Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: Zcm2fkJD4Iu00tcNr+deEEqWiKzx7fXi7Pa9kDpoTJY=
Subject key identifier: E2:6C:05:2B:40:7C:E3:00:13:42:A1:60:A1:0A:CD:19:75:22:E9:E8
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 01992330FF2B73397AE87D84FE3ED5C60377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0560
Signing time: Sun 07 Sep 2025 08:00:37 +0000
Manifest this update: Sun 07 Sep 2025 08:00:37 +0000
Manifest next update: Mon 08 Sep 2025 08:00:37 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: bdzq2bWAXvgpIRrTecMTWhyh0VR2n8meBUYuGFIcTLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ff:2b:73:39:7a:e8:7d:84:fe:3e:d5:c6:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Sep 7 08:00:37 2025 GMT
Not After : Sep 8 08:00:37 2025 GMT
Subject: CN=e26c052b407ce3001342a160a10acd197522e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:21:ba:23:01:0e:3a:ee:6f:92:ec:92:c3:
c7:75:32:7f:65:28:f3:e6:05:67:fd:de:26:f7:58:
fb:af:17:62:f5:d1:93:39:dc:9d:6a:6a:ff:7a:7f:
63:25:3c:90:8b:18:1d:c8:f5:99:38:80:5c:02:0a:
ea:c3:ee:1f:2f:de:0f:6c:fd:79:4f:5b:e5:2d:68:
b9:29:a0:0e:bf:b0:fa:d1:bd:a5:eb:26:2f:c7:71:
e2:9d:5e:a2:fc:1d:cd:74:31:c6:3a:e0:3e:2d:da:
dd:81:5d:28:d1:fb:17:77:a8:90:e4:66:23:76:e0:
4b:06:31:e0:68:80:1e:63:cb:d5:d7:b7:04:c1:54:
34:03:82:f7:1e:9b:e9:12:93:27:9c:4f:83:11:50:
23:e2:b2:83:cf:78:c4:e9:95:bc:b7:4b:d9:8b:0e:
b9:33:f1:65:29:01:b0:4b:27:a7:86:ff:58:bb:aa:
42:9f:0d:25:f8:c8:1f:a3:43:56:08:5b:9c:4a:a7:
11:26:35:c9:4e:32:e7:44:3f:e5:f3:ed:83:8b:52:
cf:e1:90:35:22:af:f9:53:d9:83:4e:8c:e8:9e:c8:
48:5e:c0:92:d9:bf:96:05:27:0a:d7:69:b6:17:85:
ac:57:9f:18:45:c4:7f:20:44:cc:f6:f7:35:9e:ff:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:05:2B:40:7C:E3:00:13:42:A1:60:A1:0A:CD:19:75:22:E9:E8
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:85:55:ea:e6:3f:26:73:9f:33:dc:80:12:a5:19:eb:29:
50:a2:96:ed:f3:4b:91:16:fa:86:32:b5:a8:95:e2:38:a4:46:
75:ce:4f:7d:d7:1c:5e:44:61:62:bc:09:42:3c:ef:2d:9b:89:
07:ad:f3:27:62:65:cb:c2:b5:d3:8f:ad:e7:17:66:72:8b:cd:
bb:04:c1:0a:c7:56:c4:2b:48:27:fc:f2:ca:31:50:1a:68:c2:
55:02:4f:ef:45:92:bb:a3:d1:d0:4a:25:e1:52:67:41:a7:b5:
14:a0:ce:73:2f:cc:16:17:cc:23:60:ce:f4:6b:92:12:ad:01:
0a:f6:1b:49:cf:19:ec:4b:7b:ef:35:00:3b:38:08:75:ac:45:
c2:e6:f9:5c:77:62:df:8e:33:aa:ab:38:a2:96:44:b5:4b:85:
c1:dc:39:23:52:ee:c8:5e:b9:c2:d5:92:f7:ab:02:93:23:34:
0d:45:bd:e8:47:d7:d4:97:a3:39:09:d2:ac:1a:97:bf:5b:d6:
d0:bf:0c:9a:60:ce:f2:0b:ee:cb:2c:45:75:68:4e:6d:0f:51:
63:f4:62:58:b4:3b:75:d3:93:8e:fa:1b:b8:b7:25:4d:ab:69:
28:e5:9b:7b:c1:8c:92:59:82:3e:a3:c7:76:c0:af:f9:02:8a:
89:eb:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:12 2025 by rpki-client