Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: /maIW8dRthnpMX99WLgKAo759sSEfLzUTIu1fodn+xo=
Subject key identifier: 15:5B:9A:13:46:5B:84:ED:D2:69:F7:9A:AB:37:43:23:1A:35:6D:FE
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 0199331401E6E408581E1CACEA18E4009221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 10:02:53 +0000
Manifest this update: Wed 10 Sep 2025 10:02:53 +0000
Manifest next update: Thu 11 Sep 2025 10:02:53 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: 8Cfw8QcZQ1OopsfPVrdahFgcC0n3nxj/+S8c87VoR0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:01:e6:e4:08:58:1e:1c:ac:ea:18:e4:00:92:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Sep 10 10:02:53 2025 GMT
Not After : Sep 11 10:02:53 2025 GMT
Subject: CN=155b9a13465b84edd269f79aab3743231a356dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:9a:f8:3f:cc:5d:29:73:a8:0a:19:54:8f:
64:43:57:d3:85:e2:ae:b0:68:82:2d:7c:6f:14:f6:
27:f2:7a:19:0f:85:cd:6b:f8:5a:09:8e:94:50:5f:
d7:1a:7e:ba:3c:98:4e:69:f6:dc:68:1b:41:c9:31:
9b:28:47:6b:23:ae:ff:05:ba:38:54:57:45:9d:91:
ab:96:97:05:43:30:c1:72:4c:d4:cf:32:1d:a7:ee:
b8:10:8a:f5:2c:17:ef:12:e5:7a:c8:50:b9:ea:eb:
1c:08:02:47:7f:92:24:c8:f4:f3:fd:f9:30:96:67:
06:76:18:46:a2:0d:4c:0e:dc:01:fd:b0:c9:83:2e:
cb:3f:78:15:48:c4:b2:f3:b4:0a:d2:ac:5d:71:78:
db:0e:38:ee:5e:98:45:06:b3:0a:98:66:05:df:88:
11:36:dc:49:ef:50:76:90:5d:59:07:bb:d7:e4:91:
57:6c:93:9b:12:b7:e3:89:2f:42:fc:1b:7f:01:ce:
85:70:9c:ff:3b:38:bc:34:12:cd:ee:90:4b:48:ea:
1e:51:55:a3:b7:79:a5:e0:27:bf:62:1f:b1:9c:26:
27:4d:37:e5:e0:7c:33:3c:f0:66:01:b6:5f:5a:a9:
0f:4b:03:67:3c:97:94:11:51:14:e2:0e:37:2f:36:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:9A:13:46:5B:84:ED:D2:69:F7:9A:AB:37:43:23:1A:35:6D:FE
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:fb:b1:99:3e:de:e6:a6:e5:87:ad:5a:60:fd:00:4f:7d:
65:9e:81:2d:de:c5:70:51:f6:8b:0d:b3:29:1b:a7:8e:3a:f6:
4e:de:ff:32:7d:0c:ea:cf:e0:41:37:dd:47:10:49:e1:62:23:
7f:7e:33:72:f2:ce:fe:4d:7b:3b:be:b7:af:80:83:9a:3b:4e:
58:77:b8:3a:54:67:7a:c0:66:20:7d:17:8d:ff:fc:40:08:cb:
45:b4:05:9c:c2:62:e5:50:6b:6c:f3:7d:3d:51:22:f7:2e:7b:
4d:0f:b5:af:eb:ec:e7:4a:d0:0c:f3:9d:00:a5:10:0a:05:7c:
a5:de:d1:fb:dc:55:10:00:f3:c8:79:ba:67:e9:38:3d:00:f1:
f5:30:e1:e8:89:eb:01:51:4e:95:74:78:f2:72:ae:f6:a4:d3:
ab:70:44:ab:b6:b1:67:44:f5:45:81:79:6e:e3:cc:63:2c:c6:
80:59:d5:65:99:03:c9:58:63:c1:3e:93:ad:46:7f:4b:bd:d5:
30:ec:fa:9b:85:df:3a:14:4b:3f:3f:c4:ba:20:28:3d:e0:5a:
6a:e7:b5:88:fc:01:26:11:8f:0a:46:96:3e:14:7c:8d:11:20:
76:9c:99:58:8e:22:c4:f2:32:98:35:88:1e:3d:75:a8:2c:c4:
a4:17:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:27:54 2025 by rpki-client