Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: MXSdD7csNQClfpRJvCcxS0nmUUkSkQlHSaBzBpq+OPs=
Subject key identifier: E6:1D:59:0F:F1:44:A2:90:0B:50:B3:F3:C3:57:8A:DF:0F:D5:EA:FB
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01983FF43938DD6B2C16F42658CC21509282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 05:00:26 +0000
Manifest this update: Fri 25 Jul 2025 05:00:26 +0000
Manifest next update: Sat 26 Jul 2025 05:00:26 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: sb2zQB9z1DWqyyNQizfQN2jsMn+wbAUxKKj8IiZBD5A=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:39:38:dd:6b:2c:16:f4:26:58:cc:21:50:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jul 25 05:00:26 2025 GMT
Not After : Jul 26 05:00:26 2025 GMT
Subject: CN=e61d590ff144a2900b50b3f3c3578adf0fd5eafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:48:5b:58:bc:12:21:9a:4b:11:0f:78:a5:
ca:65:1e:04:e6:05:3f:08:2c:c7:79:2f:85:6b:76:
21:ba:45:6d:f3:22:1d:71:2a:5b:1e:ed:a2:71:d6:
08:6f:f4:b3:b1:18:8a:57:85:c2:86:95:22:4c:d2:
9d:9e:ed:b2:d1:e2:48:a7:94:49:12:b0:a4:0e:b9:
6e:26:13:ff:81:94:82:7d:5a:cf:b9:ff:0b:2d:96:
79:17:cd:7c:e9:70:23:3e:bc:17:05:3e:fa:83:18:
51:76:c5:2d:ef:b6:83:1f:d2:ec:ec:58:08:43:c7:
88:55:ea:3c:c7:ba:e1:02:a3:c6:4c:af:e8:18:f0:
67:9f:bb:f6:c1:72:43:bb:d2:4b:02:af:55:6c:d3:
e2:7f:3e:66:a1:c6:71:56:5c:00:0f:89:70:9d:c1:
a2:39:89:71:e0:a2:0f:74:47:2b:0a:cd:f7:f3:45:
20:3b:68:8c:a6:e3:d4:03:6f:2a:ec:a1:75:e5:a9:
f8:c3:5c:e1:d1:fd:9a:4b:b2:84:28:c4:6a:ce:62:
0b:70:0e:04:01:6e:4d:a5:1a:10:79:bb:2b:df:93:
a7:19:21:27:81:73:68:75:7b:10:48:c3:a6:52:c6:
66:0a:65:19:5b:b6:9f:53:11:23:e3:83:42:ed:a9:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:59:0F:F1:44:A2:90:0B:50:B3:F3:C3:57:8A:DF:0F:D5:EA:FB
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:60:46:43:d5:59:96:ae:7c:b4:bd:4d:8e:72:d6:02:3f:
70:2e:82:9a:5d:a6:b3:3b:e1:8f:ca:f0:a3:09:90:45:68:3a:
50:94:1f:92:9b:9e:57:50:62:8f:79:07:d1:a8:db:c9:01:4d:
46:b6:b7:a7:d9:e9:d6:01:b1:90:fa:6a:2c:45:75:2f:c3:30:
b2:91:ec:fb:0b:1c:43:c6:a9:c8:e7:a2:1d:97:12:05:ae:f0:
d6:3a:95:2c:07:d7:bd:40:8a:82:66:23:a0:2c:3a:de:20:96:
51:79:f0:70:64:2d:19:c6:5d:74:41:26:20:09:e4:24:ad:3b:
4f:89:94:3d:41:c4:0e:10:4d:24:fa:a0:79:7f:cf:a2:21:a4:
18:dd:a7:d4:20:ab:95:96:9a:44:1e:8e:74:71:f7:c1:62:17:
30:84:5c:e3:ff:1c:1d:75:e9:00:49:66:5a:fb:3f:5e:f7:a1:
33:fa:52:d9:d3:05:6e:91:de:30:ee:8c:72:1c:cc:a9:34:d7:
1d:73:64:9c:88:08:c2:5c:c2:8c:af:79:9b:51:c0:e2:56:ac:
d8:ef:92:b2:82:bb:bd:5f:f8:03:ca:11:07:04:8c:44:59:a7:
00:86:9b:0c:28:32:0d:80:1b:a7:16:cc:b4:25:b1:3e:a8:53:
13:d8:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:15 2025 by rpki-client