF4wcVRVdK3TXwOasBa2Cf4REaDaGus=
Subject key identifier: 10:48:B2:DE:A4:11:33:1F:0A:E8:46:B3:C4:B8:1F:4C:D8:81:67:80
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 01987D8BFF8F97E84E72285046DB3DE94892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:03:03 +0000
Manifest this update: Wed 06 Aug 2025 04:03:03 +0000
Manifest next update: Thu 07 Aug 2025 04:03:03 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: Z5Wa7pTyZlTxsD8brSE+l//4OfRLbZb8J2u/yxVlz80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:ff:8f:97:e8:4e:72:28:50:46:db:3d:e9:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Aug 6 04:03:03 2025 GMT
Not After : Aug 7 04:03:03 2025 GMT
Subject: CN=1048b2dea411331f0ae846b3c4b81f4cd8816780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:cd:a0:9d:cc:bf:ed:e2:c3:d8:26:02:2e:
a9:a1:9d:36:66:30:80:3a:68:49:f0:f6:96:3d:43:
c7:f6:58:94:ee:d8:08:1e:00:72:d7:41:74:ea:45:
3a:21:e4:e5:e6:38:9d:a8:69:c6:2c:1b:2e:65:c4:
b1:8a:a7:d3:b0:c9:de:d3:5b:ac:ee:9a:cc:db:0d:
d9:59:3f:5e:03:10:91:d1:95:34:bf:73:5c:d4:b3:
bb:61:ce:e2:41:d5:e1:3f:6a:f6:cf:56:45:f5:71:
60:0a:5e:5d:b4:7a:6e:a8:b3:5b:32:dc:3f:03:a0:
55:0e:f2:4a:b9:d2:0a:63:4c:cd:9a:be:87:39:89:
83:1f:a5:c2:1c:b8:5f:48:00:5e:33:fb:2e:2a:d6:
c2:1a:4b:ac:54:6a:9e:8f:cd:5c:ed:61:04:2e:98:
04:5b:82:87:8f:ce:e3:91:5a:bc:87:bc:0a:8d:38:
da:a6:c7:b6:90:48:88:10:e0:7a:e9:3d:d6:e3:3d:
67:78:a2:bf:4b:d1:7f:27:58:af:18:c6:2d:be:c5:
f6:4f:8f:58:46:20:14:f1:96:a4:9f:82:4c:3e:5f:
72:de:90:4d:9e:57:bb:7e:de:7e:75:8d:0f:fe:4e:
bb:db:fe:f1:52:04:18:6d:f5:54:79:b3:b2:87:8f:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:B2:DE:A4:11:33:1F:0A:E8:46:B3:C4:B8:1F:4C:D8:81:67:80
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:0e:44:b2:9f:a0:42:cd:8a:f4:d5:de:de:f6:8f:4f:be:
ac:8c:20:52:c2:a6:7c:03:9e:b9:62:49:3e:86:95:97:09:47:
31:28:96:c2:8d:21:03:25:82:c3:da:84:36:9b:93:66:ce:b2:
cb:9f:4e:a1:a0:4c:12:35:2a:e0:7e:7a:3e:66:af:53:26:49:
8a:14:c0:9f:1a:f3:39:e3:64:7f:26:ab:00:93:d4:8d:22:4f:
f4:92:cb:a0:c1:0f:ff:72:05:85:56:25:98:94:24:70:00:d2:
03:5e:2a:b1:51:99:36:fd:5e:f4:a5:6c:91:ae:d2:b0:a1:23:
df:b2:d1:b2:91:33:c9:8d:3f:b2:0f:78:92:2d:57:32:de:e6:
c7:4c:17:69:f2:41:fe:d7:71:77:b0:9e:5f:c9:34:22:73:2e:
42:38:2a:8a:9b:7d:26:c8:3c:11:69:51:bf:55:df:86:b3:4b:
94:21:7b:84:ce:ff:91:d5:12:40:6a:8c:c5:e6:0d:5d:e9:95:
e1:33:e5:7d:e8:51:67:d6:a1:20:78:fc:19:e6:71:89:4c:58:
ea:db:6e:7b:c3:08:e3:44:c4:bd:6c:9c:f1:da:b7:ec:48:2d:
f3:75:ef:39:d6:8d:e7:22:eb:47:1b:74:5a:32:9f:72:a0:e6:
df:da:61:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i/+Pl+hOcihQRts96UiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjUwODA2MDQwMzAzWhcNMjUwODA3MDQwMzAzWjAzMTEwLwYDVQQD
EygxMDQ4YjJkZWE0MTEzMzFmMGFlODQ2YjNjNGI4MWY0Y2Q4ODE2NzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTjNoJ3Mv+3iw9gmAi6poZ02ZjCA
OmhJ8PaWPUPH9liU7tgIHgBy10F06kU6IeTl5jidqGnGLBsuZcSxiqfTsMne01us
7prM2w3ZWT9eAxCR0ZU0v3Nc1LO7Yc7iQdXhP2r2z1ZF9XFgCl5dtHpuqLNbMtw/
A6BVDvJKudIKY0zNmr6HOYmDH6XCHLhfSABeM/suKtbCGkusVGqej81c7WEELpgE
W4KHj87jkVq8h7wKjTjapse2kEiIEOB66T3W4z1neKK/S9F/J1ivGMYtvsX2T49Y
RiAU8Zakn4JMPl9y3pBNnle7ft5+dY0P/k672/7xUgQYbfVUebOyh49u/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBIst6kETMfCuhGs8S4H0zYgWeAMB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGysORLKf
oELNivTV3t72j0++rIwgUsKmfAOeuWJJPoaVlwlHMSiWwo0hAyWCw9qENpuTZs6y
y59OoaBMEjUq4H56PmavUyZJihTAnxrzOeNkfyarAJPUjSJP9JLLoMEP/3IFhVYl
mJQkcADSA14qsVGZNv1e9KVska7SsKEj37LRspEzyY0/sg94ki1XMt7mx0wXafJB
/tdxd7CeX8k0InMuQjgqipt9Jsg8EWlRv1XfhrNLlCF7hM7/kdUSQGqMxeYNXemV
4TPlfehRZ9ahIHj8GeZxiUxY6ttue8MI40TEvWyc8dq37Egt83XvOdaN5yLrRxt0
WjKfcqDm39phyw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:42 2025 by rpki-client