Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier: Vkb/E0BHmWkV+Cwb6rZ06E2SW2m/pFa0AkFGE0IXwdY=
Subject key identifier: AA:A1:8B:D8:01:9E:D5:FF:05:E2:65:1A:8C:5D:3F:28:08:7D:97:00
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 01965A27353C3818696087BA57BCD5D81D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number: 1193
Signing time: Mon 21 Apr 2025 21:00:41 +0000
Manifest this update: Mon 21 Apr 2025 21:00:41 +0000
Manifest next update: Tue 22 Apr 2025 21:00:41 +0000
Files and hashes: 1: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (hash: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=)
2: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: bz79VzNZ2O/VrBL30ciqOh0ePrqwDg3iQvjwQNcTTPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:35:3c:38:18:69:60:87:ba:57:bc:d5:d8:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Apr 21 21:00:41 2025 GMT
Not After : Apr 22 21:00:41 2025 GMT
Subject: CN=aaa18bd8019ed5ff05e2651a8c5d3f28087d9700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:4a:39:89:5b:b1:1a:05:5b:48:f1:b5:f6:
34:02:79:32:0f:84:b6:9f:f7:1d:ec:3e:3c:9a:e8:
2d:4d:df:2b:22:22:c9:7b:44:d3:a9:f9:02:36:2b:
c1:e5:a6:3f:b6:d2:31:8e:1b:6a:4d:a5:82:ca:7c:
4e:1e:67:fa:85:32:83:76:a7:c3:0e:92:90:64:82:
be:bf:79:8b:ad:07:6c:d7:2b:c5:f2:61:f4:e9:84:
93:10:49:5c:3d:62:57:74:c0:bc:e6:1b:1f:02:14:
a9:5e:b0:49:4a:74:4c:46:18:c5:0e:2c:63:71:ad:
07:c1:1e:82:46:f2:63:4f:64:d9:31:44:39:04:e3:
9e:96:49:ea:76:a0:5d:09:79:52:f6:17:f7:d7:d6:
c3:dd:84:71:e2:80:6a:d4:5e:57:ee:18:09:47:e7:
a6:ce:34:ba:13:c9:e7:32:b4:5f:64:db:1b:5b:d3:
f8:72:ac:7e:96:6e:3a:d6:e4:16:46:33:38:af:b3:
6f:fd:c8:b2:08:83:a3:d3:f4:a4:d6:2c:af:c9:3b:
e3:90:6f:14:23:3f:e1:e4:bf:10:e6:de:d1:36:1e:
dc:96:ab:48:a9:dc:56:24:f9:bd:2a:1a:b0:fc:ca:
45:66:4e:cf:bb:e8:5f:91:07:0e:b3:b7:09:61:6d:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:8B:D8:01:9E:D5:FF:05:E2:65:1A:8C:5D:3F:28:08:7D:97:00
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d7:2b:1a:8d:2a:2c:63:7c:69:2a:1b:c3:33:59:cc:d3:b9:
c6:1a:e6:81:c3:2c:9c:44:a2:16:45:32:36:e2:50:5d:af:7f:
dd:f4:c6:6d:3d:1e:b7:98:d9:64:75:44:70:aa:bd:5c:8e:f1:
f6:6d:bc:db:2e:ee:b6:4f:22:09:4d:41:7c:4b:33:34:92:7d:
84:09:47:8a:2b:f4:87:fb:16:b8:6a:48:d8:5f:75:b3:ca:d3:
26:91:94:b6:40:0a:fe:fa:f8:0e:f6:70:89:94:3f:3b:ef:64:
c8:78:b4:5e:13:77:02:3f:51:c2:69:8d:3a:38:80:e9:d6:a1:
78:ff:2c:20:6d:29:d4:34:5c:0e:8d:f1:4a:f0:6f:c5:c9:a3:
1c:5a:99:63:e8:05:61:0c:90:68:5d:4c:c8:03:b9:61:92:f1:
12:1a:f5:31:0b:03:8f:d1:91:91:3a:a7:a2:2c:33:8f:d5:69:
1b:48:c3:61:89:83:0e:5c:a0:35:0d:1b:32:50:ae:a5:d1:13:
43:c1:da:b2:e8:29:59:e5:25:28:3e:59:70:f8:f9:42:8c:62:
50:7f:eb:fa:de:5e:cd:ca:40:d2:0a:8e:e4:95:85:d4:59:3a:
1b:aa:f4:f9:ae:bf:1d:60:e1:6a:9c:cc:2d:05:16:bf:a9:81:
70:50:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:46:57 2025 by rpki-client