Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: g8J21EmTA8AgGSo5LZssyuBixZLD6lKHaHk5PQkl7us=
Subject key identifier: 7D:25:1D:43:9C:3A:9D:D7:BA:FD:A8:29:C6:B3:FF:79:CB:18:6E:2E
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 01988356D534C6ED8C9B9EFA503A3907C1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 123E
Signing time: Thu 07 Aug 2025 07:02:42 +0000
Manifest this update: Thu 07 Aug 2025 07:02:42 +0000
Manifest next update: Fri 08 Aug 2025 07:02:42 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: oy6vy1a5RPJU2Vm6PBGd2Z1pVJtMYoRxSV+vk3b6fcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:d5:34:c6:ed:8c:9b:9e:fa:50:3a:39:07:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Aug 7 07:02:42 2025 GMT
Not After : Aug 8 07:02:42 2025 GMT
Subject: CN=7d251d439c3a9dd7bafda829c6b3ff79cb186e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:c5:d4:aa:d4:10:db:bc:bf:05:89:15:b9:
38:f3:7d:9d:54:4c:d6:90:80:c6:15:b6:f0:68:9a:
bd:e2:f4:25:77:38:56:57:ea:58:7f:ea:5f:fb:19:
1e:73:af:79:1c:19:5c:cd:06:b1:11:28:f5:cc:a5:
45:94:08:61:30:4b:f5:08:a6:8d:fa:ce:2d:a4:a9:
97:04:6b:b3:62:e7:bf:eb:34:0d:2d:44:25:75:4b:
e7:82:68:12:0f:d0:79:40:bd:c5:2a:cf:36:59:be:
05:43:97:bc:ab:08:e0:56:e6:17:bd:1d:0b:6f:7a:
83:cc:46:6d:ae:05:29:4f:47:00:1c:85:f8:ac:e8:
9b:c6:54:f3:a4:da:5a:40:43:13:09:4f:d9:07:a1:
34:65:57:d8:1e:9a:98:93:7d:4c:7b:b9:6e:8e:46:
18:e7:e1:90:69:2b:53:40:6d:d8:09:84:c5:8a:74:
3b:80:fa:a3:f1:2a:9e:cd:94:59:e5:64:b4:c2:90:
21:e4:59:cf:8b:83:bb:a1:bc:bd:16:87:b9:84:be:
7b:a1:da:ed:2a:68:1d:5f:42:f0:92:ff:32:88:6b:
85:56:94:1f:c4:20:bb:f1:94:e0:24:40:1e:d0:61:
f6:27:ee:20:73:75:15:99:bd:7a:23:fd:cf:78:40:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:1D:43:9C:3A:9D:D7:BA:FD:A8:29:C6:B3:FF:79:CB:18:6E:2E
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e4:9c:d6:b4:fb:2e:13:02:65:5e:d2:10:d2:8f:3a:9b:4c:
f7:3a:02:4b:f7:4a:54:63:47:57:00:54:69:bc:e6:c6:18:4e:
a6:7b:de:f5:aa:ab:3f:8b:df:bc:b8:26:5c:e8:48:ee:6e:29:
2e:37:06:b9:9f:a0:6f:0a:ac:14:8f:d4:a8:e2:1c:0c:b7:d3:
69:3c:bb:e2:cb:04:90:6e:a5:3b:03:87:9e:e9:98:f7:63:af:
48:e0:9f:1a:55:13:99:b8:77:1c:c6:d2:2c:4b:08:ca:0c:0a:
a1:aa:f5:4a:78:9b:cb:7a:9c:ef:4c:a8:be:b3:16:1d:39:0a:
67:11:bf:bd:0d:a3:5a:5c:52:a8:4f:75:13:13:95:ed:7c:1e:
fe:32:fb:fa:cf:7d:96:f1:04:25:0d:ba:15:5e:80:08:9c:73:
74:8d:34:38:58:56:b3:00:35:c3:0b:40:15:a2:d4:10:8a:76:
d0:61:3c:d7:b1:de:06:02:47:4b:51:3b:5b:6d:26:70:d3:e0:
33:04:23:17:93:92:30:4b:7e:62:ce:f5:be:dd:d2:ac:d1:46:
e0:a9:b3:75:6b:fd:c3:eb:2e:e4:a1:9e:f4:ea:06:0a:01:2d:
37:b8:ab:98:38:cf:e0:87:6d:ce:53:85:f6:b9:83:55:5e:42:
c4:11:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:57:09 2025 by rpki-client