Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: Bm8iOPUJCs5C5JeXMtgjqmFqvPvWArdMGdAQ/cBwOPM=
Subject key identifier: B4:DC:F0:8C:6F:9F:F9:A4:7C:DF:32:3C:91:8F:A3:23:CD:E3:1E:7C
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0198511FA4D11E12E00E96E4D5D3A2EE5BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1224
Signing time: Mon 28 Jul 2025 13:01:25 +0000
Manifest this update: Mon 28 Jul 2025 13:01:25 +0000
Manifest next update: Tue 29 Jul 2025 13:01:25 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: MAdm6Sf6t65eRM4xGzzFaJk3YU5/KmcbME9urqNoGyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:a4:d1:1e:12:e0:0e:96:e4:d5:d3:a2:ee:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Jul 28 13:01:25 2025 GMT
Not After : Jul 29 13:01:25 2025 GMT
Subject: CN=b4dcf08c6f9ff9a47cdf323c918fa323cde31e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:c4:47:82:45:b6:e5:66:65:92:be:cf:0d:
91:f5:e3:be:15:bc:90:8e:d2:77:24:4c:88:23:88:
5f:dd:11:70:95:b6:df:d3:71:68:75:79:0a:91:08:
a8:03:d9:d2:a0:e0:ef:90:9e:7a:14:bb:a2:dd:0c:
8e:bd:fb:a3:44:26:31:41:cc:ef:6f:8f:63:b9:d6:
2a:8f:67:0b:17:ce:10:71:e0:0c:68:3e:1f:db:06:
e3:f1:d6:bd:60:63:5b:e7:fb:0f:44:03:33:75:d3:
51:51:40:30:d6:34:5f:14:b3:d8:f0:2e:56:af:a9:
26:5c:fe:b7:17:54:93:64:39:09:51:21:b7:7b:88:
7c:f4:b2:17:3c:6b:84:cb:86:e2:d0:c2:59:19:46:
5a:ca:ae:01:59:7d:b3:1e:5a:2a:f4:90:59:b3:6e:
d0:24:d9:01:d2:87:d7:61:b2:66:b1:a6:35:fc:29:
12:0e:09:dc:3d:62:74:d3:c1:f3:c3:cd:61:d6:41:
55:16:5d:ca:82:3e:9a:be:e3:aa:d4:7e:a6:ba:7e:
bf:c8:a2:ce:55:22:b9:65:93:1e:b3:15:f0:5e:8b:
83:ea:25:25:4b:f1:5a:21:57:89:4a:8d:60:fe:18:
76:7f:98:19:ab:4a:65:6a:3d:38:2e:c7:c6:f1:64:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:F0:8C:6F:9F:F9:A4:7C:DF:32:3C:91:8F:A3:23:CD:E3:1E:7C
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:aa:e4:31:5c:77:cf:64:d9:10:d5:1b:dc:27:ec:24:ac:
ca:46:5d:d4:13:81:db:f3:13:8b:85:12:b7:7d:1c:75:cb:52:
76:b2:cb:44:be:d6:6a:66:4e:8b:24:b8:e6:d6:69:a7:6b:7a:
f1:77:08:24:72:b5:28:66:9b:c6:ed:58:26:31:da:db:17:c5:
cb:12:80:61:db:7b:2d:ca:75:2a:f1:be:3c:d2:cc:9a:c2:1e:
24:8b:b8:80:2d:8d:40:17:ad:b8:20:5a:7f:c8:96:a3:ba:6b:
8b:3e:9d:be:08:03:f0:59:bc:4f:fe:bf:fd:45:12:c5:f8:a2:
42:3d:60:57:c8:f3:45:6d:d6:20:f0:cf:75:ce:8d:ef:b2:dc:
5f:35:fa:13:d9:66:be:8f:c2:e1:db:8e:d6:e2:0c:9a:38:1a:
96:65:78:f9:68:cc:0e:f8:11:23:3a:45:73:b2:4f:84:ef:9b:
7a:67:e5:0f:76:d4:62:ff:5b:6d:0b:34:ee:76:70:4f:37:39:
2d:f8:7a:17:9b:6a:6e:b3:db:da:fb:a0:f7:39:4d:f3:e0:1d:
fd:79:a5:4a:df:a2:cb:68:a8:93:44:98:82:bd:22:f4:22:aa:
74:35:a8:3a:60:e5:d5:31:07:44:c2:96:e3:86:d7:fd:8b:37:
95:9e:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:16:10 2025 by rpki-client