Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: xJluM/Qw+pL64GEz0xQ4UMtpJ5pYQ4vx4WNw6MQICEs=
Subject key identifier: 48:A6:97:05:36:8F:E4:47:D1:CD:42:6D:C7:22:66:BF:1A:80:95:35
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0199221F029FA1ADAE55F3DF6E7CAC1C02BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: i2NjYAP1nd7UQeZYigPfrKxCG6jlfZRCxlznL9t1/Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:02:9f:a1:ad:ae:55:f3:df:6e:7c:ac:1c:02:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=48a69705368fe447d1cd426dc72266bf1a809535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:b9:56:57:7f:d6:ac:f9:9d:d0:66:89:3c:
50:1f:67:d4:51:87:f6:98:ec:96:34:8e:24:ac:28:
a9:de:6b:b4:90:06:13:ac:55:64:40:6a:7f:1f:de:
0f:a9:62:7c:0d:1f:a5:ce:43:1c:97:40:2f:18:44:
40:c8:27:e3:9e:3a:c9:bb:95:45:19:d3:a6:3f:c8:
65:fb:38:cb:d2:14:a8:68:6c:70:d8:89:b3:78:90:
17:98:5e:13:b8:cc:94:c6:eb:ef:52:50:ed:70:5a:
34:b6:c6:0e:2d:ef:23:2f:85:d8:42:95:45:ff:6d:
fe:c5:ef:84:50:45:9f:c3:d6:fc:42:fc:aa:a9:ba:
a4:d2:23:81:b7:c3:0e:3a:13:fa:e5:b9:05:30:c3:
e0:66:ce:56:65:d8:a9:72:a9:bc:1d:59:dd:e4:ac:
22:8e:50:9b:48:66:29:d3:01:9f:93:85:67:8d:17:
86:58:2a:6f:f0:27:89:a7:e5:98:30:93:f7:63:c9:
eb:9b:da:42:b9:1a:7f:e8:f1:b0:55:a3:79:50:b9:
1c:e0:68:02:08:3d:39:0d:80:74:5d:7d:c3:4e:ae:
25:9a:b8:75:5f:0a:af:56:fc:33:b7:5d:8b:21:e8:
f5:a7:8b:a4:fd:30:f2:60:3c:c2:42:cf:81:fb:53:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:97:05:36:8F:E4:47:D1:CD:42:6D:C7:22:66:BF:1A:80:95:35
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:0b:22:b6:24:99:de:01:e1:a9:4c:8d:7e:3b:d9:93:19:
c1:26:ec:fb:72:32:97:64:0a:97:69:9b:0e:2d:fc:35:dc:35:
b1:ee:03:8a:5b:f9:b8:82:1f:96:e8:00:01:fc:46:66:39:3a:
62:be:ee:4c:a8:a6:e8:47:a3:18:9c:32:ca:7c:be:36:b9:74:
71:7f:93:df:ea:a1:9b:d1:8d:40:78:de:28:16:38:ff:9a:df:
5c:ed:30:37:ef:f9:6e:95:a8:d9:b6:19:5b:cf:eb:1c:a6:f9:
ab:57:64:98:c5:53:68:e4:c5:17:90:48:46:2c:ea:ae:82:f5:
e5:6c:84:70:b1:38:28:ee:a4:2e:fb:26:6d:51:be:aa:7c:ce:
47:47:68:fb:20:28:3f:26:78:62:d2:ed:86:08:ff:c3:4e:83:
3a:46:89:e5:56:fa:61:23:60:3e:97:b4:0b:3b:1f:b4:65:8d:
95:16:3d:1d:83:c4:b4:ee:41:0a:87:db:09:dc:4d:90:7c:3c:
db:df:45:80:a4:16:c9:34:1e:62:52:28:5a:a2:45:01:69:ed:
12:c2:b9:9c:62:58:51:9b:ed:8a:ca:ed:5c:a7:30:4e:07:4a:
a6:6f:ea:4c:30:88:da:34:6e:90:98:1d:61:4d:75:86:ae:e3:
cb:dc:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:46 2025 by rpki-client