Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: 3ce7Nv7VwtGJmN1KepkcsV1QWMHY7akN3r4hW0K4b/M=
Subject key identifier: A3:73:AB:26:91:E1:11:FA:AC:61:9A:B4:F6:7C:34:93:A2:25:02:E7
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 0199239FFC46E1F6262BC5CD6FEFA4CB666B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 13B3
Signing time: Sun 07 Sep 2025 10:01:51 +0000
Manifest this update: Sun 07 Sep 2025 10:01:51 +0000
Manifest next update: Mon 08 Sep 2025 10:01:51 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: B7bu5nWLZwM+6825r5I1j3/VqjrpRbkTgaJvcEpbu8k=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:fc:46:e1:f6:26:2b:c5:cd:6f:ef:a4:cb:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Sep 7 10:01:51 2025 GMT
Not After : Sep 8 10:01:51 2025 GMT
Subject: CN=a373ab2691e111faac619ab4f67c3493a22502e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:5f:9a:ba:02:17:3b:17:f2:06:4f:95:90:
fc:20:db:fc:07:18:6c:93:a5:51:6c:ee:99:48:f6:
35:db:8e:95:69:f4:6e:bc:9f:84:09:c8:09:01:cd:
10:65:c2:0b:f6:2c:54:35:f5:55:27:35:34:64:6f:
63:2f:37:26:3a:cb:5e:1f:56:ae:ae:84:b1:28:dc:
8f:b0:c9:38:a5:6b:62:f4:f0:c2:84:18:91:be:b7:
ed:c2:00:7d:7c:17:22:5f:1f:62:a2:7d:3d:fa:c5:
6a:f0:fa:85:96:ff:fd:85:a6:eb:70:a6:00:87:a8:
0b:43:29:74:d1:e7:ba:0e:9d:4f:6a:ee:09:d3:9f:
19:96:db:48:ab:a5:3b:4a:e5:6c:e3:a4:d5:9d:ec:
56:60:bc:a3:aa:e5:85:80:ff:a2:f5:8f:0b:01:90:
48:60:d9:2b:20:ce:20:d1:aa:a7:6a:af:9b:c5:4f:
65:4e:f9:c0:61:fd:a9:61:66:58:f3:f3:91:73:46:
fe:37:d7:6f:e8:09:0d:92:71:c5:08:0e:2e:f6:5b:
4b:63:a7:c0:01:d2:96:30:9d:cf:6d:e8:04:25:75:
02:2e:e3:a4:82:bf:e3:76:71:56:e9:34:5a:72:52:
f8:b7:5f:82:e1:4c:cb:78:bf:df:77:df:dc:cd:b8:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:AB:26:91:E1:11:FA:AC:61:9A:B4:F6:7C:34:93:A2:25:02:E7
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:43:c2:87:0d:a4:67:ad:26:ff:36:70:2a:3c:23:5a:b2:25:
15:42:4e:c0:c4:0d:d8:51:de:2d:58:0d:a6:ca:3d:e7:b0:29:
8b:73:38:d1:35:cb:61:5b:5b:cd:05:0c:b1:3d:ca:dc:49:08:
06:c1:7e:87:9d:10:4b:9f:40:96:75:a5:43:17:41:4a:72:6c:
db:7e:d0:86:b1:cc:8e:9d:0e:4f:61:06:2d:80:97:5b:10:70:
74:2d:90:73:11:fb:71:89:7a:67:8c:30:58:50:42:af:6b:34:
1e:2a:e8:a4:bb:b9:8d:28:3f:e5:b9:bc:22:0c:ef:c3:a8:d1:
69:61:c2:10:e2:b0:42:c1:5d:72:dd:80:3b:0c:16:31:73:9f:
38:a9:c3:fc:f9:44:e5:de:85:e6:c0:f0:9e:f1:fc:a2:7b:5a:
24:50:0e:ed:b9:c8:f9:5f:9f:52:bf:37:41:5b:6f:a5:e4:b6:
b2:f8:e0:77:74:e6:14:30:92:1b:1e:ab:20:ae:e7:b5:88:23:
ba:f1:a8:bd:dc:01:8a:9f:3f:b0:77:4f:07:47:c8:11:3b:c6:
a2:01:b3:23:9b:f9:95:ed:a4:4b:11:fa:38:d0:22:fd:4b:c1:
5b:bd:2f:8d:c9:22:1b:80:34:38:76:67:0b:c1:a2:8e:d1:cc:
6b:a2:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:43 2025 by rpki-client