Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: 0LKCZapa/M/wgj8V576bDDVw9Y7u3k/HNq4xget/BZo=
Subject key identifier: D1:B0:59:27:AD:88:CB:6F:8E:EE:D7:35:2F:05:5D:64:6A:21:8C:76
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019849661008F2AA2588F4F966FA308C4852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: 3RHdfMj6u6hlyMiL4aIwYX4a5hbasxnH5ANSLRdV02c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:10:08:f2:aa:25:88:f4:f9:66:fa:30:8c:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=d1b05927ad88cb6f8eeed7352f055d646a218c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:67:3a:03:23:b1:df:99:af:ea:83:fe:cd:
2d:d1:c8:df:38:0f:f0:4e:99:b2:f9:1f:2e:ef:3b:
ee:c6:08:60:4b:4e:52:0b:20:90:91:8f:2e:54:7e:
33:32:bf:cf:09:e1:0c:cf:91:49:4b:25:be:a8:36:
47:a1:ba:68:3e:05:e7:06:f0:87:cc:f9:26:8f:82:
71:ac:94:d7:98:0f:75:1f:8d:38:6d:40:64:16:d0:
1b:26:d9:d1:aa:6e:41:aa:37:a0:f4:03:90:5c:ad:
38:ca:8b:9b:7d:7b:53:40:0a:42:be:bd:a4:40:20:
49:67:f9:a0:e1:a6:cc:c7:21:0f:96:7c:8e:79:df:
14:a9:f5:9e:b7:44:05:79:84:78:35:eb:8d:a4:23:
cb:c3:2c:dd:1b:fc:ca:68:8d:78:5d:b0:e5:33:e1:
49:9c:7d:01:0c:87:5c:81:36:a0:55:44:24:d2:b6:
70:13:71:80:7f:e6:78:9a:f3:47:ec:82:10:4e:f3:
df:6f:9a:77:a6:36:f5:d2:76:cc:73:5e:fb:16:a5:
cd:57:d9:e9:6b:ea:25:70:08:c3:ac:ea:a5:83:f5:
07:5b:86:39:5d:d1:d6:73:8a:4c:ff:89:ec:48:7f:
6a:29:d0:ed:e3:fd:3d:29:f4:63:d6:6b:5d:79:e2:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:59:27:AD:88:CB:6F:8E:EE:D7:35:2F:05:5D:64:6A:21:8C:76
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:15:34:ad:e6:26:2d:c1:54:cb:7c:80:83:11:90:cc:fe:
b9:80:3a:03:74:36:44:42:dc:cf:0b:be:4d:e3:31:33:eb:60:
51:ce:95:12:0e:66:be:6f:6b:0c:70:99:7a:fb:e4:81:3f:4c:
4f:48:2c:bc:75:72:35:74:37:46:9a:5d:0a:1e:76:a3:8e:a3:
ed:0d:f0:f5:87:b6:3a:02:42:1a:3a:f1:e4:ac:93:be:22:c2:
98:40:f3:7b:ab:26:0d:07:d6:b6:63:6d:e8:78:4d:31:a1:91:
e4:39:53:95:cd:39:38:31:3c:58:bf:c9:b5:44:4e:04:ae:7e:
cf:71:ef:9d:97:b1:66:cd:9b:a5:0a:e8:ac:59:6d:ea:35:9a:
4e:89:49:cb:68:2f:22:92:0f:39:86:c8:74:66:15:4b:6b:44:
02:f2:e4:34:3b:55:40:3c:89:46:49:39:82:48:1e:97:be:88:
4d:9c:e5:6b:3e:58:75:48:b1:47:23:ba:e5:66:52:7d:f6:7f:
76:69:48:74:5a:6d:26:e6:6f:8a:b0:c4:fc:f5:87:c8:dc:bf:
a3:f8:83:93:17:ce:02:2c:64:4a:68:5b:6e:74:24:54:b0:ce:
d8:e5:de:3f:7d:8b:65:17:db:90:74:b5:82:a0:03:2c:11:f2:
df:35:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:26 2025 by rpki-client