Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: fdU+3mg97scdOjhDnTDj+KOhWDIo2Ri6giYOHTNZ8YM=
Subject key identifier: 78:D8:E7:76:6C:D7:C2:67:A4:E7:C3:E7:59:BE:52:99:93:69:78:64
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 01965D5FBD0A0F8AB703C0633E80F7CE8DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 12:01:17 +0000
Manifest this update: Tue 22 Apr 2025 12:01:17 +0000
Manifest next update: Wed 23 Apr 2025 12:01:17 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: yCcXgP6XqgPFHCTxQSgo9S92ara+IK2xnCJpzFBawUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:bd:0a:0f:8a:b7:03:c0:63:3e:80:f7:ce:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Apr 22 12:01:17 2025 GMT
Not After : Apr 23 12:01:17 2025 GMT
Subject: CN=78d8e7766cd7c267a4e7c3e759be529993697864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:65:d9:11:fd:e9:5a:27:c4:c8:af:ba:3a:
b6:55:99:9b:2b:18:3c:aa:99:08:ad:54:32:e5:f1:
69:90:59:fc:e8:71:dd:26:f2:48:c6:af:70:2d:ff:
a6:ac:ee:ed:01:e4:0f:26:68:4f:04:79:b1:b1:1b:
46:5c:aa:e7:29:d0:13:0e:cb:b3:a6:c7:2f:d3:09:
2d:3d:29:57:c4:45:38:5f:51:4b:17:0e:d1:86:41:
94:83:2b:37:4c:a2:aa:24:6a:91:fa:fc:33:66:2b:
60:e3:0b:8d:05:73:11:6f:a0:41:e1:e1:64:57:67:
ba:17:39:1f:c1:b3:71:d9:3c:e6:a8:19:a9:07:dd:
67:67:66:36:50:28:50:b9:df:d2:1b:ed:b7:83:28:
50:2b:de:21:31:2f:94:49:91:06:2f:47:46:3a:a3:
3c:37:eb:ae:8e:73:41:8f:a1:1e:8f:84:f7:e6:45:
d0:57:91:4d:a3:e5:0b:02:70:16:fd:a5:a8:7e:c2:
ae:5c:0c:1b:43:f0:39:64:4d:11:1a:0c:a4:47:ca:
87:86:32:45:1e:71:f0:8e:9a:34:e6:0e:e6:b6:d0:
d0:d3:8b:3c:74:2a:6c:8e:51:c0:5b:31:05:ce:b6:
9d:25:93:d2:e1:69:cc:97:24:a8:22:e4:b3:90:a5:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:E7:76:6C:D7:C2:67:A4:E7:C3:E7:59:BE:52:99:93:69:78:64
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3a:76:3b:a8:9e:ed:6e:cc:60:34:9a:ee:13:35:e1:27:7c:
d4:75:64:64:a1:87:2e:a9:93:e9:3e:8e:4e:53:bf:6c:89:6e:
62:9c:3b:a2:1f:8b:40:01:4b:64:ae:62:9c:0a:b6:0e:fe:3b:
38:e4:ee:1b:34:a9:dd:37:99:dd:2d:b2:69:92:12:39:67:7d:
6d:69:fb:71:91:29:42:dd:a6:82:d6:c6:e6:5b:3c:30:36:c7:
67:e3:cb:22:54:b6:44:30:05:64:50:49:c8:ee:9f:cc:33:14:
ae:b5:fd:67:a1:86:7a:3a:06:7d:8f:23:a5:5e:a7:6c:b5:ff:
74:59:a0:5b:f5:da:cf:71:c7:c0:2d:2d:9b:63:dc:08:e5:10:
13:4e:78:2e:b6:10:72:95:49:f4:7d:95:90:43:a5:b4:9e:76:
4f:8a:8f:33:16:6f:fa:ae:f5:c5:81:8a:70:eb:24:e9:3a:1f:
5a:d1:c9:33:1e:0b:c7:6b:f9:5b:52:cf:f5:8b:f1:79:3e:fa:
c6:40:0c:83:8c:81:4e:ee:7e:10:d7:1e:52:ee:2d:ea:8c:27:
53:d7:98:37:88:1c:5c:2a:73:66:25:99:ce:af:31:3d:fd:48:
f3:01:5d:33:29:e0:de:69:58:ee:0d:a0:fa:fe:c9:46:b3:14:
10:83:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:22 2025 by rpki-client