Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: QiAPVyxQqju5hxdTvil050UVhVMJt+IF8IC4YZlults=
Subject key identifier: FE:98:63:C9:32:E5:C6:ED:B0:E3:48:A1:9C:8A:1A:1C:EA:EC:BF:DC
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 0199240D8D56773134F1F75E78688AE4B658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 12:01:31 +0000
Manifest this update: Sun 07 Sep 2025 12:01:31 +0000
Manifest next update: Mon 08 Sep 2025 12:01:31 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: ZWAqqksZPC7vEPLboaoSjLAsxriqRVOWfZUBjnDJG2U=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:8d:56:77:31:34:f1:f7:5e:78:68:8a:e4:b6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Sep 7 12:01:31 2025 GMT
Not After : Sep 8 12:01:31 2025 GMT
Subject: CN=fe9863c932e5c6edb0e348a19c8a1a1ceaecbfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:0b:3c:c3:c3:c3:fa:ba:b0:2b:e6:a7:bb:
a4:13:e9:56:ec:b4:0a:cf:5c:2d:32:2d:0c:7b:4c:
ee:5c:d2:dd:d9:e8:56:94:d5:81:cc:0c:f8:bc:0c:
ee:e3:35:60:8f:10:c4:79:c7:ec:86:3f:0c:b7:17:
51:92:21:dd:48:e0:22:20:25:df:88:f4:86:45:03:
e7:2d:26:9c:04:6d:25:56:ca:22:91:ae:9a:bf:2e:
7e:9a:2c:a9:55:c4:14:d4:e1:9b:c1:0e:f0:45:7e:
ff:1f:8a:15:82:bc:b7:3e:10:d0:23:9f:60:fa:cc:
f7:0c:4b:57:c2:4a:cd:f4:3e:95:d8:f6:9e:b7:54:
c0:fa:76:fd:97:e5:fe:1c:6b:3d:c3:1e:c0:5c:b1:
32:1a:28:eb:b9:31:30:d7:c6:5d:60:4b:b8:eb:c4:
d8:d2:d8:bb:bc:14:fb:9f:26:46:94:b0:9d:13:a4:
b4:c3:f8:0a:b2:92:9b:52:d5:6d:c4:af:52:89:33:
fb:e6:0d:82:3a:30:9a:e9:34:ce:90:1a:93:b4:d3:
78:7b:17:8a:cd:59:44:15:ee:44:1d:90:a5:b0:65:
90:de:00:f5:36:32:44:b2:2f:b4:ef:a4:ec:72:d5:
5b:8d:88:74:c5:3e:1d:8b:10:c5:a6:ee:4b:23:99:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:63:C9:32:E5:C6:ED:B0:E3:48:A1:9C:8A:1A:1C:EA:EC:BF:DC
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:4d:3c:56:74:5a:fc:cc:ba:ed:4b:e1:01:12:0e:f9:24:2b:
35:0e:dc:6a:b5:96:c0:f7:ca:86:99:ae:88:b8:32:ab:30:3d:
9c:47:ca:c7:f0:72:f3:9a:39:c9:91:3c:50:3e:4c:cf:a9:a8:
f2:a2:2f:35:97:9a:0b:1e:22:71:10:59:b5:ed:50:ff:53:a7:
f1:9d:ed:75:b3:a8:d2:07:75:40:cb:c3:f1:4b:37:1f:89:24:
01:b5:1b:d3:3b:b2:7a:3b:ae:cf:62:d6:24:d3:6a:c9:8c:4d:
07:2a:83:28:b5:b3:ba:92:77:01:22:3e:c8:83:34:a6:a7:e8:
1c:67:a0:cb:4c:0a:59:48:8f:91:e2:ea:55:f2:fc:a5:ef:d0:
2b:a3:8b:80:9d:c9:5a:27:d4:56:0e:c8:66:73:3a:11:ca:5e:
ce:6e:54:b8:7b:15:29:06:7e:cc:c6:a4:ae:10:e2:c3:dc:1a:
69:e9:c0:f7:14:8d:d0:64:c2:f0:f8:61:40:dd:66:6d:eb:3f:
7b:1b:87:8d:31:bd:9a:11:7c:00:f8:54:95:2b:5e:96:ff:47:
ba:18:be:75:d9:8c:f2:3e:21:be:8d:0c:b6:90:76:d7:18:a4:
79:0a:39:75:66:49:33:4e:c3:4e:ac:f5:2f:b9:5e:27:67:88:
b4:1d:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:38 2025 by rpki-client