Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: XB/Hzq+GMKo3MXxR1kZMZcpju0tJ5ibCe32RJpsvPkg=
Subject key identifier: 75:13:CD:25:EB:40:C0:2A:A4:FD:20:B7:F6:59:0D:CE:C7:F9:DD:91
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 01992255709D479C3AD2A28C87A59D068A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0FE6
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: H34moGGatW0Z+UQaBSLgjUkL8eHi3J56sy2NAUt4ze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:70:9d:47:9c:3a:d2:a2:8c:87:a5:9d:06:8a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=7513cd25eb40c02aa4fd20b7f6590dcec7f9dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:15:65:97:f7:d6:9c:dc:a1:8f:d2:fc:48:
ea:4b:da:ad:c3:a8:09:68:11:e6:3b:e2:13:c2:14:
56:3b:ec:4d:07:97:60:43:f7:9b:23:79:8e:e9:a1:
d1:4a:9c:6d:4e:ab:b4:a2:39:46:23:5d:25:d0:93:
83:c7:50:68:13:f2:8d:a7:04:45:57:51:11:ed:ca:
6d:ce:60:d6:e2:48:64:c2:b8:ef:0e:79:d9:13:d7:
1b:d2:55:8b:d1:66:bf:5d:ff:0a:d8:ae:d6:74:c2:
25:e8:bc:ea:1f:d4:02:24:60:d1:64:7a:9a:2a:eb:
17:4b:91:94:27:6b:68:20:2d:54:cc:a5:bc:b0:ff:
fb:0c:46:f2:41:10:97:7b:df:a1:26:1e:f5:71:5c:
bf:25:ac:15:20:b7:1b:fa:a4:6f:ee:10:af:74:5f:
6a:f1:a6:c9:d1:5d:27:e4:be:13:3e:23:1a:a1:95:
0a:ed:84:01:ce:cd:ec:e5:8b:bf:a4:96:ce:87:0f:
32:2b:67:01:36:42:78:b9:e5:9f:dc:1d:1e:b4:7b:
d1:29:18:8d:3f:07:4d:4f:5a:4d:74:48:57:76:08:
12:3b:b4:ec:13:17:76:2e:46:bd:8c:26:6f:59:76:
aa:fb:7a:f2:2a:06:ae:1d:27:4b:a6:e4:ef:80:13:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:CD:25:EB:40:C0:2A:A4:FD:20:B7:F6:59:0D:CE:C7:F9:DD:91
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:09:65:ec:4d:ad:56:84:79:de:fb:90:fb:40:fc:78:a7:
cf:9d:c2:e0:36:d3:da:c2:cd:d1:17:33:13:3b:be:db:56:c2:
ad:a7:d6:4c:44:08:41:a7:d2:dd:78:7d:15:d0:80:60:e9:27:
77:db:87:4c:61:5e:59:2d:73:c4:20:89:6f:d1:27:ea:8c:54:
75:8f:8b:39:78:d8:3a:c5:49:88:88:29:f5:da:8e:38:40:26:
49:dc:19:66:58:af:c4:09:24:01:a4:13:b1:a8:12:cd:90:e7:
e6:1c:81:b8:52:e7:8f:7f:f0:ee:21:9b:f1:ef:2d:71:16:11:
db:6e:79:71:33:15:89:fc:c7:79:ed:57:7a:d0:20:ba:fb:7f:
4d:33:32:ab:c2:8e:92:2c:83:2c:06:fe:04:d8:d8:74:fe:2f:
88:70:e6:87:f5:7a:2b:26:39:24:f0:48:f6:14:a6:3f:70:c6:
15:57:b9:b5:e5:67:46:62:ad:eb:e4:a6:e4:4b:50:d0:69:79:
e4:b1:c8:c8:e0:39:f6:00:d5:7d:97:a8:48:70:10:bf:76:36:
ec:0c:75:47:11:83:ca:96:d4:e5:2c:e9:f2:e2:97:65:24:8b:
88:cd:70:1b:e1:50:0f:f8:93:00:95:46:c3:b6:00:45:77:e7:
b6:70:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:32:59 2025 by rpki-client