Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: iQGXglylXYKr7IZ9+LA3HnYt4Ax/uvM9zBUPD7AXiAY=
Subject key identifier: 1E:03:12:73:D0:43:B2:69:38:F0:81:24:9E:35:EF:6C:BE:00:54:AE
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 01985268355517756D6D50A3A9E923A38F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0CAC
Signing time: Mon 28 Jul 2025 19:00:17 +0000
Manifest this update: Mon 28 Jul 2025 19:00:17 +0000
Manifest next update: Tue 29 Jul 2025 19:00:17 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: dpKjGEm5woqClGGR0nRwB79hrpCzVkK5a4G8LuTt7xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:35:55:17:75:6d:6d:50:a3:a9:e9:23:a3:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Jul 28 19:00:17 2025 GMT
Not After : Jul 29 19:00:17 2025 GMT
Subject: CN=1e031273d043b26938f081249e35ef6cbe0054ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:5d:5e:4d:10:ed:5d:f0:3d:e8:7f:32:1b:
5b:93:f0:39:10:af:97:4d:ad:94:7f:f8:05:85:f8:
17:00:d1:26:33:7d:ad:48:ad:38:45:02:91:d4:22:
d7:59:58:ac:81:c6:9b:68:e6:b0:17:3d:11:b5:99:
7f:37:81:b6:22:db:bf:d6:40:fc:bf:29:98:d8:84:
6c:dc:06:91:63:29:56:41:e0:6c:dd:7b:a2:40:16:
a5:b8:f9:4c:ff:3f:77:b9:8a:55:7a:60:c5:fb:99:
a7:41:72:d8:1f:8c:97:9b:7b:0d:f8:1f:e4:79:9e:
89:34:27:29:0b:fa:5f:86:97:4b:11:b3:9f:c8:f0:
45:53:cf:0c:cf:a0:4b:2c:94:d6:12:0a:e2:c2:43:
ad:3b:c9:18:cd:5e:99:ba:84:3a:1a:84:70:32:15:
f0:47:98:24:7a:74:b1:a3:81:cd:de:1c:19:8c:1d:
5a:9f:48:4e:fb:ec:cb:30:c6:4f:7b:e5:86:37:87:
db:81:92:50:d1:f4:6f:4c:9b:c8:99:03:1f:95:a2:
c7:cb:d1:15:de:0b:d3:3f:81:e9:ad:c2:c2:2a:29:
2a:92:09:23:dd:6f:ac:39:e9:23:53:d2:26:fe:e9:
d5:49:b5:c3:58:97:7f:89:b6:bd:57:cc:68:56:d4:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:12:73:D0:43:B2:69:38:F0:81:24:9E:35:EF:6C:BE:00:54:AE
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:82:fc:e8:0a:92:09:76:50:72:ad:20:c1:d2:a9:e6:6a:3f:
f5:6f:e7:57:76:ec:1b:f2:c0:75:1c:0f:92:dd:cb:10:cb:8d:
e8:b0:9e:24:14:e2:a5:82:f7:a5:72:55:44:7b:da:9f:69:9a:
55:05:52:52:b6:74:72:36:8b:88:88:e1:4a:2b:3a:a8:63:4e:
ea:b9:a2:2e:b3:4a:f4:9b:1e:0e:21:0c:b1:67:3f:39:e0:31:
c8:cc:66:5a:0c:3a:ac:7d:1c:14:64:b7:74:c2:d1:51:52:6e:
5b:b3:09:ad:f6:7a:a0:76:0e:11:c9:00:17:47:87:c5:62:cf:
34:41:ff:bc:f3:b1:00:83:2b:4d:8a:44:42:da:8f:35:d8:d9:
f3:e5:e6:9b:bf:20:45:fc:ab:2d:29:65:ee:f1:4f:0e:5c:90:
99:fa:9b:be:e7:4c:2f:c3:41:78:41:aa:26:0f:08:b3:93:5e:
df:65:4b:15:0c:5b:96:0a:9f:7e:b3:7c:e6:ea:b1:e1:5a:a6:
c6:5d:47:fc:a8:68:ca:40:d0:8b:90:96:7b:47:c5:c2:b2:ba:
c4:ac:44:b6:a5:4d:e6:97:ed:0d:b7:a9:f6:b7:60:1f:11:85:
22:5f:58:04:db:da:a1:0a:04:d0:40:26:ec:95:2f:32:75:ca:
02:f2:49:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaDVVF3VtbVCjqekjo48nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzNkNDZkMjAyNzBmNDljOTBmMTk4M2ViMDQ0MmRhMmM2
ZGQ2MjQwHhcNMjUwNzI4MTkwMDE3WhcNMjUwNzI5MTkwMDE3WjAzMTEwLwYDVQQD
EygxZTAzMTI3M2QwNDNiMjY5MzhmMDgxMjQ5ZTM1ZWY2Y2JlMDA1NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhJdXk0Q7V3wPeh/Mhtbk/A5EK+X
Ta2Uf/gFhfgXANEmM32tSK04RQKR1CLXWVisgcabaOawFz0RtZl/N4G2Itu/1kD8
vymY2IRs3AaRYylWQeBs3XuiQBaluPlM/z93uYpVemDF+5mnQXLYH4yXm3sN+B/k
eZ6JNCcpC/pfhpdLEbOfyPBFU88Mz6BLLJTWEgriwkOtO8kYzV6ZuoQ6GoRwMhXw
R5gkenSxo4HN3hwZjB1an0hO++zLMMZPe+WGN4fbgZJQ0fRvTJvImQMflaLHy9EV
3gvTP4HprcLCKikqkgkj3W+sOekjU9Im/unVSbXDWJd/iba9V8xoVtT4IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4DEnPQQ7JpOPCBJJ4172y+AFSuMB8GA1UdIwQY
MBaAFJ4z1G0gJw9JyQ8Zg+sEQtosbdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OWI2OWQtMjM3NS00NmE5LTkxYjkt
MThkOTAwMjdjMmY5LzEvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80OWI2OWQtMjM3NS00NmE5LTkxYjktMThkOTAwMjdjMmY5
LzEvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoL86AqS
CXZQcq0gwdKp5mo/9W/nV3bsG/LAdRwPkt3LEMuN6LCeJBTipYL3pXJVRHvan2ma
VQVSUrZ0cjaLiIjhSis6qGNO6rmiLrNK9JseDiEMsWc/OeAxyMxmWgw6rH0cFGS3
dMLRUVJuW7MJrfZ6oHYOEckAF0eHxWLPNEH/vPOxAIMrTYpEQtqPNdjZ8+Xmm78g
RfyrLSll7vFPDlyQmfqbvudML8NBeEGqJg8Is5Ne32VLFQxblgqffrN85uqx4Vqm
xl1H/KhoykDQi5CWe0fFwrK6xKxEtqVN5pftDbep9rdgHxGFIl9YBNvaoQoE0EAm
7JUvMnXKAvJJ+w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:36 2025 by rpki-client