Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: rs87RorLC6GFZjJGL/oSW44lArr0kxXJ09UoLumhiGk=
Subject key identifier: 08:A2:61:B3:D9:D6:38:16:0E:D0:65:B4:51:C5:1C:98:8B:DD:87:3F
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019A0D4B928094710D4FE7030246B560F9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 130A
Signing time: Wed 22 Oct 2025 19:00:47 +0000
Manifest this update: Wed 22 Oct 2025 19:00:47 +0000
Manifest next update: Thu 23 Oct 2025 19:00:47 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: IcIVXLvJhW3gjF+yoDbM80fZG35KjgvPk0m3630FZsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:92:80:94:71:0d:4f:e7:03:02:46:b5:60:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Oct 22 19:00:47 2025 GMT
Not After : Oct 23 19:00:47 2025 GMT
Subject: CN=08a261b3d9d638160ed065b451c51c988bdd873f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:34:c5:b1:83:d9:7c:f8:b4:ec:eb:ff:03:
18:4e:0d:d4:ce:84:cd:29:03:f0:9a:82:b1:df:1b:
21:64:fb:88:c8:d1:7a:b7:1b:40:37:91:8c:e8:98:
a3:79:c0:92:b7:93:ef:2f:0b:81:32:2b:a1:ec:f2:
e1:fe:06:0a:55:fe:f8:cd:77:a1:fc:d5:01:3e:e0:
9e:76:59:e2:0c:30:2f:51:1c:0b:d1:9c:0c:e5:50:
57:a8:96:b4:3a:e6:03:e7:12:ca:00:c7:24:dd:36:
be:19:d0:81:87:9b:ab:fd:34:aa:71:a7:af:b4:07:
78:79:d7:87:21:bf:47:46:b5:97:98:af:7a:2a:b0:
fd:08:ae:b8:16:4a:19:3e:0b:85:54:9d:e8:f7:ca:
26:84:07:e4:b9:dd:2a:e0:4e:29:e5:95:35:7f:03:
44:75:91:bd:2c:65:2a:ac:a9:6a:a1:0e:b8:74:07:
95:28:90:54:fe:c1:a0:35:ba:2c:d3:ec:9a:eb:93:
ca:1e:96:c0:c2:b8:82:f7:30:65:fe:f8:c7:8e:dc:
0b:cb:8b:33:1e:3d:2c:d8:07:ab:d5:df:e8:e6:f7:
c0:c1:ce:36:23:b0:cb:50:5d:e1:5a:d0:6f:7c:43:
35:81:98:3c:77:60:60:94:25:bd:9e:8d:6b:3a:65:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A2:61:B3:D9:D6:38:16:0E:D0:65:B4:51:C5:1C:98:8B:DD:87:3F
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:13:c7:8f:c2:6d:cb:c9:b9:8d:99:2b:49:15:8f:1e:55:d4:
d3:c6:b0:5b:d0:08:d6:fb:e1:dd:96:ae:45:a2:73:e0:6f:c7:
e2:1c:2d:f4:33:ae:c4:74:95:d6:a1:67:52:55:d2:9b:3e:05:
05:16:c2:40:cd:29:83:23:99:7a:f7:11:76:ef:9a:dd:61:63:
6c:62:fa:87:ff:3f:17:ac:8e:c5:8a:d5:b5:2f:ce:3a:a3:17:
65:2d:f6:1d:a5:8a:28:1f:ae:32:c8:89:7e:5a:e1:29:0b:d6:
4a:9c:7b:3d:2d:d6:8c:4d:5a:43:7c:da:04:18:13:22:e0:f6:
4c:dc:9f:7c:fc:6b:ab:10:77:34:00:4d:eb:63:81:90:09:a6:
25:78:e5:6f:fa:fd:b4:30:c1:27:5f:e6:7c:47:60:41:73:5c:
9e:97:96:d6:d9:e8:05:9c:bc:08:08:d7:8b:4f:75:75:9d:c8:
56:c2:0a:83:8a:ba:12:bd:7e:db:57:69:cb:0d:85:85:d2:c0:
0f:53:e3:b6:7b:1f:50:a1:5e:eb:f2:4a:ec:2c:b0:65:9b:1d:
42:f2:60:66:21:08:0d:5c:04:c6:c7:5f:4b:0a:8b:19:a7:d6:
7a:bf:64:08:d1:56:41:2f:62:81:60:88:f3:3a:83:17:fb:48:
33:08:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:47:38 2025 by rpki-client