Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: gQkICtk0zerL/93igQmJDoHQ6QG5NWghIC2QGHVyJTk=
Subject key identifier: 56:9E:4E:DC:EC:0F:C8:FC:6E:CB:ED:4C:39:5C:23:F5:85:F0:6E:3B
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 0198545700AAC3C8CE2FAB14579025F3CE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 04:00:44 +0000
Manifest this update: Tue 29 Jul 2025 04:00:44 +0000
Manifest next update: Wed 30 Jul 2025 04:00:44 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: 5hPGO/msIMwp8Yhf/Ets8FVzJiPrLsJCGjHmyZKeWVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:00:aa:c3:c8:ce:2f:ab:14:57:90:25:f3:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Jul 29 04:00:44 2025 GMT
Not After : Jul 30 04:00:44 2025 GMT
Subject: CN=569e4edcec0fc8fc6ecbed4c395c23f585f06e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:be:79:8f:91:80:0f:49:2a:0a:ae:b8:96:
5e:3a:d1:5c:7f:0d:c5:33:b1:1f:31:e3:6e:f3:87:
82:f2:00:ac:22:b1:3c:9b:05:3e:60:bf:4b:2a:87:
5b:50:87:46:8b:d4:35:d0:14:8a:4a:a6:16:bc:c2:
16:64:1f:40:28:d2:d7:5f:3e:6a:a2:eb:ea:5d:24:
97:8b:6f:f2:7e:b4:a6:d0:c1:3b:46:4c:85:e6:06:
9c:c7:cc:d1:55:16:e9:19:ff:73:b1:64:55:84:8a:
4d:fd:7d:97:07:07:c6:4a:aa:78:70:d9:3e:60:60:
08:73:c4:6c:f5:2a:e3:31:65:35:97:d1:b4:5f:15:
e2:ab:15:be:8f:a5:7f:bf:18:d0:5d:e6:c4:ac:57:
e4:25:11:2d:94:3c:b6:17:49:b5:3c:16:14:0b:19:
34:9c:75:13:f5:8b:dc:68:46:19:ed:ae:a2:c5:36:
6b:f4:ae:e6:44:7f:90:4c:99:cb:9f:7d:b7:52:4a:
6d:b2:f4:fc:74:e9:68:77:df:b1:19:7b:fb:31:59:
cc:b3:31:82:26:02:30:26:6c:c2:3f:db:41:01:41:
f3:87:72:18:2c:6b:ab:d6:62:d2:29:52:08:01:4d:
6d:e7:0f:17:30:8d:67:0b:ec:58:fb:e3:90:24:4d:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:4E:DC:EC:0F:C8:FC:6E:CB:ED:4C:39:5C:23:F5:85:F0:6E:3B
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5e:3e:20:bf:37:ca:8d:6a:32:5e:37:10:4d:1c:89:53:1d:
b5:a6:cb:38:55:87:05:a5:d6:be:a7:fd:89:fd:fc:77:cf:6e:
e3:79:f8:e2:09:69:c9:7d:5e:75:44:a1:f4:7e:a4:ac:87:90:
66:47:04:4c:27:a4:8f:8c:fb:32:45:f3:cc:b4:3e:3f:c2:97:
d7:6b:e7:81:f6:cc:af:c3:b7:f5:ec:bf:55:b9:20:06:38:0a:
a7:e6:09:09:f7:e4:c1:ba:67:78:c6:ff:97:99:a7:06:c1:fe:
3d:9a:c4:ab:2f:f2:46:16:32:ea:f0:75:ed:51:78:00:99:b4:
6f:57:e3:0d:82:3a:c2:59:e9:df:e8:63:df:66:c9:30:0d:01:
7e:3d:8e:ec:f6:48:ff:de:f9:b2:e0:1c:aa:1e:7e:90:33:db:
4b:8e:cd:ac:24:89:ce:56:5b:c8:2f:18:99:de:d5:a3:9e:42:
39:1d:64:b4:0a:1b:83:d9:96:a1:39:f7:5d:76:6f:3a:27:75:
9b:6c:30:89:ca:7b:31:04:25:2c:71:c1:51:44:91:7c:e7:87:
85:a2:89:03:d2:ee:03:fd:b1:b2:f9:ef:5b:c3:c9:d1:44:93:
95:5c:b6:c7:2c:19:75:e4:2e:f6:30:44:0f:67:b2:6d:94:fe:
f2:66:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:38:44 2025 by rpki-client