Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: xsFoevTHIoJrsS3Hzxrypw8ewZD8YWXZZhqJjqT2uww=
Subject key identifier: 7D:21:20:8F:52:09:0D:98:F0:A8:9A:C4:84:63:22:F0:BE:FB:4A:32
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 01958EBD53F3273AFE90B26EAC4BB4B8B560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 09:02:07 +0000
Manifest this update: Thu 13 Mar 2025 09:02:07 +0000
Manifest next update: Fri 14 Mar 2025 09:02:07 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: SVV4DomYAJG/rIzILF4Ja3ttdH2sVCPQEDBhsdcI6y0=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:53:f3:27:3a:fe:90:b2:6e:ac:4b:b4:b8:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Mar 13 09:02:07 2025 GMT
Not After : Mar 14 09:02:07 2025 GMT
Subject: CN=7d21208f52090d98f0a89ac4846322f0befb4a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:94:d8:c8:6a:f1:83:a5:5b:2c:96:5e:a9:e1:
23:2d:50:7a:4a:c6:c9:29:61:70:ea:9d:37:dd:97:
d4:0c:63:90:ed:8b:89:a7:89:08:60:96:82:1b:77:
b9:64:d6:0f:24:3d:c2:17:1c:15:d0:87:e4:98:9c:
90:f9:db:b2:31:e9:9d:35:f3:6e:ec:32:9b:bc:a0:
9e:5e:f0:e9:b8:32:e9:bd:cf:00:ec:4f:15:67:59:
49:21:a3:e8:58:80:18:a4:40:77:7f:1c:b4:dc:29:
59:53:14:db:57:15:bf:73:4b:36:e5:3a:dd:07:ed:
fd:36:19:f4:e2:19:b2:f6:a2:5c:7a:8c:d5:06:4f:
2c:94:3f:7a:f6:81:09:c6:f3:3f:3d:5f:3f:e2:11:
0e:2d:3d:23:92:5e:37:91:fe:f2:43:c8:29:14:26:
b2:60:ef:f2:d1:27:99:20:66:7c:48:2e:30:34:4c:
85:46:b8:0b:be:b1:bc:8c:7a:87:9c:21:b6:77:fd:
c2:8c:33:aa:93:b3:4b:6c:9a:0c:e2:a2:f1:e4:2a:
ab:e1:7d:87:63:c2:35:78:1e:e6:62:14:ac:c6:3b:
65:72:65:ed:d7:5e:d4:f2:d7:cc:3a:04:52:58:e3:
94:4b:24:cc:3a:e9:5a:f4:67:01:29:62:9d:ea:3a:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:20:8F:52:09:0D:98:F0:A8:9A:C4:84:63:22:F0:BE:FB:4A:32
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:6c:42:fa:1a:2f:2a:b0:df:b8:b3:d7:0e:c9:26:92:67:
0a:11:44:24:df:e8:3b:6d:70:4d:31:7a:7c:92:eb:74:8b:c5:
bc:97:3d:8f:9b:25:0b:66:0d:50:70:4d:fc:4c:83:3c:f4:c1:
3a:4c:46:42:c4:7c:27:9d:75:0c:3a:b4:56:ac:db:1a:66:0e:
3e:6c:23:85:09:7c:53:07:90:c2:ac:d6:41:69:88:bb:af:82:
4c:44:1e:40:99:d9:6b:a6:0f:6d:cc:c0:3f:7a:4a:5e:0c:5e:
99:79:1c:10:41:fd:58:fe:f2:29:ee:cf:34:71:3b:c2:56:a1:
6f:f8:79:60:89:9c:72:18:89:cb:68:e5:d6:8e:75:30:d0:cf:
03:20:78:4f:2d:c5:b1:14:01:70:9b:bb:bd:81:35:c8:7a:45:
e6:3e:b5:bc:b3:6e:98:e1:09:cb:24:b2:71:3b:de:eb:31:ee:
a0:99:a1:4e:91:66:a1:88:68:4e:f1:95:d8:54:7b:2c:4d:7e:
ac:a8:9e:b2:c5:18:24:d4:85:a5:de:35:e0:09:8d:c0:a7:eb:
16:2f:de:a5:87:17:61:bd:c9:af:d1:2d:30:e6:f3:1b:10:48:
3b:f9:c4:59:c4:9c:9a:c9:e7:5b:35:25:e3:e0:50:b1:8a:b7:
57:58:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:40 2025 by rpki-client