Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: IjdP+gGe3X+n9Pgt6jAqjj1bmqUnTUEYXymF/Sje+kI=
Subject key identifier: 4E:7B:0E:38:DC:D2:3C:3A:53:E4:82:A3:A9:F1:68:1C:23:68:2B:C4
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 01987CE517ABD80492F898D8E75EA32FC4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 01:00:45 +0000
Manifest this update: Wed 06 Aug 2025 01:00:45 +0000
Manifest next update: Thu 07 Aug 2025 01:00:45 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: c8+MuIOGqjYCcLvgToG6ZNwTAUng1Gk0BcAL9JU3j7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:17:ab:d8:04:92:f8:98:d8:e7:5e:a3:2f:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Aug 6 01:00:45 2025 GMT
Not After : Aug 7 01:00:45 2025 GMT
Subject: CN=4e7b0e38dcd23c3a53e482a3a9f1681c23682bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:fe:93:cc:43:bf:71:0e:77:ad:14:83:c7:
b1:85:90:d0:b8:e4:b0:85:a2:99:f2:de:99:60:a5:
1f:3f:62:fe:d8:43:6c:e5:b9:d3:2a:80:68:67:1e:
6d:eb:b3:bf:f2:b4:03:7b:c0:24:30:97:a9:52:d7:
ee:c7:e5:de:ef:cd:e3:81:8f:b4:8f:16:d7:9e:1e:
c1:51:5a:ec:b8:77:4f:fa:44:bd:b4:b2:d6:c0:1e:
8f:a2:12:71:86:1f:f1:76:bd:0c:f6:32:e1:7d:75:
86:4e:0e:5c:bf:64:07:de:51:0b:69:4f:b4:42:c1:
c0:cc:1c:9d:e2:76:2f:05:76:d2:a3:c0:20:0c:de:
b9:21:c6:1f:7a:a8:04:15:13:27:e6:e2:34:cc:96:
aa:cf:1b:fe:18:d0:3e:e1:75:ea:b6:98:fe:fe:67:
a5:6c:9f:91:5c:be:b1:8b:b6:9a:06:6a:91:43:91:
9e:a1:c1:3f:4a:7c:97:ee:9d:47:b0:be:c9:65:ee:
d9:db:f2:ca:45:28:fe:05:a5:3d:d0:d0:f8:36:98:
67:64:ca:1e:c4:9a:a7:c8:22:c4:0e:82:94:4b:dc:
77:de:f4:4d:0c:0d:01:2d:8b:1d:0c:48:9d:c3:c3:
f3:c2:a3:4c:79:1d:b9:f4:7e:a4:8b:67:4f:54:43:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:0E:38:DC:D2:3C:3A:53:E4:82:A3:A9:F1:68:1C:23:68:2B:C4
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c6:53:40:80:24:b4:ea:4f:ef:ee:e8:f4:ba:1d:9c:56:57:
91:9d:88:86:30:04:6a:9f:bc:90:a9:94:84:ff:fe:9c:0f:f0:
11:74:57:f8:2b:e4:e2:83:1e:c6:1e:92:d2:2e:f4:08:a5:c2:
5f:1a:35:cb:20:d6:ae:43:1a:97:65:bc:07:18:71:9d:18:ed:
aa:5e:63:f5:11:c3:ea:39:80:d0:cc:73:fe:8e:fa:40:c5:5c:
73:d9:98:0a:8b:91:6c:25:59:00:8d:c0:1a:9e:13:87:24:6e:
2f:02:61:7f:fb:20:d8:e1:a2:b2:bf:bc:33:31:d1:ac:d3:1c:
93:61:d7:1e:be:d2:2f:f1:24:b3:2e:35:d5:56:86:80:c4:85:
26:9e:39:7f:ec:20:52:ba:b7:f8:81:64:9e:fc:e0:92:7a:33:
98:01:cc:bd:aa:ee:68:05:d1:e7:ae:e2:a3:0e:64:05:1b:3b:
73:a4:e7:54:25:fd:2d:48:4d:15:6f:5a:c4:0c:40:58:3f:e3:
ca:be:20:16:26:6a:38:37:a1:d3:98:65:11:45:76:13:4c:cb:
49:12:74:62:71:fd:58:a7:86:e7:05:ff:9f:0e:28:1b:eb:cb:
2e:4d:11:58:39:11:ac:ea:f5:c7:6b:e0:97:12:da:2c:d0:bc:
de:71:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:56 2025 by rpki-client