Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: voTK4PUWchDh954sG6qyKSFqCSNber6N51AZboaU66o=
Subject key identifier: 32:E0:AF:B4:D4:C5:D0:DD:49:BB:23:64:2B:59:2F:DD:91:1E:09:7A
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019929A147B30CA183C55CEB5154FBE00E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1609
Signing time: Mon 08 Sep 2025 14:00:59 +0000
Manifest this update: Mon 08 Sep 2025 14:00:59 +0000
Manifest next update: Tue 09 Sep 2025 14:00:59 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: mQLWkeNLZ35vaZZCQJn3mDVhdguJdM37aWoYTyswTQo=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:a1:47:b3:0c:a1:83:c5:5c:eb:51:54:fb:e0:0e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Sep 8 14:00:59 2025 GMT
Not After : Sep 9 14:00:59 2025 GMT
Subject: CN=32e0afb4d4c5d0dd49bb23642b592fdd911e097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:e5:4f:51:82:90:a9:b4:20:ec:96:dc:20:
e1:7b:a1:e0:12:3c:e9:c9:5b:2f:5f:81:ae:7d:fc:
f6:e7:2a:83:fb:24:9a:c6:42:f6:99:1f:af:1d:58:
f2:59:86:56:6a:8a:77:f2:9c:c0:7f:46:92:02:15:
1e:1e:c7:51:b0:64:6a:40:22:7e:d8:ef:0c:97:46:
e5:d7:58:04:98:98:11:7b:72:44:92:a3:70:2a:10:
e8:d4:e3:20:83:7e:a5:d6:be:97:08:20:6e:72:c7:
7d:86:4e:6d:23:bb:0e:ce:7f:d6:9b:97:e3:6c:49:
c6:17:8d:b8:ee:06:c0:f2:7f:65:23:e1:f3:db:58:
28:53:fa:1e:b3:15:46:1c:60:0b:b4:6a:48:05:70:
57:15:41:8c:a3:db:22:7b:1d:97:25:00:b3:88:a4:
b4:28:fb:20:3f:b7:4b:e3:6d:36:44:b0:06:db:49:
0e:99:ee:71:38:14:bb:41:61:f9:f5:20:92:96:db:
97:e8:56:8c:0d:e1:3f:4d:5f:5f:55:a9:9c:a4:50:
5f:46:8a:93:a8:20:d8:1d:01:6d:31:51:dc:9c:e8:
84:10:ed:22:b0:7f:5a:08:50:92:38:98:61:f8:ad:
35:f9:c0:74:cb:5b:01:0a:31:1d:6a:ac:e8:de:c0:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:AF:B4:D4:C5:D0:DD:49:BB:23:64:2B:59:2F:DD:91:1E:09:7A
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:78:fe:8e:4b:68:7e:77:08:6c:98:a8:97:cc:99:9e:9d:d3:
2d:ff:e7:3b:d2:3a:65:f9:15:f6:5f:93:6b:c3:4e:a1:31:65:
67:23:d7:35:b8:ee:4f:79:95:3d:b7:c9:a7:58:ac:e9:0e:38:
61:be:6d:03:0f:b5:75:14:8c:17:d5:5c:b6:16:39:a5:35:e8:
2e:d9:db:07:f7:f6:1d:e3:df:94:c5:e0:7c:72:c1:01:7c:48:
6b:76:15:b9:33:83:3f:8b:4f:d4:99:fe:a8:24:67:e7:e4:db:
ed:ac:76:1e:57:b0:fc:76:03:ec:fc:07:ca:8b:c0:c0:bc:57:
46:4a:3a:87:c5:99:3d:c6:d7:f5:71:51:3e:0a:7b:e3:80:d6:
d7:e7:b5:90:81:a0:2b:73:91:fb:3c:ee:54:63:6a:6c:78:3c:
9d:c2:10:a0:50:5c:9e:38:cd:4a:45:82:ff:4a:b5:4e:a2:39:
58:af:43:5f:14:5f:a2:99:b3:19:e7:78:d4:0d:be:e2:6a:11:
73:57:33:fb:5c:4e:76:bb:eb:2b:36:60:51:ed:43:99:53:90:
3c:5a:0d:c3:37:30:79:fb:2f:c4:6e:7d:4b:10:56:84:f0:70:
4c:05:4b:0c:bc:fe:4f:ad:6a:8f:b2:82:74:1b:28:cc:e5:2c:
b8:cb:1b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkpoUezDKGDxVzrUVT74A5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjUwOTA4MTQwMDU5WhcNMjUwOTA5MTQwMDU5WjAzMTEwLwYDVQQD
EygzMmUwYWZiNGQ0YzVkMGRkNDliYjIzNjQyYjU5MmZkZDkxMWUwOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM/lT1GCkKm0IOyW3CDhe6HgEjzp
yVsvX4Guffz25yqD+ySaxkL2mR+vHVjyWYZWaop38pzAf0aSAhUeHsdRsGRqQCJ+
2O8Ml0bl11gEmJgRe3JEkqNwKhDo1OMgg36l1r6XCCBucsd9hk5tI7sOzn/Wm5fj
bEnGF4247gbA8n9lI+Hz21goU/oesxVGHGALtGpIBXBXFUGMo9siex2XJQCziKS0
KPsgP7dL4202RLAG20kOme5xOBS7QWH59SCSltuX6FaMDeE/TV9fVamcpFBfRoqT
qCDYHQFtMVHcnOiEEO0isH9aCFCSOJhh+K01+cB0y1sBCjEdaqzo3sAGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLgr7TUxdDdSbsjZCtZL92RHgl6MB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3j+jkto
fncIbJiol8yZnp3TLf/nO9I6ZfkV9l+Ta8NOoTFlZyPXNbjuT3mVPbfJp1is6Q44
Yb5tAw+1dRSMF9VcthY5pTXoLtnbB/f2HePflMXgfHLBAXxIa3YVuTODP4tP1Jn+
qCRn5+Tb7ax2Hlew/HYD7PwHyovAwLxXRko6h8WZPcbX9XFRPgp744DW1+e1kIGg
K3OR+zzuVGNqbHg8ncIQoFBcnjjNSkWC/0q1TqI5WK9DXxRfopmzGed41A2+4moR
c1cz+1xOdrvrKzZgUe1DmVOQPFoNwzcwefsvxG59SxBWhPBwTAVLDLz+T61qj7KC
dBsozOUsuMsb1g==
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:18:23 2025 by rpki-client