Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: 7sX2FN4bc8NVnm8yasUT8gbsRaaBM7MoQ4imKJBfsfQ=
Subject key identifier: CA:28:35:8E:ED:07:5F:C5:FA:F0:55:AF:5F:6D:80:FA:45:FE:16:B7
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0197CC4D2A0600AF9F474327B69551DC2CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 18:01:38 +0000
Manifest this update: Wed 02 Jul 2025 18:01:38 +0000
Manifest next update: Thu 03 Jul 2025 18:01:38 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: avmn+ttRF9oZ+RlaHyz623Iw6a1WBUlJwZzVY8rH9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:2a:06:00:af:9f:47:43:27:b6:95:51:dc:2c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Jul 2 18:01:38 2025 GMT
Not After : Jul 3 18:01:38 2025 GMT
Subject: CN=ca28358eed075fc5faf055af5f6d80fa45fe16b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:5c:8f:4c:99:11:ad:a2:d5:ba:2d:73:e0:
cf:1e:18:71:d7:b3:b1:f9:49:a0:31:2d:14:88:f7:
d3:40:83:7f:6c:b9:77:a5:01:bc:0c:60:06:10:3f:
ea:e4:ce:fe:9b:a2:e0:70:38:2a:f7:81:2b:5b:92:
3c:be:81:23:c4:45:37:73:20:41:fe:76:ac:f4:b9:
ae:42:55:f8:ab:21:a9:d1:20:a1:6a:57:c5:7d:91:
fe:76:25:48:71:6a:96:5d:4f:45:45:cd:14:89:da:
6f:62:62:c5:55:ed:08:0e:bc:94:69:30:08:78:c8:
2c:65:17:16:50:1d:c9:89:d0:00:52:fc:3e:51:e3:
1c:42:42:d8:ee:04:21:92:b3:d0:10:fd:4b:a0:13:
ae:37:5e:6d:05:1b:53:a7:74:cd:c2:9e:56:a7:bd:
6e:5d:e3:25:75:e9:b9:07:03:7e:be:71:f9:5b:80:
a3:f2:13:c1:c7:b4:cf:68:0f:06:ef:4a:af:c9:66:
92:6c:04:86:41:c0:1a:54:50:89:cb:64:56:08:e9:
99:f5:a8:68:d6:8f:94:84:7e:83:55:db:8c:e7:3e:
4f:20:96:be:cd:16:d2:f3:09:ed:4d:6d:67:5c:9b:
20:ce:bd:d9:20:87:38:fe:9e:41:8b:89:fb:bc:8b:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:35:8E:ED:07:5F:C5:FA:F0:55:AF:5F:6D:80:FA:45:FE:16:B7
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:cc:54:61:45:97:6c:e5:d5:3b:c8:ba:c7:9b:b3:68:4e:
3d:51:b3:f7:88:e5:ae:8f:d5:c5:f9:98:e9:82:9a:bf:d8:3f:
84:55:2d:0e:5e:d5:7b:ce:13:40:b2:6b:6f:1b:a7:c6:b2:63:
a1:bc:9b:a3:2e:ef:0b:b9:20:82:8f:33:82:c3:c2:19:a2:44:
41:97:b6:99:5a:6f:c0:57:91:13:dc:d1:fa:c0:58:56:3b:7d:
47:59:c8:03:db:70:a5:bc:5f:64:8e:54:97:54:ec:4e:c5:21:
78:96:38:36:75:c9:a5:2f:aa:1a:c9:17:3a:75:06:aa:c5:69:
a2:4d:d5:e4:b3:7d:97:be:d9:d9:b0:7c:49:4a:e1:44:b7:71:
ef:5c:11:91:e7:9c:96:3f:8a:0a:6d:11:91:92:64:a0:b9:f1:
7d:f6:0f:98:d9:d2:c2:53:77:0c:e1:59:fc:bf:e7:99:c0:4f:
d8:54:2e:b8:ea:92:f5:17:40:19:6a:5a:02:5e:c2:af:02:09:
63:94:ea:bb:ba:ea:6a:13:f2:e9:21:50:2b:da:62:8b:19:4d:
db:2a:bc:5c:50:53:72:f9:51:fe:d3:d0:63:50:7c:c8:f5:0e:
e9:14:0d:d1:2d:9b:9c:ba:30:3c:8d:e2:dd:67:a7:df:0d:e4:
f0:f9:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:41:58 2025 by rpki-client