Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: HOX5RKgVhTs+txaNhzDQ7WkaLp+9T7H2fphO3H+QlcY=
Subject key identifier: 0B:37:2C:48:02:11:4F:DE:AA:D8:5B:98:3E:B6:C2:2B:27:49:4E:A2
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 01984966B8DFAE2385E61DB4350C2BE402C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:02:05 +0000
Manifest this update: Sun 27 Jul 2025 01:02:05 +0000
Manifest next update: Mon 28 Jul 2025 01:02:05 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: xzMUVmqpmXiyVdlTOK+kwYdd+0XldCOQ6XGMWxq4xCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b8:df:ae:23:85:e6:1d:b4:35:0c:2b:e4:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Jul 27 01:02:05 2025 GMT
Not After : Jul 28 01:02:05 2025 GMT
Subject: CN=0b372c4802114fdeaad85b983eb6c22b27494ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:bf:94:91:38:f5:14:f2:d1:0e:07:67:ff:
ac:69:d8:7c:9e:a6:5b:67:1c:92:87:e2:45:90:87:
e6:f8:41:ad:e3:d6:1c:b0:33:25:e3:3e:ff:c6:29:
f6:24:11:e8:6a:9e:b4:f5:18:2e:c6:69:3f:fa:f5:
a9:19:b1:c3:cb:81:ef:ea:d6:ab:c6:5b:42:1e:b0:
f5:63:9e:ae:fc:73:10:ca:9a:4d:bd:f3:c0:c5:94:
26:dd:56:30:87:68:bf:29:6e:93:41:e1:f8:30:e3:
2d:ab:a6:8f:69:33:d5:02:52:b5:59:a0:ca:83:a8:
11:91:66:fb:6f:0d:41:1e:18:b3:50:96:96:17:a9:
a3:d6:f0:26:52:42:31:3b:08:1d:12:d9:72:84:f4:
70:f7:e3:9d:54:00:66:06:f1:ad:2d:0a:86:d4:32:
f4:d5:33:8f:fe:3e:79:49:b9:b2:e2:de:bf:f5:42:
6b:03:20:7d:dc:a5:ba:de:5e:3e:e6:ec:fc:8f:a0:
9d:67:44:cf:b1:28:0b:31:e2:f4:1e:2e:57:3d:fd:
f1:85:30:ad:d2:16:dc:a6:94:c9:87:73:b2:76:36:
c7:c3:4d:aa:8e:6a:74:b8:4a:ed:75:11:2c:3e:db:
c0:d8:40:48:e2:cd:4a:d3:d0:7e:70:72:8b:a6:d3:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:37:2C:48:02:11:4F:DE:AA:D8:5B:98:3E:B6:C2:2B:27:49:4E:A2
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:4f:75:f8:dd:5b:4b:a5:23:49:34:8f:78:b4:0d:be:85:
6b:26:a5:91:32:a1:33:1f:c9:ae:11:71:03:c5:21:25:b5:9e:
e4:b3:86:32:e1:9f:cc:94:5d:e3:3d:61:a9:aa:6e:16:53:94:
2a:38:ba:70:c6:a9:d3:62:be:05:05:cb:47:f7:e3:42:9c:3c:
ec:5e:98:66:5a:84:3d:dc:44:e0:0a:10:5f:a1:ee:03:44:07:
5b:34:89:b0:53:f8:45:3c:49:32:ee:1b:6c:8b:b8:3e:cd:53:
6c:07:76:32:ab:fa:5e:d4:38:51:ba:83:12:35:48:10:9a:7c:
2a:17:c0:46:20:e5:2b:2e:d2:6b:dc:02:f3:c1:ff:22:15:14:
5f:c8:ae:84:77:2f:c3:a5:4b:20:2f:40:a9:5a:3b:0a:50:e9:
66:85:4f:ac:53:aa:20:4c:ec:c0:7f:0f:d0:cc:56:b8:cb:80:
54:f9:38:0a:5e:a9:2f:34:18:18:5a:39:bf:7b:e2:97:3b:c7:
5e:4a:3a:c3:b6:4a:d7:5f:f7:b9:b6:78:0d:9d:2b:10:a9:1b:
33:dd:d4:30:7d:3a:33:90:94:73:1e:49:fd:78:36:29:30:44:
1c:75:14:c7:4a:d9:ed:1b:6f:4a:4b:a1:52:08:2b:9f:fa:3c:
28:07:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:48:14 2025 by rpki-client