Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: dNjPP/aDF0gdAYW5PfS9YOaoUZfJqeFsAErzmpWdrEg=
Subject key identifier: 5B:DC:20:86:52:92:C8:E9:13:DA:92:42:D3:58:DB:D2:61:E8:F7:82
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 01976D3E0AE0505B592962D32E15460A6001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:11 +0000
Manifest this update: Sat 14 Jun 2025 07:01:11 +0000
Manifest next update: Sun 15 Jun 2025 07:01:11 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: a+dkB5xfaano2tgll+wX8hH3B8GJUvto3JgqKBhscC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0a:e0:50:5b:59:29:62:d3:2e:15:46:0a:60:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Jun 14 07:01:11 2025 GMT
Not After : Jun 15 07:01:11 2025 GMT
Subject: CN=5bdc20865292c8e913da9242d358dbd261e8f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:7f:e5:d4:3f:d4:65:8d:cb:7b:58:0f:1d:
99:63:b4:20:89:e6:88:6b:ac:81:a1:f2:e1:1f:a4:
fa:30:7a:22:13:98:f3:3d:9c:3d:1a:55:d3:5a:1c:
35:c8:2f:b6:9a:1f:67:46:94:5f:92:9e:7c:a6:35:
a7:12:4f:13:4f:b8:fe:0d:9d:6e:d1:05:09:6c:61:
ae:d1:58:84:08:1a:8a:13:57:73:96:48:a9:03:3e:
b6:85:d6:59:84:f0:15:46:11:dc:f0:d6:20:7a:07:
b9:75:18:ab:05:4a:8d:20:64:20:8f:d9:6a:56:aa:
a3:c8:2c:fd:e5:21:8a:b5:cb:7d:f0:c6:c5:5f:45:
89:62:b9:c1:0b:e7:47:ea:e1:25:4d:2b:aa:0a:c6:
ed:d8:42:24:db:d4:d6:8e:6f:37:96:b6:fd:b5:de:
f5:85:8c:b8:e8:d1:31:8a:68:cc:0a:94:e1:29:80:
42:6e:63:ec:13:9c:6f:a1:19:f6:2a:9e:2e:53:7a:
07:c9:9e:e6:07:ff:95:ed:f9:cc:da:d0:ad:4a:08:
8c:aa:0d:ac:06:2d:10:eb:50:55:9f:c3:f2:90:b6:
55:7d:d1:82:9e:df:02:9d:60:d9:e3:53:6a:8b:fb:
32:92:2d:11:10:cb:d8:87:ae:a5:af:22:f9:fb:b8:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:20:86:52:92:C8:E9:13:DA:92:42:D3:58:DB:D2:61:E8:F7:82
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:41:d0:2a:8d:ab:ca:3f:d7:21:d8:68:f7:2a:b5:08:3f:
52:5c:1d:e6:d8:54:e6:37:8d:05:fb:da:e7:70:ca:e9:47:18:
f3:1b:63:7c:3f:1e:d1:02:13:73:ce:40:d4:6f:43:90:36:68:
8b:e9:a7:17:e3:91:85:02:63:f0:4e:0e:90:07:d2:ad:a3:2c:
da:a1:6d:a6:0c:b2:27:6c:b0:f6:a3:ec:0c:83:4f:81:76:f6:
27:82:c1:3d:de:1e:3a:b8:f7:bb:26:f6:05:50:d0:b1:1b:90:
cc:24:5f:21:57:4f:c5:28:18:f5:fb:26:e4:b3:b7:37:5f:50:
26:f2:26:f4:03:32:a0:fc:82:16:45:a4:c3:09:8c:3e:41:c6:
eb:b9:e5:2b:15:b0:b9:9f:01:52:14:35:c3:df:4a:12:3d:01:
00:67:5a:51:90:b1:20:5f:e6:12:50:47:8a:85:1b:a1:b8:5d:
ab:39:e7:ac:62:b6:e3:3f:33:fe:21:6f:08:78:ab:d5:47:35:
4c:36:7f:d3:2a:c0:f0:58:54:47:d0:30:09:3f:7b:72:e2:b0:
5b:7e:cf:f8:aa:10:29:56:e7:87:14:56:ff:a3:d7:7c:38:9a:
0a:54:e2:7e:bd:39:d1:cc:db:38:0d:5f:12:ac:d5:a4:09:ac:
88:c3:94:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPgrgUFtZKWLTLhVGCmABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjUwNjE0MDcwMTExWhcNMjUwNjE1MDcwMTExWjAzMTEwLwYDVQQD
Eyg1YmRjMjA4NjUyOTJjOGU5MTNkYTkyNDJkMzU4ZGJkMjYxZThmNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyJ/5dQ/1GWNy3tYDx2ZY7QgieaI
a6yBofLhH6T6MHoiE5jzPZw9GlXTWhw1yC+2mh9nRpRfkp58pjWnEk8TT7j+DZ1u
0QUJbGGu0ViECBqKE1dzlkipAz62hdZZhPAVRhHc8NYgege5dRirBUqNIGQgj9lq
VqqjyCz95SGKtct98MbFX0WJYrnBC+dH6uElTSuqCsbt2EIk29TWjm83lrb9td71
hYy46NEximjMCpThKYBCbmPsE5xvoRn2Kp4uU3oHyZ7mB/+V7fnM2tCtSgiMqg2s
Bi0Q61BVn8PykLZVfdGCnt8CnWDZ41Nqi/syki0REMvYh66lryL5+7gWlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvcIIZSksjpE9qSQtNY29Jh6PeCMB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYFB0CqN
q8o/1yHYaPcqtQg/Ulwd5thU5jeNBfva53DK6UcY8xtjfD8e0QITc85A1G9DkDZo
i+mnF+ORhQJj8E4OkAfSraMs2qFtpgyyJ2yw9qPsDINPgXb2J4LBPd4eOrj3uyb2
BVDQsRuQzCRfIVdPxSgY9fsm5LO3N19QJvIm9AMyoPyCFkWkwwmMPkHG67nlKxWw
uZ8BUhQ1w99KEj0BAGdaUZCxIF/mElBHioUbobhdqznnrGK24z8z/iFvCHir1Uc1
TDZ/0yrA8FhUR9AwCT97cuKwW37P+KoQKVbnhxRW/6PXfDiaClTifr050czbOA1f
EqzVpAmsiMOUAA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:49 2025 by rpki-client