Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: qEWz0LIAAhNEWlo8sGnIuCLDQECgaTERpnQgY9Qao+o=
Subject key identifier: 0D:24:B3:FF:80:26:36:FE:11:26:1E:A7:25:C8:02:13:8C:E3:49:C5
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019874BE3D993ACE92F6A2C2E3E82E4BCBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0F2F
Signing time: Mon 04 Aug 2025 11:01:21 +0000
Manifest this update: Mon 04 Aug 2025 11:01:21 +0000
Manifest next update: Tue 05 Aug 2025 11:01:21 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: 7JdVDhCjLY2021/pX06DAx5KrYnJUyuxLUNznOE3YbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:3d:99:3a:ce:92:f6:a2:c2:e3:e8:2e:4b:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Aug 4 11:01:21 2025 GMT
Not After : Aug 5 11:01:21 2025 GMT
Subject: CN=0d24b3ff802636fe11261ea725c802138ce349c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:9b:66:f0:25:f2:76:b8:45:7a:d5:b6:b6:
e2:07:99:6f:a5:3b:62:53:52:63:a8:ba:c9:3f:d4:
44:68:9b:34:ae:45:77:2c:dd:d1:0f:31:92:75:cc:
c9:0f:35:ac:34:1e:8a:83:63:bb:f8:c1:6b:fd:a3:
49:fc:dd:ee:5f:45:52:7d:fd:2b:a1:00:cc:e1:89:
7d:0f:e5:cd:98:c8:13:23:63:9b:34:d0:9c:e0:d8:
11:48:d2:f5:5a:e8:d4:c1:6d:e7:26:95:3c:0d:d7:
6f:d0:72:46:10:05:24:97:5a:5f:0e:0d:eb:7b:ad:
67:d2:2c:13:07:64:a5:01:f7:83:89:2b:3f:44:6e:
c2:90:67:fb:73:b8:9d:cf:27:ef:6b:73:2e:a5:09:
dc:8a:cb:5e:31:30:01:e3:de:d1:b0:a5:c9:73:cb:
5d:b3:62:70:33:a7:5b:c9:7e:d7:f5:cd:92:c7:98:
17:2c:f9:1c:a5:4a:88:46:cf:02:8e:86:55:60:de:
88:a7:4c:26:00:1c:43:54:1d:f6:31:3e:9b:e4:09:
72:83:49:22:99:b2:b0:2c:02:bf:29:f9:8c:cb:20:
18:1c:20:0f:1f:8c:d2:51:35:f1:fb:4b:b5:4d:de:
07:31:3f:55:46:54:3b:43:72:18:42:22:e1:ac:c1:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:B3:FF:80:26:36:FE:11:26:1E:A7:25:C8:02:13:8C:E3:49:C5
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:9b:6d:13:0c:56:51:a5:ac:23:3d:01:8c:a2:a0:13:b8:
2a:de:7e:4c:fa:2f:43:c0:ba:70:7b:12:04:4e:f3:8f:2d:cb:
08:b4:57:42:50:db:52:04:30:12:10:b4:d4:87:f1:c7:dd:4b:
cf:5e:15:98:21:a8:63:74:52:48:7b:36:fd:8b:86:20:c9:fb:
c3:ef:ef:35:5b:c9:db:28:ad:c7:db:5f:21:8c:1e:14:24:0a:
54:c7:13:1e:eb:86:b4:17:4a:f4:ff:dc:bf:f7:90:3e:55:36:
91:a7:19:9a:ba:f8:cf:eb:88:43:36:43:1b:95:bd:63:98:1a:
85:52:7b:9c:ce:38:c4:5c:9f:9d:99:f4:9b:b3:28:9c:c6:46:
b9:ae:2b:ee:06:a4:07:89:2e:70:38:26:08:64:06:e0:02:97:
dc:5a:ec:4e:cb:53:cf:f5:a4:72:0f:ab:68:df:09:da:4b:9b:
85:e8:d7:bb:c7:4c:cd:12:2b:1a:96:b5:7d:67:7f:9b:42:16:
27:7f:75:d9:a4:7f:b2:2e:ca:6b:99:a7:ea:52:d1:38:68:26:
ae:63:fc:a3:c5:2a:56:f4:71:5e:d3:32:af:e0:6b:12:03:db:
28:47:0a:32:65:d8:9a:5e:1b:79:8d:5d:09:b8:6d:09:da:1a:
19:84:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:30 2025 by rpki-client