Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: IgXtO+Of6D5GCzissBv9QX9nXHM/6PUjYpn+4JVsrzQ=
Subject key identifier: 17:A3:DA:DA:83:66:06:F7:7F:23:8C:12:91:CF:CE:BC:3C:7B:11:33
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 019A209C269EB85AEABA7A068F10471959AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 13:01:35 +0000
Manifest this update: Sun 26 Oct 2025 13:01:35 +0000
Manifest next update: Mon 27 Oct 2025 13:01:35 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: hQamyYL3CNq0q7ag/gMvdVuxXXU0auunQ0mbegflLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:26:9e:b8:5a:ea:ba:7a:06:8f:10:47:19:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Oct 26 13:01:35 2025 GMT
Not After : Oct 27 13:01:35 2025 GMT
Subject: CN=17a3dada836606f77f238c1291cfcebc3c7b1133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:7f:e3:2e:d9:5d:d4:ca:78:31:47:b8:6b:
09:58:82:38:fe:43:8d:4b:4a:95:0a:32:42:34:3a:
c8:d9:d3:aa:ba:3f:00:26:77:b4:c3:6d:04:04:97:
be:0a:d9:ef:d7:ab:93:77:82:4f:46:fb:c4:23:1e:
af:46:86:47:d4:ac:35:7c:e2:02:18:d8:9a:89:70:
1e:ef:1b:76:93:6c:93:21:9b:e4:2e:1d:c1:c6:67:
27:81:8b:65:92:6f:08:a0:ac:09:07:2e:02:0d:0c:
41:2f:15:0a:62:73:cc:9e:b1:1c:45:94:86:56:02:
cf:d4:ac:bc:e4:a7:91:ed:01:e4:38:38:1b:1c:1d:
a1:2a:1c:ca:70:cd:e4:a7:43:f0:b9:ec:cd:2f:8c:
f0:b6:fd:fd:61:aa:d4:20:11:09:b9:21:a1:e8:e3:
85:e2:23:cc:0c:8c:3e:0d:6a:71:c5:03:cc:91:ae:
09:fc:37:4d:2a:aa:59:5d:1d:e3:de:9c:80:43:ff:
0f:98:ac:52:44:3e:ff:1b:22:12:9a:82:44:b7:3b:
4d:86:7e:b6:78:d7:5c:a2:75:e0:33:4c:65:c0:9d:
00:92:22:63:30:53:ba:d8:1f:2e:c2:26:2a:2a:e4:
14:26:f8:cc:47:6f:a0:61:b1:39:a0:62:ee:b1:63:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:DA:DA:83:66:06:F7:7F:23:8C:12:91:CF:CE:BC:3C:7B:11:33
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d8:15:77:9b:1b:16:58:c9:59:0a:59:21:6e:37:64:96:b9:
d9:d8:c6:bf:ff:f9:42:21:8f:a5:42:cc:67:26:c9:75:78:4a:
6d:13:79:f7:ad:b8:f8:c9:76:9a:ab:36:69:37:85:f3:57:28:
6d:9a:48:da:9a:d6:53:01:df:84:8e:64:98:56:04:7b:66:a1:
88:95:32:99:84:fb:01:7e:d0:ad:4f:93:88:4e:26:50:50:98:
d9:b9:15:94:ba:84:6f:4e:05:74:d0:07:28:00:f3:a4:b1:48:
0b:61:a1:a4:e8:0a:fa:5f:81:c5:cb:92:7b:67:36:6d:eb:a5:
72:df:7f:40:a1:39:da:ab:9a:55:f4:40:1f:55:4b:1e:2f:ce:
53:a5:6e:a7:5a:d5:72:1b:23:c1:a7:13:ad:e8:67:92:a1:ca:
f8:5e:d5:95:ee:bf:e7:45:fa:0a:83:d5:d3:f5:db:66:3c:bc:
47:69:54:8f:3e:e1:cd:f9:a3:76:09:3e:20:22:b3:b8:0d:73:
e9:7d:82:62:73:f3:d8:4b:ae:65:44:f1:fc:dd:85:1e:e9:30:
75:d0:66:b4:44:01:71:a4:30:b6:75:24:75:ad:80:e9:9f:54:
19:58:4c:56:67:45:2d:eb:0d:d7:17:5c:66:c2:9e:38:b2:5e:
60:d7:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:19 2025 by rpki-client