Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: GiBDNzLGCb/zx47PCBP71qrYmZk0XxundUN/jI1MW1Q=
Subject key identifier: 2F:24:5A:60:D5:EF:51:9B:F5:81:21:54:16:A5:3C:3E:21:C5:15:A5
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 0198499C2E52372F04272E7BC02D47A20880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 0F70
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: bNZafj1NH1ZZRsGEC8qfbgfskIU36jsZsZaI4SMqvGE=)
2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2e:52:37:2f:04:27:2e:7b:c0:2d:47:a2:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=2f245a60d5ef519bf581215416a53c3e21c515a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:3f:e8:4f:7f:85:2e:f4:1a:01:3c:12:9f:
5c:a4:56:bc:52:28:db:8d:70:3c:fe:14:86:31:1f:
eb:94:ca:48:89:7a:a0:c1:37:78:47:5f:48:02:72:
88:41:9e:51:0a:ce:0e:1d:e3:45:b6:c5:04:49:61:
82:ec:22:62:93:bb:6d:29:9f:50:79:8c:e8:f7:9e:
9f:de:ff:f6:9b:e1:52:cd:94:f7:ea:6d:ff:13:88:
eb:f7:5e:31:4e:e6:02:53:d9:ae:d2:51:59:46:8b:
d4:14:4f:be:c4:39:22:a6:e6:ac:1e:32:4c:7f:47:
2b:66:83:10:f6:40:7b:f7:6b:d0:e5:02:fa:9d:6a:
64:65:52:7d:ce:f0:17:af:67:9d:df:6d:b3:01:ee:
b8:e0:15:78:88:19:b0:8a:d3:ea:f7:6e:6c:21:13:
a5:c3:54:95:2e:d3:9d:d5:7a:30:dc:17:98:65:e0:
05:03:61:e6:0b:ba:40:8e:94:0d:5a:3c:16:43:5e:
33:ca:8d:5c:b7:29:ef:7a:20:ec:7d:19:80:0a:5a:
db:30:72:2d:66:ee:09:b9:de:92:b9:b7:5f:c2:a6:
c9:da:4e:94:b6:5d:3e:7e:7e:32:7b:0a:ad:b3:6e:
cd:37:f9:53:22:a1:54:b5:eb:94:5b:0e:6e:7a:b4:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:24:5A:60:D5:EF:51:9B:F5:81:21:54:16:A5:3C:3E:21:C5:15:A5
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:3a:b4:6c:8a:9e:d1:4f:4f:21:96:ea:12:bb:9d:cf:cb:
7a:37:b3:15:83:54:2b:11:98:ab:c3:7a:3a:7c:ae:df:53:1e:
68:90:09:73:85:cf:13:9b:f9:31:0b:e6:6d:2d:d4:71:1d:e9:
43:ec:51:99:e1:eb:90:cd:e0:8f:a6:f7:51:7c:a9:a0:13:3c:
57:4b:2b:d1:cf:77:e9:41:fe:be:b4:b0:aa:a8:92:0e:5c:69:
d6:d8:0a:a7:16:6e:7d:9f:37:5e:8b:d0:e5:c0:22:0e:83:78:
e3:97:00:62:46:8c:cb:93:c9:e5:df:aa:72:3a:26:32:1c:81:
f8:28:8f:48:8f:77:8c:a7:22:61:1d:ac:e2:a5:5e:17:9a:90:
96:6b:96:40:21:16:2f:d5:2c:91:7d:97:f8:ee:76:dd:4a:a8:
f7:fc:e9:09:3f:c4:a7:a9:8d:a7:78:50:4b:0f:0f:0d:48:6c:
85:81:61:c3:b9:af:bf:4e:ea:d4:01:74:81:57:b4:11:e8:da:
8c:04:39:e3:17:0c:d0:55:e3:03:32:13:e2:7b:e7:d3:f3:6b:
39:0d:7a:d8:90:30:55:b8:5b:5f:e6:54:c3:9d:51:ac:62:e7:
11:ce:04:03:8e:49:04:ba:80:93:f6:5e:31:1a:26:9c:03:6c:
77:16:0a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnC5SNy8EJy57wC1HogiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTYyZWM3NzY0NjJiNzZlNjNhZTgxNTViYjI3YjlkOGM3
ZTdmZGUwHhcNMjUwNzI3MDIwMDI4WhcNMjUwNzI4MDIwMDI4WjAzMTEwLwYDVQQD
EygyZjI0NWE2MGQ1ZWY1MTliZjU4MTIxNTQxNmE1M2MzZTIxYzUxNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFM/6E9/hS70GgE8Ep9cpFa8Uijb
jXA8/hSGMR/rlMpIiXqgwTd4R19IAnKIQZ5RCs4OHeNFtsUESWGC7CJik7ttKZ9Q
eYzo956f3v/2m+FSzZT36m3/E4jr914xTuYCU9mu0lFZRovUFE++xDkipuasHjJM
f0crZoMQ9kB792vQ5QL6nWpkZVJ9zvAXr2ed322zAe644BV4iBmwitPq925sIROl
w1SVLtOd1Xow3BeYZeAFA2HmC7pAjpQNWjwWQ14zyo1ctynveiDsfRmAClrbMHIt
Zu4Jud6SubdfwqbJ2k6Utl0+fn4yewqts27NN/lTIqFUteuUWw5uerQgOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8kWmDV71Gb9YEhVBalPD4hxRWlMB8GA1UdIwQY
MBaAFDSWLsd2Rit25jroFVuye52Mfn/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTIt
NGYzYmVhOWZiOTVjLzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTItNGYzYmVhOWZiOTVj
LzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp46tGyK
ntFPTyGW6hK7nc/LejezFYNUKxGYq8N6Onyu31MeaJAJc4XPE5v5MQvmbS3UcR3p
Q+xRmeHrkM3gj6b3UXypoBM8V0sr0c936UH+vrSwqqiSDlxp1tgKpxZufZ83XovQ
5cAiDoN445cAYkaMy5PJ5d+qcjomMhyB+CiPSI93jKciYR2s4qVeF5qQlmuWQCEW
L9UskX2X+O523Uqo9/zpCT/Ep6mNp3hQSw8PDUhshYFhw7mvv07q1AF0gVe0Eeja
jAQ54xcM0FXjAzIT4nvn0/NrOQ162JAwVbhbX+ZUw51RrGLnEc4EA45JBLqAk/Ze
MRomnANsdxYK/g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:47 2025 by rpki-client