Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: uwEkJcB2WtF13RE8T+wESP/RDRLQfVMHPTPZ3ipyuTQ=
Subject key identifier: 5A:DD:0E:1A:7C:C3:AC:E2:46:B2:BD:78:79:B0:D2:74:24:8B:B1:17
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019A50E2788C56288A97D952D8D174460E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 132D
Signing time: Tue 04 Nov 2025 22:00:10 +0000
Manifest this update: Tue 04 Nov 2025 22:00:10 +0000
Manifest next update: Wed 05 Nov 2025 22:00:10 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: jBjxTL0yRG4fAj2QNoPa4e2cg6fHcHHhgcsSk5bPJcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:78:8c:56:28:8a:97:d9:52:d8:d1:74:46:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Nov 4 22:00:10 2025 GMT
Not After : Nov 5 22:00:10 2025 GMT
Subject: CN=5add0e1a7cc3ace246b2bd7879b0d274248bb117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:6f:e7:21:36:d4:16:b8:40:75:b0:fb:2e:
74:c2:8d:b4:9a:49:04:06:69:61:9c:c4:ab:7f:61:
4a:0f:a9:8b:6d:ba:6f:17:77:51:fd:37:da:0d:31:
7f:5b:23:62:71:2a:c7:88:ae:2e:32:49:0b:bf:e4:
9d:44:0b:22:1e:62:9b:ee:23:6f:ea:9a:aa:8b:a0:
55:bf:ea:20:31:87:18:a6:46:c1:78:71:dd:7c:be:
31:5d:af:f6:48:10:cc:d0:ab:ed:33:c2:25:c3:6f:
1a:14:78:71:69:55:77:ce:be:4e:0f:9e:1f:5a:d2:
64:ba:73:25:8c:9e:ee:db:6d:15:83:9b:c9:d1:78:
e0:c8:31:87:26:6a:d2:f1:9f:ac:e6:17:b0:eb:b0:
c2:30:9e:bc:58:da:3d:99:99:79:ed:25:57:48:a9:
a6:88:6d:c1:0f:4b:b9:36:cb:1f:81:58:75:25:78:
9f:25:7c:58:3d:e4:69:40:4b:5f:e7:1f:99:9e:4b:
55:17:3e:4d:f9:cb:b6:0a:a3:12:6f:1d:42:13:1b:
17:43:46:ca:06:df:5d:4e:71:a2:40:49:b5:05:51:
62:42:1e:36:66:3f:c7:01:7f:83:19:a4:78:8c:1b:
79:68:fb:1b:2c:11:d8:b1:1c:42:51:34:e5:b2:8a:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:0E:1A:7C:C3:AC:E2:46:B2:BD:78:79:B0:D2:74:24:8B:B1:17
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9f:2e:97:92:1d:62:41:ad:0c:f4:9e:9f:12:cc:19:ba:33:
f6:3d:56:f0:34:c3:4d:ac:01:84:93:9f:b4:d2:05:09:cf:14:
72:31:18:23:db:32:c2:9c:ea:8a:f5:2b:ed:7a:d1:ae:8e:4e:
72:f0:42:df:79:ff:c1:ae:2e:0e:b4:fb:79:47:8d:67:8d:63:
2f:06:de:6b:c8:59:92:b5:80:2a:c6:f0:25:4c:9f:8f:3e:b2:
95:3e:4d:8b:c7:69:45:d1:ec:0e:ba:6f:62:e2:28:e0:60:5b:
2e:fb:7d:23:2b:f0:13:72:1e:95:2c:38:50:36:5d:5a:80:12:
7c:0b:f6:b5:4b:2b:14:5b:aa:cf:ed:e0:04:93:0e:8d:3e:0f:
7d:b8:cb:ad:92:be:55:66:76:77:74:a4:8d:82:6b:f2:91:55:
dc:53:db:3e:c8:56:0f:c7:59:f7:a6:37:2d:88:8d:6b:25:41:
64:69:f6:65:2c:7c:ec:d3:7e:9d:8b:34:52:6b:76:28:9c:38:
c0:b7:df:52:05:08:d0:25:89:0b:88:88:d6:d8:46:42:5c:e4:
d3:45:38:17:44:9f:77:47:6b:3c:86:f5:85:f4:54:43:af:50:
ab:42:02:3b:3f:1c:6a:7c:4d:cf:38:47:83:ce:bf:9e:39:f7:
5c:27:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:42 2025 by rpki-client