Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: dEjKgIoH+ALnToxSdAIY9FPADBxoVgU/JyWUQQmTrws=
Subject key identifier: 31:81:B0:13:21:D7:5B:61:AD:59:E3:9F:43:52:7F:D6:28:56:83:63
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 019A50075C1C7658C1175FF5F95A7CA05317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 143C
Signing time: Tue 04 Nov 2025 18:00:50 +0000
Manifest this update: Tue 04 Nov 2025 18:00:50 +0000
Manifest next update: Wed 05 Nov 2025 18:00:50 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: g2AfsFdVMuKrmD+PAiPnocQpvhwG63aFhQEHvKH+a3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5c:1c:76:58:c1:17:5f:f5:f9:5a:7c:a0:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Nov 4 18:00:50 2025 GMT
Not After : Nov 5 18:00:50 2025 GMT
Subject: CN=3181b01321d75b61ad59e39f43527fd628568363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:8f:56:90:af:bd:fd:9d:d9:00:a7:2d:e8:
21:f7:ef:16:72:6c:17:61:79:42:50:68:70:f5:28:
fc:79:a2:11:e2:62:29:43:3f:54:e3:95:53:34:57:
c5:d4:96:dc:cc:12:3a:ee:07:d4:63:6a:af:a2:8e:
30:a1:61:0c:5e:35:6a:ee:fb:af:b2:03:5f:4c:fa:
91:bc:c6:2c:10:13:a4:ab:56:ef:52:3a:db:ab:8e:
54:1f:11:4f:83:57:d4:47:93:bb:ad:a8:74:b2:38:
9f:fc:3a:63:90:ab:23:14:e5:3b:d1:c9:7f:f5:95:
6c:e3:35:df:35:8c:37:64:b5:51:92:b4:3e:cd:1f:
c8:7f:b0:7a:82:86:98:69:e3:96:a0:dc:5a:0a:25:
7e:31:fc:2b:98:74:47:e5:1a:fb:12:ae:12:3c:54:
f0:60:30:cf:c5:61:28:19:c7:4c:16:68:65:21:10:
64:b2:0b:57:31:b7:e4:5a:25:7e:39:04:92:d0:e5:
f4:8f:71:e6:b6:1c:f8:51:4c:61:17:7c:62:65:8b:
e5:8c:0a:65:21:22:fe:43:1d:fe:93:98:4a:fd:38:
a9:c0:1c:ac:9b:1e:61:72:8e:6c:16:b2:a9:d4:57:
00:d5:32:04:6a:32:84:3a:44:f0:50:8c:d1:39:68:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:B0:13:21:D7:5B:61:AD:59:E3:9F:43:52:7F:D6:28:56:83:63
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:24:61:24:35:f2:62:94:77:f1:2d:b4:01:08:43:5f:45:08:
48:9e:98:56:ab:ed:88:62:16:d6:c8:51:97:d0:85:e2:fd:3b:
51:0a:d2:25:9c:54:1b:cb:6f:dd:fd:97:08:bc:b7:32:f8:3b:
91:f1:e9:0d:ec:4e:75:f1:00:16:52:d1:96:9b:3f:00:d3:d2:
3d:25:3e:0a:ca:24:21:c0:01:54:47:6e:d8:0f:13:72:b4:a3:
4c:0b:16:08:11:55:76:29:91:84:8b:d6:1f:a9:b4:b8:c6:d4:
3d:48:3d:79:27:b9:bf:01:c5:58:50:c4:aa:ba:b1:4d:4e:5c:
46:e7:98:e0:6a:08:82:0c:c8:7f:d8:a2:a4:97:e6:08:eb:ee:
3e:e4:28:ca:9a:75:6a:87:51:d3:52:a5:12:6c:4e:86:d4:bb:
f4:bf:ed:f3:85:b0:6e:34:0c:16:0c:f9:59:45:59:e7:bb:ed:
be:8b:d1:92:ca:be:c5:ab:9a:67:62:1a:46:e3:8e:32:d7:a7:
02:d6:27:fb:a1:be:2f:9f:ec:33:9d:73:31:97:1c:1d:fb:de:
09:a6:bd:a1:34:bf:09:c2:21:9c:60:d7:a3:96:2e:53:f2:b8:
05:19:05:1b:af:ce:9e:c8:be:bc:bf:90:21:6d:5b:fc:f8:d4:
0c:40:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:02:13 2025 by rpki-client