Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: 39sJLyfK1w7fOLVbcSLKWs5tPPgAG2hgeQv6r13MMmY=
Subject key identifier: B8:E9:04:7B:A7:9B:1D:4B:91:FC:92:54:14:F0:E7:3D:EA:F6:40:B3
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0199239EB928EDD865BB9046640C7FBF5F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:00:28 +0000
Manifest this update: Sun 07 Sep 2025 10:00:28 +0000
Manifest next update: Mon 08 Sep 2025 10:00:28 +0000
Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: 5DMJuexS1JDxXYbFlzSLPenDcovMTd1oZDWRNpaoQyk=)
2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b9:28:ed:d8:65:bb:90:46:64:0c:7f:bf:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Sep 7 10:00:28 2025 GMT
Not After : Sep 8 10:00:28 2025 GMT
Subject: CN=b8e9047ba79b1d4b91fc925414f0e73deaf640b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:0e:67:4b:67:d1:23:82:14:e6:50:36:be:
c3:74:91:a7:b8:4f:b1:0e:28:07:43:b4:bc:6d:30:
1a:78:75:a5:11:f8:a7:c0:43:32:d6:5e:ce:6a:2e:
5b:f9:9a:0e:fd:88:81:a7:06:f1:38:20:b5:61:9b:
b2:fa:16:d0:00:a3:99:63:d8:67:d3:78:7e:e9:9c:
3c:a4:3e:53:13:b8:f2:7e:03:da:63:18:af:a2:6a:
75:1e:85:2d:c6:db:2d:cc:6f:90:d6:66:e0:68:94:
5f:cd:b5:4b:04:59:9e:b1:b9:96:fe:4f:f2:92:93:
84:4e:16:c9:d3:29:08:91:cd:8b:38:4c:25:ed:7d:
a6:1f:0c:9e:b3:bc:6b:f9:35:e0:e0:d3:5f:b5:d1:
34:75:49:13:6b:5a:c4:46:b7:24:7f:77:08:d7:06:
fd:c1:22:55:0b:5f:6a:ef:dc:39:59:08:c6:21:e6:
60:8a:4b:79:c1:e8:61:13:e2:19:a3:e7:85:e9:8c:
75:00:cd:62:5a:11:1e:8c:2a:9c:0e:e0:08:2b:a7:
98:ca:f5:94:10:f4:8c:37:16:99:c4:be:06:75:35:
ac:72:23:35:18:39:f5:dd:cf:c6:56:4e:8f:89:4a:
a4:e8:bf:b0:a0:20:58:ea:42:ba:fa:fa:19:97:b5:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:04:7B:A7:9B:1D:4B:91:FC:92:54:14:F0:E7:3D:EA:F6:40:B3
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d2:03:04:17:ab:53:ef:b2:a1:2a:94:09:fa:4a:6a:b0:93:
f7:e6:67:d2:e7:b0:3a:7f:1c:32:ae:f3:7c:bc:ac:ff:29:55:
51:f4:96:4b:80:dc:a0:85:af:77:a9:c5:03:6e:85:48:38:0b:
49:3b:a7:f7:88:54:d2:af:fe:8a:4b:71:19:83:9c:97:7a:4f:
78:4d:af:dd:0b:18:03:92:63:48:1f:0c:72:da:aa:d4:d8:19:
3a:36:c0:3e:af:8d:25:11:41:0d:de:b0:e1:b1:d9:0f:3c:89:
65:b4:e7:86:6a:61:04:de:a2:07:b0:12:b1:8b:e7:ec:82:e9:
cf:2a:cf:95:cf:f1:32:a2:c7:97:61:17:b6:54:66:b0:88:0e:
08:7a:e4:9b:93:48:53:8b:ac:c2:4b:c0:6b:c1:bf:5e:c3:6f:
ba:53:9e:57:b2:c6:7f:b1:f5:5b:73:21:c4:fd:e2:f7:ae:92:
d8:58:64:d5:86:ea:8b:87:f6:b2:26:36:d6:c1:1b:db:2e:d0:
4e:5c:6f:03:71:1f:e8:04:9f:ea:8f:52:a2:fb:a5:b2:f0:4e:
a5:de:83:e0:5e:2c:71:2a:da:0b:dc:02:29:06:3c:5a:a8:5d:
44:07:aa:4e:c5:7f:68:38:e1:f8:6a:7a:09:fb:41:cb:79:f9:
c3:f8:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:17 2025 by rpki-client