
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: 5dA/swiyHJQmH/GpMH0DczCZGo4tja85M+ZIZPITFBU=
Subject key identifier: 60:3B:5C:7F:AA:07:88:DF:D4:96:99:7D:5D:ED:AF:C3:9E:35:D7:69
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 01965D5F780E4ECD0FD6CAC1BF2098AB5BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 06F9
Signing time: Tue 22 Apr 2025 12:00:59 +0000
Manifest this update: Tue 22 Apr 2025 12:00:59 +0000
Manifest next update: Wed 23 Apr 2025 12:00:59 +0000
Files and hashes: 1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: zQlDlhpgu7BG4uaHjT7S1tRnEFYcU1ALAiBh175YXQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:78:0e:4e:cd:0f:d6:ca:c1:bf:20:98:ab:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Apr 22 12:00:59 2025 GMT
Not After : Apr 23 12:00:59 2025 GMT
Subject: CN=603b5c7faa0788dfd496997d5dedafc39e35d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:52:0b:db:d2:a4:45:ee:eb:ab:26:8b:b2:
09:48:0f:60:bf:7f:c8:4e:44:ea:5e:46:91:f9:e4:
0a:69:9a:e8:05:be:22:22:bc:88:4e:44:41:d8:eb:
b1:ed:89:3f:03:58:35:1f:90:ca:12:87:eb:f0:22:
e4:30:95:c6:0f:7e:51:15:22:27:d8:bc:71:bd:7e:
70:01:cc:a9:a6:9b:33:ca:19:25:d8:bf:16:f0:27:
a6:3a:88:84:df:9e:03:50:17:16:b6:12:70:c2:e8:
e6:80:84:1a:4f:38:10:40:e7:cb:3c:37:09:5f:64:
18:4b:9f:d0:f1:23:b7:ac:ad:91:3e:7c:8a:a8:95:
37:a4:30:0e:bc:96:d1:a0:66:c7:a1:03:bd:d5:f1:
78:27:5c:8d:00:cc:a2:51:18:72:45:a2:8d:50:9a:
86:cf:57:18:1d:e5:e5:64:96:4a:dd:f3:a8:4f:89:
d5:69:3a:2e:70:07:72:d1:0e:c3:c7:7c:1f:a4:36:
27:12:14:26:e1:5f:d5:ad:eb:2e:ad:5d:e7:3a:05:
95:64:76:b2:97:2d:e8:ad:46:c6:d3:1d:2b:7c:cf:
a8:f7:b9:5a:5a:47:56:f6:ae:94:70:6f:33:8c:ab:
c8:17:c1:28:a5:bf:a5:61:42:eb:dc:e3:a4:4e:5b:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:5C:7F:AA:07:88:DF:D4:96:99:7D:5D:ED:AF:C3:9E:35:D7:69
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c7:4f:14:56:93:7f:57:ec:79:0b:66:72:24:a3:2d:85:47:
55:bf:aa:ba:5d:9d:ac:de:10:c1:4b:c5:22:dd:0a:34:f0:8d:
1e:ff:d0:f1:2a:d5:1f:a3:27:c6:f1:13:73:33:18:ea:7d:a2:
f8:6d:f9:01:b8:d5:77:40:a3:70:64:16:0c:f0:af:f3:9b:cb:
00:70:a4:10:5a:65:53:b5:4b:47:51:1c:ee:18:62:66:31:13:
8e:29:f7:30:91:ad:9b:14:a6:f5:fb:26:0d:1f:1a:9e:b9:38:
ad:53:8b:63:65:73:7c:d2:3b:98:ad:34:1c:c7:9c:5e:76:3e:
42:11:fa:85:64:7e:b1:25:15:2a:4f:d6:5b:7e:74:23:ee:6a:
c1:14:94:9e:cd:8a:16:24:ba:75:aa:16:bf:6b:11:70:b8:5d:
9b:63:4b:5b:a0:54:1f:b3:61:95:91:cb:fb:af:c5:d0:cc:62:
36:7b:66:fc:99:b8:9d:ca:8c:c7:4c:a8:11:f0:7c:23:fe:ad:
16:36:1d:17:ff:a7:73:92:90:ed:25:59:70:0a:b1:ba:a2:24:
34:69:58:77:dd:db:50:e3:59:64:1c:f9:4f:ee:cf:85:8f:48:
4f:fe:c1:4e:38:82:a5:18:db:64:0d:02:2b:b4:2f:82:3e:fe:
3c:58:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:03:23 2025 by rpki-client