Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: lqXKe9E8jVksq9Z4EhlbZ3arhwIc0kZpMwiQt4sOSJY=
Subject key identifier: 92:26:F0:ED:FD:43:74:D9:13:77:18:2E:5E:5F:33:78:44:52:2A:4F
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 01976C2B356B7B6889A74371F124CB249F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0EA6
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: U9iSDS9UrmzQPNiUvCnLw2vhjiwxmRhKSahPBWqm/nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:35:6b:7b:68:89:a7:43:71:f1:24:cb:24:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=9226f0edfd4374d91377182e5e5f337844522a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:14:62:92:c6:56:94:4e:de:0e:ae:f5:e0:
e4:69:fb:34:fd:f4:6a:b2:5b:82:e4:c1:22:20:95:
cc:32:6f:2b:c0:7b:98:c6:d7:79:3d:e9:18:29:91:
9d:5b:82:8a:77:56:02:20:74:a5:0c:ce:11:d1:a9:
fd:8f:1b:5d:fc:01:2a:e8:3a:a7:3a:a5:0a:02:c7:
96:67:21:05:3d:5c:bf:df:c2:cf:b3:b1:ec:c6:ab:
f3:b5:67:b1:02:0c:91:25:21:b8:c0:ee:15:8b:f9:
85:6f:31:97:86:44:e0:85:98:20:42:78:45:9b:9f:
60:d6:79:92:0c:ab:f7:4d:5e:80:37:7d:14:99:23:
5e:01:56:09:18:4b:cb:f9:2a:57:d3:d5:87:a0:aa:
f4:0a:6c:12:0f:25:b3:cd:6d:1c:94:20:9b:3d:c9:
97:45:1d:b3:db:be:e3:c6:88:cc:63:fb:d6:f7:64:
12:9d:f8:a0:52:bb:0e:aa:5e:ec:b4:05:8b:22:ef:
8f:f8:5c:9c:20:f6:90:38:81:91:20:bd:23:4f:27:
23:09:6e:97:9c:4a:86:c3:69:5d:0b:30:00:4e:5b:
51:a1:83:3b:56:ad:44:61:3e:e0:05:8f:b7:4a:af:
9f:f9:95:95:7d:fd:a7:6d:d2:9b:70:47:97:9e:ce:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:F0:ED:FD:43:74:D9:13:77:18:2E:5E:5F:33:78:44:52:2A:4F
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:11:48:f0:70:b2:85:21:e5:d2:55:7e:77:6d:07:8a:7f:
2c:b7:da:66:3e:da:59:e2:f4:78:3b:ec:4c:8a:00:e3:65:3c:
e9:12:8d:f1:14:24:3b:6f:7d:96:e0:63:3a:e3:4f:ad:93:e6:
1f:c6:dd:f1:ae:50:f7:7a:f2:9c:22:db:d5:ba:cf:2d:4b:b6:
8c:a0:b3:7c:c1:14:c7:c8:f0:f8:20:61:c6:2b:9c:03:af:a3:
5d:02:7c:1f:67:b8:a2:31:68:a3:ba:08:b7:f1:61:51:1e:bd:
ec:b5:94:ad:40:d8:c2:67:24:e5:79:69:d0:bc:60:78:b1:5c:
61:70:79:56:a1:d1:b9:50:65:8a:6a:6f:34:bd:ce:71:36:2f:
82:01:cb:ae:02:66:47:76:78:ee:9c:4a:5e:1e:0b:5d:a2:d4:
7d:ed:b7:72:fb:7e:83:3e:cc:30:ff:51:14:b9:25:b4:54:20:
3e:a5:80:21:d0:ec:70:fc:cf:e0:da:59:54:e8:0a:7a:b2:49:
d1:83:ff:4b:9b:ef:d3:b5:9c:e8:a4:a8:6a:04:23:1a:66:48:
51:fd:3a:26:eb:df:26:e4:d7:8a:e5:62:36:4c:4e:61:e1:56:
93:05:c2:a9:4b:48:de:db:3d:c6:34:83:83:ca:54:9b:ce:2b:
c8:e5:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:35 2025 by rpki-client