Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier: P2caRFD5Xwr6yy7Zj3brtPz8ZfdE3n/izjbMCs3v3C8=
Subject key identifier: E3:95:97:AB:CF:19:0F:66:A8:02:E3:7E:3C:2D:6A:1A:42:96:BA:CD
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 019A70DC57DE77435B881054BC98552812FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (hash: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=)
2: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: qV0Z0Pc38OY5cwjKhYP7mNC6eT5ODZKXHKX3eGTGH04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:57:de:77:43:5b:88:10:54:bc:98:55:28:12:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=e39597abcf190f66a802e37e3c2d6a1a4296bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:eb:99:a9:e4:ec:c0:4b:9e:69:79:28:20:
c3:21:28:60:16:02:d7:36:04:a5:46:2d:75:37:9f:
7e:eb:80:5f:78:00:e9:b7:08:c3:62:62:76:35:79:
55:35:9a:d3:b5:ce:49:33:d5:25:b3:98:bf:b3:c9:
ae:cb:8a:d5:69:a1:5b:b5:65:53:35:00:e2:c8:46:
a1:64:a9:a2:b5:ec:93:eb:4d:42:b6:0a:e2:d7:73:
54:8c:68:fd:77:1e:91:2d:f2:91:1b:ad:04:03:2a:
1f:83:53:52:61:a2:13:51:9e:60:c4:94:ed:42:07:
04:15:bd:8d:31:60:0f:dd:e8:2c:2f:f0:a0:e0:b4:
06:c3:3e:2b:82:e5:a2:24:24:08:fb:85:e5:66:59:
42:75:df:ef:83:4e:85:0d:71:d1:f3:2a:8b:2b:ac:
9f:fc:ed:21:3a:18:4c:e6:07:e0:10:c4:a3:fa:20:
75:1d:32:95:46:fb:e3:d9:57:11:c4:0c:de:0d:0d:
42:bc:cb:88:f7:93:6b:ee:05:ec:5c:15:ce:7b:16:
b6:3a:7e:6f:fb:4f:36:ea:6d:23:ab:7c:c3:9a:87:
cb:04:b9:bb:64:f6:7d:4b:7f:fa:cb:2b:01:4f:b6:
ca:b2:94:34:ad:ef:b7:17:27:5b:06:ef:97:17:b7:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:97:AB:CF:19:0F:66:A8:02:E3:7E:3C:2D:6A:1A:42:96:BA:CD
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:68:21:e4:26:bb:a7:e3:4a:b7:b2:bb:f9:5d:60:ce:35:
3a:fe:0d:8a:db:63:ee:fd:39:f4:e2:d3:88:80:90:d4:ec:5d:
69:42:25:46:62:9a:80:d3:4a:f7:95:6e:7b:b7:5e:d1:8f:9a:
72:71:63:88:a5:49:51:65:7f:a4:fa:29:bd:9b:b9:09:e0:b9:
77:b3:12:0c:62:11:1c:e8:bf:a8:5d:63:a4:6c:7f:03:dd:cc:
b0:b8:a4:a7:74:f0:b6:43:b7:dd:e2:ba:b6:e9:9e:52:15:3b:
50:9a:ec:69:8b:75:0c:2e:be:d8:26:a8:6f:b3:67:1d:b7:f2:
1e:13:8b:94:25:23:31:8a:86:6e:fd:52:88:c0:57:b9:6d:90:
dc:89:f8:ff:40:79:0c:be:81:e2:f6:97:16:6b:cf:44:82:2e:
1b:7b:ae:2b:3b:6e:45:85:45:55:4a:80:d3:3c:b6:4e:e1:40:
e6:0b:47:73:aa:6a:1e:3c:6c:50:67:4b:c3:d3:93:f5:b8:04:
8d:d2:15:01:2d:db:c3:32:4f:f5:30:06:bd:fe:b1:16:36:fa:
f9:a1:eb:06:3c:8b:d7:1c:d8:6d:06:24:90:69:eb:b7:0a:20:
ec:2c:5a:de:06:f0:46:0c:57:bf:fb:63:3b:fc:55:2e:c8:20:
d2:5b:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client