Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: rYSjni/SwTBhock+HEjALhzW+cp4BInfHsbMw+Y/TjE=
Subject key identifier: B8:B7:8C:DC:BB:74:D7:66:06:3F:CC:CE:EB:4A:E9:53:17:7A:C2:59
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 019655A63D05CB35877BD822396711217A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 0849
Signing time: Mon 21 Apr 2025 00:01:20 +0000
Manifest this update: Mon 21 Apr 2025 00:01:20 +0000
Manifest next update: Tue 22 Apr 2025 00:01:20 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: ryf+qE8P4J1RSBpvXfFNfeaPOd1gSejROhAFrgZ0Zio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:3d:05:cb:35:87:7b:d8:22:39:67:11:21:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Apr 21 00:01:20 2025 GMT
Not After : Apr 22 00:01:20 2025 GMT
Subject: CN=b8b78cdcbb74d766063fccceeb4ae953177ac259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:70:b5:31:2e:98:b5:c7:a3:29:44:5a:1b:
8f:92:01:cc:fe:b5:8d:14:00:0c:b0:e3:90:52:fa:
78:dd:69:f4:80:65:6e:6f:52:73:f1:d1:e6:e2:60:
9c:58:f1:03:1d:8a:45:d5:9a:f9:2c:0c:4e:75:7d:
e8:75:07:d7:ef:53:f9:43:50:f2:aa:d4:9b:b6:9c:
6d:2c:54:57:a9:4f:09:92:c4:5c:8a:b9:a5:59:3b:
e1:2d:fb:ed:65:b5:03:e8:29:e1:72:53:3b:38:3b:
ba:23:ae:9a:1f:35:df:33:5e:3a:81:e1:7e:fb:71:
d0:50:da:57:1b:f5:4c:85:69:fc:6e:44:56:eb:44:
fd:fd:16:76:19:3d:61:56:12:d3:27:98:82:7d:65:
87:75:bc:59:74:b1:df:37:ab:1b:36:c8:54:0e:77:
0f:61:da:22:f5:2f:07:ef:16:87:ad:03:fe:26:12:
3e:ae:23:ae:56:1f:5a:79:0b:2b:f4:a2:4f:90:57:
74:a5:03:05:cb:2b:12:99:4e:c2:95:8f:66:22:d3:
66:9e:b3:95:66:77:d0:a1:97:10:ae:5d:82:a5:44:
29:55:ef:46:c1:45:f8:84:c5:74:3f:63:aa:c9:ed:
c2:7e:f3:b7:e4:c3:24:d0:98:03:26:c1:ce:dd:aa:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:8C:DC:BB:74:D7:66:06:3F:CC:CE:EB:4A:E9:53:17:7A:C2:59
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:32:00:a8:c4:17:3a:96:35:25:f7:dd:bf:2a:f8:17:f7:
eb:80:c2:7a:99:4f:50:7a:54:57:e0:34:c1:51:fb:34:9c:7e:
61:de:f9:51:87:7a:4e:5b:95:da:0e:3e:c6:f3:f2:b3:99:5e:
f6:9e:f8:24:b5:f2:5a:9f:ad:af:44:f5:75:f2:be:f2:5b:42:
9f:90:15:92:85:f9:8c:db:37:6a:07:f6:1b:71:82:f5:ce:ad:
dc:78:3f:a9:8d:9e:17:91:ec:2c:43:64:9f:b8:c4:48:37:56:
60:35:ed:f8:0f:88:c0:15:27:30:60:2b:03:27:91:a5:f5:94:
59:29:ed:2c:02:0a:0a:4a:0c:5f:9b:5a:55:a5:24:30:a8:07:
0c:22:57:32:58:0d:27:9c:11:6e:4b:79:79:d7:4d:d9:6b:7e:
e7:ce:5d:64:ec:47:c7:11:eb:9a:f3:24:27:48:da:e5:27:51:
2f:04:46:5c:52:6b:cf:da:a7:ad:7d:95:7f:ec:f9:1a:67:69:
11:b6:f3:33:db:d2:e1:9f:05:a4:1d:3c:09:ef:3c:34:73:28:
5c:89:26:1e:13:4a:ae:9d:cf:31:18:70:53:f0:de:4b:60:be:
da:d1:e3:34:b0:9e:31:21:3d:f3:c0:3a:a6:de:58:91:df:33:
f1:c0:ca:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpj0FyzWHe9giOWcRIXpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4
YTE5NGIwHhcNMjUwNDIxMDAwMTIwWhcNMjUwNDIyMDAwMTIwWjAzMTEwLwYDVQQD
EyhiOGI3OGNkY2JiNzRkNzY2MDYzZmNjY2VlYjRhZTk1MzE3N2FjMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/FwtTEumLXHoylEWhuPkgHM/rWN
FAAMsOOQUvp43Wn0gGVub1Jz8dHm4mCcWPEDHYpF1Zr5LAxOdX3odQfX71P5Q1Dy
qtSbtpxtLFRXqU8JksRcirmlWTvhLfvtZbUD6CnhclM7ODu6I66aHzXfM146geF+
+3HQUNpXG/VMhWn8bkRW60T9/RZ2GT1hVhLTJ5iCfWWHdbxZdLHfN6sbNshUDncP
Ydoi9S8H7xaHrQP+JhI+riOuVh9aeQsr9KJPkFd0pQMFyysSmU7ClY9mItNmnrOV
ZnfQoZcQrl2CpUQpVe9GwUX4hMV0P2Oqye3CfvO35MMk0JgDJsHO3ar02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi3jNy7dNdmBj/MzutK6VMXesJZMB8GA1UdIwQY
MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt
NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm
LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMcyAKjE
FzqWNSX33b8q+Bf364DCeplPUHpUV+A0wVH7NJx+Yd75UYd6TluV2g4+xvPys5le
9p74JLXyWp+tr0T1dfK+8ltCn5AVkoX5jNs3agf2G3GC9c6t3Hg/qY2eF5HsLENk
n7jESDdWYDXt+A+IwBUnMGArAyeRpfWUWSntLAIKCkoMX5taVaUkMKgHDCJXMlgN
J5wRbkt5eddN2Wt+585dZOxHxxHrmvMkJ0ja5SdRLwRGXFJrz9qnrX2Vf+z5Gmdp
EbbzM9vS4Z8FpB08Ce88NHMoXIkmHhNKrp3PMRhwU/DeS2C+2tHjNLCeMSE988A6
pt5Ykd8z8cDKug==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:58:12 2025 by rpki-client