Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: t6STRHVUmwGL6se/7rpyIKfxf4bPKV751UDh2i4yy1Y=
Subject key identifier: 04:CC:A7:76:AB:27:2E:A1:0E:B6:E9:45:01:3B:C3:84:1F:A9:4D:68
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019A2B1E647F62163B51E0088694F24ED0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 1012
Signing time: Tue 28 Oct 2025 14:00:03 +0000
Manifest this update: Tue 28 Oct 2025 14:00:03 +0000
Manifest next update: Wed 29 Oct 2025 14:00:03 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: K6oILwiINEdndXKnfHR/XpEXkzzoyjuU9vnokroTgdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:64:7f:62:16:3b:51:e0:08:86:94:f2:4e:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Oct 28 14:00:03 2025 GMT
Not After : Oct 29 14:00:03 2025 GMT
Subject: CN=04cca776ab272ea10eb6e945013bc3841fa94d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:7c:3f:00:5c:e0:83:66:89:54:c6:03:6b:
e9:4a:49:84:51:ce:3a:6b:cb:6c:b9:e3:55:df:98:
32:b5:a4:2d:65:e7:a1:cf:dd:93:24:a4:ec:40:20:
e5:a3:de:99:e9:7e:5a:7a:f2:f2:84:b0:7b:c7:07:
5a:48:ab:0b:2d:6d:b4:30:fd:4a:6b:a9:ee:92:22:
8b:65:d5:dd:0b:3a:ac:da:f8:ff:e7:8b:7d:45:9f:
a4:70:94:23:94:56:b8:11:03:74:61:b9:f9:a9:d4:
ec:e5:72:97:65:a9:e4:3f:ba:84:42:fa:75:f1:78:
f9:5a:03:54:8b:b5:76:0f:1a:b9:5d:96:da:5e:c2:
2d:48:08:b8:51:c9:4a:e6:6d:46:0f:f5:df:f9:d8:
94:82:31:8c:b3:21:4c:02:72:1e:8d:ba:50:b3:a2:
32:3e:57:0d:c3:43:65:c8:d7:3a:11:93:e9:06:91:
85:7e:4a:f2:1b:9a:67:fa:ea:db:e8:a2:ef:ef:ad:
88:56:98:61:77:46:30:7d:a7:20:8d:e3:b4:58:ed:
3c:fc:34:5b:a5:45:d4:c5:d3:dd:bf:cf:07:b6:7a:
2d:c2:e4:00:90:f9:21:4c:24:a9:9d:4d:11:d6:e1:
46:02:c9:be:49:bf:80:b1:5f:ec:3f:41:51:5b:22:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:A7:76:AB:27:2E:A1:0E:B6:E9:45:01:3B:C3:84:1F:A9:4D:68
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:de:20:9e:77:14:2f:6f:73:75:a9:e2:c8:37:6f:31:ca:3f:
0d:2f:ba:04:ec:1b:da:60:a3:c0:60:ca:7d:40:d2:7f:04:ac:
63:dd:a2:74:8f:d3:cd:b9:4e:db:b9:56:1c:a1:98:b4:ce:b7:
e8:3a:bb:52:2d:d4:c0:65:97:c9:cc:34:e6:3f:cb:e4:e3:6f:
42:39:c2:08:55:2e:90:1f:1f:87:40:6b:47:4d:93:2f:e5:1b:
ff:68:5d:0c:5e:f3:ce:55:13:64:fb:c8:50:d1:e6:12:ed:ca:
b6:b9:3f:68:fa:ef:ba:61:57:0b:3b:d4:5a:c4:de:7f:09:01:
9a:8d:8a:b5:73:00:72:93:4b:e9:bb:4c:b2:fa:b8:bc:a1:ba:
2b:32:97:6d:ec:fe:89:9f:b8:20:d6:37:ef:28:d3:77:5b:b4:
d5:1a:8d:3b:d8:06:09:32:e2:e3:b4:e3:84:7b:be:6f:3e:e1:
10:0d:4b:04:d2:63:03:05:b9:50:1b:2e:32:0a:30:52:75:7e:
dc:77:05:1b:14:25:fe:f9:12:b9:d5:a0:84:8f:7b:09:80:44:
a1:b3:c6:cc:b4:70:4f:7a:95:de:77:3a:97:35:44:51:a7:36:
2c:95:52:56:13:0f:e9:71:05:35:e0:f9:31:17:90:8e:5d:cb:
ed:9e:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:19:49 2025 by rpki-client