Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: 9sGZovI7LT1SRPI34Nvxr3c7As8B7ERQgcKDvvWlQxc=
Subject key identifier: 2D:93:2D:BF:AA:9F:27:BC:05:48:C2:96:AF:31:4A:E5:21:9C:24:65
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 019A722651F5AF7B64E06AC17E9F49F6EE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: LggIDhJJQt5fdzTh4CHQeWLTw2KT1TVGqI8JlCmKSYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:f5:af:7b:64:e0:6a:c1:7e:9f:49:f6:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=2d932dbfaa9f27bc0548c296af314ae5219c2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:b4:4a:b0:03:06:19:82:55:e0:97:21:2f:
a0:4d:08:4c:f1:27:49:21:e1:55:43:8a:5c:e9:5b:
4e:cb:f3:04:09:7e:50:37:c0:fb:b0:c0:eb:f6:96:
38:9d:f5:6c:13:62:cc:e9:b6:3a:ce:cc:73:fb:82:
92:81:2a:1f:86:95:9a:a0:ca:b0:b2:cd:ec:b0:76:
f7:84:8b:26:be:c9:ad:9e:dd:2d:85:f8:12:27:4b:
44:5a:fa:8a:9f:12:4e:34:c3:df:f4:c4:c1:c5:ab:
85:55:41:30:db:60:6b:1f:ec:1a:28:94:f5:f2:60:
0f:23:bd:e0:97:eb:25:b5:88:aa:89:86:42:3a:eb:
da:f2:c0:d7:f7:a1:26:40:d9:59:ca:21:84:d2:31:
60:fc:39:1d:fa:5f:37:4c:b1:24:6f:c2:1d:b6:40:
b8:f2:d4:10:89:67:6a:8c:22:51:3f:07:a9:93:61:
d8:8c:32:49:70:a0:cc:70:04:05:b2:7a:9f:17:32:
08:a0:37:aa:04:59:d8:4f:68:5e:d3:67:67:bd:74:
37:05:29:6c:4c:d5:25:3e:d6:96:68:8d:e9:96:96:
ad:fb:1b:d8:ac:a1:28:49:5b:b3:91:7c:d7:bd:fa:
cf:6b:27:38:f9:ef:a7:e0:bc:f2:6b:ff:f7:3c:4e:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:93:2D:BF:AA:9F:27:BC:05:48:C2:96:AF:31:4A:E5:21:9C:24:65
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1e:53:17:dd:4e:35:db:7b:2f:8b:fe:96:46:7f:5a:eb:77:
4b:45:a6:f2:8f:14:64:db:59:af:88:38:49:55:d0:0f:20:7a:
89:d3:73:2e:07:a1:d1:74:b8:db:72:f0:32:06:ef:57:dd:9f:
de:4a:8f:bb:a9:61:0f:aa:40:72:bf:9f:f2:3b:0f:eb:e0:d7:
68:da:31:2a:63:8d:4a:71:f7:b6:7b:8f:28:c2:e7:d7:8d:f7:
e1:77:54:fb:b9:62:5c:92:e2:46:9f:66:c3:f5:d8:4e:07:a0:
c5:74:bf:e6:38:d8:c2:6b:0c:aa:49:eb:0b:69:6b:30:4f:4e:
33:e3:b7:ae:1b:e3:de:5b:7a:bf:b4:63:91:25:78:3c:1e:b5:
5b:4e:2a:ab:a1:66:6b:57:f0:6d:e4:f2:d2:7d:ac:ef:5a:3e:
95:86:e9:cd:0a:54:eb:c1:35:00:84:8a:42:4d:6f:aa:1e:2f:
e8:74:bd:de:16:84:90:62:5e:1c:79:7f:d5:7c:06:5c:b5:ac:
2d:1b:14:e3:5e:7a:bd:53:9d:d2:29:db:d3:0e:25:55:12:25:
5b:9e:15:17:38:53:19:e5:5c:41:5d:ff:b0:11:62:25:3a:01:
ad:db:8d:ee:5d:b2:1c:12:86:15:d0:76:9d:08:1f:f1:8e:7d:
8b:6c:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client