Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: n2xzzDjRmHPOYhDHzEVG+1bSygJaJkrUsLrYieHeyx8=
Subject key identifier: B1:C0:64:D8:0E:F3:7D:15:2A:6F:34:A8:1A:D3:E2:13:E9:FE:D1:58
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 01987E9D0D0F297A00CD25784DD7DEC8868F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 134B
Signing time: Wed 06 Aug 2025 09:01:18 +0000
Manifest this update: Wed 06 Aug 2025 09:01:18 +0000
Manifest next update: Thu 07 Aug 2025 09:01:18 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: 0Rm5hIp4UDI0e2zhM5LN+GvsCdIR5R8UDS/gHHsh3nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:0d:0f:29:7a:00:cd:25:78:4d:d7:de:c8:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Aug 6 09:01:18 2025 GMT
Not After : Aug 7 09:01:18 2025 GMT
Subject: CN=b1c064d80ef37d152a6f34a81ad3e213e9fed158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:35:52:c5:8d:88:38:97:01:02:6e:9a:ee:
34:a1:08:61:88:47:f1:c5:d7:b3:0c:89:4c:7a:ff:
6d:5d:cd:9a:3d:45:47:e3:d9:a1:cc:cc:0a:11:c9:
71:71:6e:77:69:42:5f:e6:35:4a:f6:a2:5f:01:d2:
3f:76:f0:a4:d8:db:6c:e3:70:ff:33:27:2b:b6:8d:
12:06:b5:88:5c:3b:fc:fe:e2:b3:26:4d:f4:c6:f1:
18:a5:e2:a7:a3:82:59:c2:26:bf:03:ae:3b:41:06:
20:aa:70:62:44:4f:6d:dc:08:76:6b:3e:d0:0f:19:
40:a2:3c:e4:ba:e2:eb:ab:a9:9a:f4:f9:5a:fa:cb:
10:ec:80:9a:c6:00:51:5b:b4:f3:0d:6f:98:b1:e4:
11:f7:56:14:f8:52:03:01:fe:82:3d:cf:00:44:0d:
f4:9d:96:e3:b4:73:d3:9b:c7:3d:40:f6:03:c4:1c:
00:a4:1f:25:9e:2e:4f:70:36:99:3a:19:9d:d8:32:
6c:98:7a:f1:28:42:dc:2d:8c:7f:84:22:39:9e:8a:
a4:d1:e1:f1:e9:2f:f9:86:f0:87:77:56:a7:42:98:
56:2e:4d:b2:0a:9b:6f:b3:f8:26:eb:57:84:d8:98:
99:c2:f5:f4:e2:69:b4:57:49:1c:b8:08:03:5d:c5:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:64:D8:0E:F3:7D:15:2A:6F:34:A8:1A:D3:E2:13:E9:FE:D1:58
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:52:03:cd:cf:d2:b3:b0:7f:24:09:bb:34:e3:c5:58:35:
50:11:f2:3b:a8:98:ac:d8:f4:8d:e5:bb:11:12:1d:d8:f2:1f:
ae:82:ae:47:8e:98:8a:61:36:d7:96:1f:f0:4d:ef:0e:98:a0:
6c:44:5a:10:39:f3:a1:11:e0:3b:b9:4b:34:57:55:6d:60:44:
f3:d4:b9:90:f7:13:e9:d0:54:a6:30:d0:0e:8d:ea:12:80:23:
f6:d9:38:28:2f:7b:79:f1:51:b3:32:69:38:c5:bc:c5:9d:eb:
b7:63:78:e3:90:0f:32:72:d0:42:52:e4:58:d5:59:49:c2:41:
83:f3:48:36:ea:fc:93:c4:c7:ae:32:07:b0:8c:eb:84:b3:b5:
82:69:56:45:a5:9e:76:76:28:ba:7a:e4:57:1f:fb:16:f8:2a:
1c:85:36:65:a2:6f:54:93:f8:ea:92:53:00:3d:c9:8a:c0:15:
e7:ac:e4:1c:0b:08:a3:37:96:c7:6d:12:1c:7b:c1:0e:e0:b4:
b6:68:89:4f:39:d1:b2:ca:3f:06:21:ad:59:ca:16:a8:13:7c:
8c:0f:97:25:f0:b9:cd:ce:d8:a3:e7:64:76:f5:cb:4d:22:66:
63:7c:b3:cb:86:ef:47:67:04:3f:b8:3f:fd:64:81:99:ba:27:
e6:ec:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:28 2025 by rpki-client