Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: 22IzlND5tRUrtMHyPj0nYCxmE3DJ4wDhrdWBZCpfC08=
Subject key identifier: BD:1D:6F:82:2D:9D:35:A7:05:36:B2:F0:DF:61:9F:8A:CD:E2:2A:25
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 019880F91C7C0094F38C2C5F28D4D01EDA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 050C
Signing time: Wed 06 Aug 2025 20:01:06 +0000
Manifest this update: Wed 06 Aug 2025 20:01:06 +0000
Manifest next update: Thu 07 Aug 2025 20:01:06 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: ztPIsRdYn5SYeHcHpEE2u5jHO/+d6odpBswdLy0Ka84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:1c:7c:00:94:f3:8c:2c:5f:28:d4:d0:1e:da:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Aug 6 20:01:06 2025 GMT
Not After : Aug 7 20:01:06 2025 GMT
Subject: CN=bd1d6f822d9d35a70536b2f0df619f8acde22a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:e5:89:ad:46:64:35:7a:39:5e:2a:d1:1a:
77:45:24:54:aa:88:c8:13:21:c4:f8:d3:ba:cf:bc:
f0:bb:00:1c:8b:fa:33:71:3d:ec:7f:60:62:8d:d0:
76:c6:67:bb:8c:50:80:fb:b2:a2:d9:7b:87:45:ed:
ae:70:80:16:77:20:65:ea:93:84:27:fc:f3:17:fa:
5c:b5:a3:ba:c6:d5:40:11:0c:21:bb:7d:3c:ee:01:
52:50:df:64:fe:04:97:bb:5f:b4:b0:a6:c4:2f:f0:
d1:68:82:3b:1c:23:80:78:e7:45:01:b3:8b:2d:3b:
3b:5d:9b:b5:7e:c0:73:17:ed:f5:a8:13:e6:8e:5d:
61:7b:26:f9:49:c3:b9:cd:e4:5f:d5:43:a2:c6:a1:
b0:0f:35:4f:91:e6:1c:e9:18:37:dd:7b:ce:9e:21:
02:15:c3:b1:e9:82:36:ad:2a:10:fb:fd:62:c7:f9:
c7:bb:fe:1c:69:d8:ee:0f:8b:a5:cb:1c:e9:9b:d4:
c5:d7:da:89:f8:6b:c1:93:c4:d7:74:fd:e3:25:59:
0d:b1:d9:ad:10:f2:aa:87:75:17:2a:83:a1:07:0a:
24:29:2e:13:51:8a:a0:f1:5a:58:9d:73:ef:d7:e4:
e0:27:d7:d5:dd:52:7c:4a:57:a1:2c:8a:43:a5:36:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:6F:82:2D:9D:35:A7:05:36:B2:F0:DF:61:9F:8A:CD:E2:2A:25
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8c:6b:39:f0:61:6e:17:3b:7e:55:67:49:69:d7:93:cf:05:
d0:37:ff:66:b4:07:e5:ce:c8:91:cb:3e:21:68:d5:a7:bb:b0:
cf:f7:a4:bc:6e:fe:ae:49:8f:6a:04:dd:1c:0d:32:3c:ab:96:
ab:b3:10:00:a8:45:bc:c3:71:fb:99:11:22:0c:52:53:1f:eb:
80:d3:ea:8d:00:12:75:1d:9e:c4:84:ad:32:1b:66:8b:b5:9c:
ad:9a:f9:b3:be:e5:01:c4:aa:0d:58:45:cd:4a:81:23:96:d8:
04:0a:f3:43:34:e9:fb:12:ab:e3:e0:2b:0f:7b:b8:70:dd:7c:
e5:e2:e8:c3:db:a6:14:6c:2d:1f:e1:89:6d:b5:ea:68:82:ce:
b6:90:67:09:7b:e4:45:4d:c8:53:6d:1d:4e:8c:15:b2:c7:30:
09:c0:a7:49:ea:07:4f:10:27:94:f6:73:1b:b4:d3:84:ef:51:
1b:f5:96:8a:d6:47:eb:b8:43:f7:08:bf:a5:2d:b5:19:b4:41:
b5:07:83:30:b8:20:30:d8:5a:36:f7:08:3f:09:4a:78:8e:6e:
9c:75:15:74:07:d1:03:57:e3:81:da:f2:93:65:df:26:1f:24:
69:8d:78:18:52:9c:6f:d4:44:2e:e0:57:dd:6b:dd:8b:2c:d4:
ee:c0:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:52 2025 by rpki-client