Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: 8svTVNceIr8KnelJXTTTwwV1h1phfFMS5RvSkcywUiQ=
Subject key identifier: 51:A0:82:6D:2B:87:89:A1:B2:E4:54:E2:0A:F0:D8:0B:B8:59:53:AD
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019896A4BE15E1CD3C1085BC2AC3CE691294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 1624
Signing time: Mon 11 Aug 2025 01:00:35 +0000
Manifest this update: Mon 11 Aug 2025 01:00:35 +0000
Manifest next update: Tue 12 Aug 2025 01:00:35 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: Or6I0FPxFO105Y6JgcLP8XoDEG4K+4QN0iGEJCb04F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:be:15:e1:cd:3c:10:85:bc:2a:c3:ce:69:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Aug 11 01:00:35 2025 GMT
Not After : Aug 12 01:00:35 2025 GMT
Subject: CN=51a0826d2b8789a1b2e454e20af0d80bb85953ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:87:c4:a9:7e:d8:43:e3:83:63:94:d0:a0:
99:b7:65:d5:ab:66:fa:bf:0f:31:9d:2c:7a:58:15:
63:1e:56:5f:85:98:e3:f6:45:25:76:60:7b:12:61:
c1:57:8e:88:61:80:a7:32:fb:fe:ff:16:d8:3c:18:
95:f4:96:f4:c6:ff:f3:70:95:d0:93:c8:a5:3e:60:
d3:1a:6d:6c:16:89:aa:d3:4f:95:19:3e:ff:81:0f:
40:85:a2:9d:1c:a3:17:5c:11:93:41:d2:95:0f:57:
27:6d:30:1f:cd:a6:7a:5c:0b:42:07:30:5b:08:f2:
8a:37:d0:35:3d:21:4b:65:7b:cb:56:e8:57:03:9f:
2a:47:39:73:78:41:5c:18:4d:b3:40:c9:69:10:e1:
2a:f1:84:be:34:51:46:fc:8e:5e:d4:c6:69:98:f0:
dc:c3:2a:70:ef:fe:86:8f:d6:9e:77:06:c1:28:90:
77:22:f8:74:80:3c:eb:fc:43:61:3d:57:da:be:92:
5b:a3:d1:85:ad:3c:77:01:91:f9:38:5d:6b:22:c3:
7d:79:07:51:82:64:b3:84:cf:ac:ab:9b:d6:50:45:
30:3e:a7:d2:23:a8:56:fb:d2:70:f2:30:35:f3:3f:
cd:0c:ad:bd:2b:34:66:f4:fb:79:49:d3:95:36:9e:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:82:6D:2B:87:89:A1:B2:E4:54:E2:0A:F0:D8:0B:B8:59:53:AD
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b1:77:e1:65:70:dc:c2:62:4e:95:39:bf:e5:8a:e9:85:cf:
1e:85:43:79:fd:48:85:45:eb:6d:c2:c4:d8:f2:21:07:59:01:
fc:fe:ef:53:02:18:e2:91:8d:f8:99:5a:f1:ac:da:73:c6:c9:
88:4d:3c:2a:03:af:b3:41:a1:9d:73:d3:f5:f6:3d:06:44:1f:
c5:a9:5d:19:11:a2:5d:a7:ec:db:10:bc:a1:4a:0b:22:a5:0f:
01:d5:c1:cb:4f:bf:21:2e:f1:08:86:4e:bb:b2:38:e2:7b:15:
15:9b:85:58:47:73:d7:af:02:87:17:5c:b4:23:e2:a3:64:4e:
2a:e5:c7:ff:8a:b8:40:66:6a:ba:68:a5:9a:01:a8:fc:90:bd:
a1:20:c9:1b:b9:f1:6e:21:15:09:a7:99:b6:c0:64:54:d5:9c:
a4:06:c2:c8:0d:0c:f7:36:cd:a0:1d:ff:7e:8a:b5:68:6b:26:
f6:d5:24:48:b3:c8:a9:ce:bd:81:a6:a6:70:31:e6:fe:f9:76:
5b:67:92:e9:7b:15:b3:c7:05:65:f4:c0:d9:42:9f:05:ca:75:
97:21:06:8e:3b:93:c2:33:91:89:34:76:9f:7a:6a:36:eb:f1:
62:e1:96:78:67:84:f8:7f:34:9f:4a:53:8a:4e:7a:88:5e:c3:
76:fe:42:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpL4V4c08EIW8KsPOaRKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzY4YWFjMGY0YTI4YzhhMzE3NjBmMDZiNTc4ZGFlNDUz
MTQ2ZjAwHhcNMjUwODExMDEwMDM1WhcNMjUwODEyMDEwMDM1WjAzMTEwLwYDVQQD
Eyg1MWEwODI2ZDJiODc4OWExYjJlNDU0ZTIwYWYwZDgwYmI4NTk1M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpSHxKl+2EPjg2OU0KCZt2XVq2b6
vw8xnSx6WBVjHlZfhZjj9kUldmB7EmHBV46IYYCnMvv+/xbYPBiV9Jb0xv/zcJXQ
k8ilPmDTGm1sFomq00+VGT7/gQ9AhaKdHKMXXBGTQdKVD1cnbTAfzaZ6XAtCBzBb
CPKKN9A1PSFLZXvLVuhXA58qRzlzeEFcGE2zQMlpEOEq8YS+NFFG/I5e1MZpmPDc
wypw7/6Gj9aedwbBKJB3Ivh0gDzr/ENhPVfavpJbo9GFrTx3AZH5OF1rIsN9eQdR
gmSzhM+sq5vWUEUwPqfSI6hW+9Jw8jA18z/NDK29KzRm9Pt5SdOVNp7KpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGggm0rh4mhsuRU4grw2Au4WVOtMB8GA1UdIwQY
MBaAFDY2iqwPSijIoxdg8GtXja5FMUbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQt
NTAyNDdmMTJjZTc0LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQtNTAyNDdmMTJjZTc0
LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLF34WVw
3MJiTpU5v+WK6YXPHoVDef1IhUXrbcLE2PIhB1kB/P7vUwIY4pGN+Jla8azac8bJ
iE08KgOvs0GhnXPT9fY9BkQfxaldGRGiXafs2xC8oUoLIqUPAdXBy0+/IS7xCIZO
u7I44nsVFZuFWEdz168ChxdctCPio2ROKuXH/4q4QGZqumilmgGo/JC9oSDJG7nx
biEVCaeZtsBkVNWcpAbCyA0M9zbNoB3/foq1aGsm9tUkSLPIqc69gaamcDHm/vl2
W2eS6XsVs8cFZfTA2UKfBcp1lyEGjjuTwjORiTR2n3pqNuvxYuGWeGeE+H80n0pT
ik56iF7Ddv5CHg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:13:13 2025 by rpki-client