Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: Vj6h7mqGlXGtRE2UpWPPISbkP4LhCQJw+6dfbuB+sfM=
Subject key identifier: 44:00:AC:CA:0F:01:1A:68:F7:18:8C:FD:D2:BE:25:0D:03:77:F3:D6
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 01984A4183F82F5A00C763EEC64A6331FF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0F19
Signing time: Sun 27 Jul 2025 05:01:04 +0000
Manifest this update: Sun 27 Jul 2025 05:01:04 +0000
Manifest next update: Mon 28 Jul 2025 05:01:04 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: 7FLIFyc6PS0BAd17/L+lTgmLYQ8S10/Aaa1M9Ka/yy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:83:f8:2f:5a:00:c7:63:ee:c6:4a:63:31:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jul 27 05:01:04 2025 GMT
Not After : Jul 28 05:01:04 2025 GMT
Subject: CN=4400acca0f011a68f7188cfdd2be250d0377f3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:14:80:29:c0:37:b9:07:8c:d9:d5:73:a7:
8e:f8:b0:5e:fc:90:2e:ca:1a:f3:93:e1:f3:b1:4e:
02:a6:27:30:84:9a:6b:eb:d5:53:66:1e:33:fd:ce:
0b:9f:c4:11:56:9c:b6:2c:b8:3d:36:e2:fb:f3:68:
3a:af:f5:33:7c:c3:83:1f:0f:05:99:21:eb:cf:50:
4f:f9:20:0f:2c:12:93:cb:3e:1b:0d:c6:fc:fd:f3:
26:ee:b3:53:40:e1:0e:4c:13:55:1f:db:15:da:47:
09:20:fc:d0:34:51:9a:73:29:58:19:db:da:c2:4b:
45:46:f1:db:cf:3b:ea:ef:66:13:3f:d6:b8:01:d2:
f5:7a:70:f6:bf:4d:ad:98:bb:13:af:12:fe:e2:de:
25:48:7f:7a:2a:e1:f3:48:12:b0:e9:42:32:52:59:
5d:01:0f:61:29:30:23:18:d3:c8:35:a2:8d:48:90:
d6:10:4c:88:ec:ba:95:3b:af:90:f9:83:3c:ff:74:
64:be:d5:0f:68:45:e6:bf:6f:c4:46:2b:c0:6d:70:
7e:0d:58:46:78:85:00:9b:43:e7:84:ca:c8:a8:9c:
51:2a:7b:46:91:1a:28:b5:22:42:cc:6d:20:2c:3d:
0d:d0:30:18:9d:84:29:33:01:ef:ac:b6:0e:b9:81:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:AC:CA:0F:01:1A:68:F7:18:8C:FD:D2:BE:25:0D:03:77:F3:D6
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:38:a5:36:75:e5:df:f9:00:16:fd:9c:9b:6c:be:19:45:
c5:26:5d:57:a8:94:7d:e3:e3:b5:fd:75:dd:25:e0:00:3a:55:
c5:19:86:00:5b:cf:a9:e5:9e:7e:ed:f4:c2:62:bf:f0:6b:fe:
63:6c:a6:0c:f1:b3:c6:99:ec:4e:3b:f1:36:76:53:ab:28:b1:
ea:ae:1e:51:c9:f7:e3:f3:b7:4e:03:a2:50:72:05:e2:66:9d:
61:ea:95:85:a4:b4:b9:00:27:9c:57:75:05:ec:77:14:75:d4:
ea:ee:83:e4:fe:05:ea:b2:b2:56:51:4d:c6:a3:b9:29:02:65:
14:ab:c5:c8:f5:bd:5e:57:bd:c7:a2:30:06:65:0d:5e:18:dd:
71:82:81:4c:76:52:ba:c0:62:09:c4:11:fa:51:7b:b7:f3:c0:
8e:55:3d:3f:2c:ee:87:75:d7:2b:19:36:a3:10:90:8f:d6:6b:
6e:2c:ff:5b:02:ca:04:ae:55:b9:12:84:a5:89:ad:95:14:35:
6e:d7:2d:4c:49:94:62:3b:8d:10:65:34:8d:18:91:3f:c3:de:
82:6e:d5:ed:6c:9e:a5:0b:d6:9d:f2:a6:56:0f:0c:fd:b8:12:
68:db:5c:a1:84:fd:bc:dd:a4:75:0b:9a:4a:1a:44:1b:4e:d3:
99:3e:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:02 2025 by rpki-client