Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: vj1LBFCw/v2w6B2ti0Ny3RIi2xCJC0UxQI8qny7ShuA=
Subject key identifier: DF:9A:7F:DA:87:45:D4:80:73:4D:5F:F4:DB:66:D4:61:F5:BB:5B:43
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 01974BC47A49BD38DBB951C886CBC4CB3175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0C24
Signing time: Sat 07 Jun 2025 19:00:56 +0000
Manifest this update: Sat 07 Jun 2025 19:00:56 +0000
Manifest next update: Sun 08 Jun 2025 19:00:56 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: jcTlYaeO0/mYWYJ7ZOB5JA4avyy0g9a/kBpOZnX3iL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:7a:49:bd:38:db:b9:51:c8:86:cb:c4:cb:31:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Jun 7 19:00:56 2025 GMT
Not After : Jun 8 19:00:56 2025 GMT
Subject: CN=df9a7fda8745d480734d5ff4db66d461f5bb5b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:e7:a1:c3:77:ae:92:3b:8b:27:31:eb:8a:
29:79:a4:07:66:cd:54:4f:23:01:d9:76:0c:65:3d:
05:38:6c:ad:56:01:f4:28:89:40:9a:9b:e4:24:9e:
30:ef:95:09:0b:09:5e:66:17:a1:85:dd:57:85:66:
b6:81:03:bd:28:e1:a8:33:36:01:77:b5:85:30:54:
2e:cf:d6:a0:54:32:8d:03:79:ad:2c:c9:ba:d0:f3:
5c:13:01:35:f4:01:4e:c2:3c:12:bf:75:16:db:9a:
7e:ac:21:31:4b:2c:59:12:a0:bf:cc:55:0f:18:06:
2c:07:83:66:cb:d8:f8:b7:f2:27:ed:33:71:06:4b:
f3:cf:b2:1a:7f:b6:d2:58:af:f1:bb:bc:a8:b8:7e:
3e:d1:de:46:23:b5:e9:10:db:6a:31:f5:77:fa:56:
dc:1e:49:9f:c1:c5:76:8c:63:47:b7:72:e5:9a:af:
6a:a4:b1:f1:53:38:64:c4:a7:57:b5:6e:0c:ea:d0:
2d:0c:76:1d:2b:7f:8d:00:5a:5a:4b:2f:64:36:60:
96:ca:74:22:37:d9:55:5c:c4:5a:00:09:73:0b:e0:
a9:2a:45:a3:ae:b6:bd:3e:7f:2a:c3:e9:ac:9a:17:
88:14:76:c9:bf:7f:bb:c5:21:74:84:7b:be:4d:6b:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:7F:DA:87:45:D4:80:73:4D:5F:F4:DB:66:D4:61:F5:BB:5B:43
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:d1:55:54:76:4b:59:11:4c:1b:9c:8e:ec:25:de:45:1c:
ce:a6:5c:61:aa:4a:ca:01:84:b0:ca:6f:bd:dd:c3:24:d5:9b:
a2:29:d7:03:ad:0a:11:a0:36:6d:fe:1a:e6:50:8b:22:1d:d8:
ba:9a:bc:27:e0:a7:36:61:20:52:bb:0d:d1:8f:23:5f:aa:4d:
18:64:b6:49:c9:d1:24:f2:1f:13:98:dc:84:dd:33:ff:a7:5c:
49:6a:ac:ca:01:89:53:37:bb:49:25:92:f8:b4:ca:0a:44:7f:
9b:a1:ed:73:6e:99:a4:f8:fe:1b:9c:8f:9d:84:85:3b:be:b6:
dd:8a:65:06:5f:45:14:69:41:7a:1d:9c:f3:e5:c3:08:69:26:
33:60:26:88:7d:89:8d:24:c9:5e:11:64:c7:84:92:37:77:7f:
67:b9:81:c5:5b:5b:b2:15:cd:d1:f2:26:9c:1b:fc:08:12:70:
08:77:45:59:e3:7f:07:25:d1:81:81:68:7b:68:71:21:8d:25:
79:dd:79:d9:18:c8:70:10:f5:14:71:88:97:b9:0e:20:94:a2:
47:7e:36:f6:e2:85:c2:f5:24:fc:63:3d:e3:5b:f5:03:bf:05:
d9:51:5e:7d:a1:34:cb:44:7a:a7:10:da:87:3a:7f:b1:56:6d:
ee:a7:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:34 2025 by rpki-client