Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
File: NJI6ntps8kDsh5WeHcONNh951ho.mft (raw, json)
Hash identifier: Yi94nMaMkw5p5UNOeNKaAKQrRSbrsNouy9IVmrjGbao=
Subject key identifier: 27:8A:01:F5:B0:8B:57:6E:20:47:70:5D:1F:46:0E:E6:92:D7:10:B4
Authority key identifier: 34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
Certificate issuer: /CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Certificate serial: 01965A5DDE7CB9C8028DCABE911EAEA75C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
Manifest number: 0310
Signing time: Mon 21 Apr 2025 22:00:23 +0000
Manifest this update: Mon 21 Apr 2025 22:00:23 +0000
Manifest next update: Tue 22 Apr 2025 22:00:23 +0000
Files and hashes: 1: NJI6ntps8kDsh5WeHcONNh951ho.crl (hash: F/EobOvswS7YsmVDmc40S41Rn+fHw9lWUZggYrwW+rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:de:7c:b9:c8:02:8d:ca:be:91:1e:ae:a7:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Validity
Not Before: Apr 21 22:00:23 2025 GMT
Not After : Apr 22 22:00:23 2025 GMT
Subject: CN=278a01f5b08b576e2047705d1f460ee692d710b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:cd:8b:20:ab:6c:33:9e:24:d5:5b:72:d0:
91:ce:13:a4:12:e7:33:7e:7a:ff:ee:fa:c5:f3:31:
19:d3:72:7b:b1:f7:3c:de:06:48:4a:3f:23:44:15:
98:ff:23:f2:18:32:32:9e:5a:45:63:ec:b1:09:77:
d7:21:30:52:3a:3e:b0:46:2c:52:98:f2:e9:c8:8d:
9a:b5:7a:85:a0:68:fd:7f:7e:f2:07:64:b0:3a:52:
9d:cf:88:30:82:1e:ec:9b:64:63:c3:6b:1a:59:f9:
b1:ef:0d:02:56:e5:1b:6d:cf:e5:b3:8d:96:22:6d:
cc:88:b2:b6:87:d3:5a:0d:69:2e:c2:10:06:09:f0:
b3:95:14:01:74:57:ff:24:1f:63:cb:83:49:62:ff:
0d:5a:bd:13:68:be:fb:dc:f0:3d:88:d6:27:a9:41:
45:df:0b:ea:7d:f1:6b:9a:38:84:80:b2:4d:fa:a6:
a1:b6:d5:9b:61:d9:7b:b5:26:44:5e:99:4f:e6:cd:
9a:e2:14:dc:b5:94:0b:48:c9:8e:94:5d:bd:77:3d:
d6:33:96:4f:10:47:65:41:af:cb:82:3b:8c:b1:b6:
de:36:be:1f:4e:29:4f:0f:ce:f0:fa:c5:b6:7d:97:
9d:6d:f9:af:9b:d7:0e:ec:14:72:bf:b8:77:0a:4c:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8A:01:F5:B0:8B:57:6E:20:47:70:5D:1F:46:0E:E6:92:D7:10:B4
X509v3 Authority Key Identifier:
keyid:34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:d5:c9:5b:60:56:c1:b8:c1:ae:0f:6c:43:9f:b0:10:a6:
a1:e3:70:ea:45:d6:eb:dd:c1:52:bb:25:8e:55:75:e4:b6:a6:
59:4a:c7:d1:bd:89:ad:35:8b:c8:35:94:4a:86:47:fb:cb:79:
62:87:ed:62:a8:ef:3b:48:ef:3e:d0:58:40:ea:5d:73:42:40:
23:fe:86:49:ad:12:1e:04:d9:fd:39:8f:18:e0:5b:c3:6f:d4:
9b:aa:21:1a:bf:71:b3:32:52:f9:5f:cf:36:39:90:5d:64:c8:
b7:3b:ff:4b:98:95:e0:08:8d:fb:55:07:c9:89:a6:be:9c:bc:
ea:5e:cf:1c:09:b6:48:e1:b8:d8:02:92:48:da:11:72:a7:e4:
66:a2:55:7e:07:30:3a:3f:46:c6:d0:64:75:7c:cc:35:29:82:
57:8c:7a:1e:69:45:7c:3f:c4:3c:fe:39:4f:08:9b:05:77:44:
ea:77:59:87:59:2c:2f:36:71:85:e2:be:1b:3c:a3:01:79:5e:
7c:ad:2e:25:89:15:42:e4:e6:9a:f3:91:13:75:d1:8d:75:b5:
39:28:8d:bd:7d:39:9a:0e:f7:87:45:97:c9:c3:75:ec:37:6d:
86:49:50:69:e4:ee:5a:f4:a1:c5:7e:91:7f:76:a1:a7:af:d9:
9c:4b:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:29 2025 by rpki-client