Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: TVQXp06u8hLrjYjYyYFPaaR10heNH/bzp+c6S/0VjTk=
Subject key identifier: 60:85:4F:90:39:79:FD:E4:41:BE:87:81:9E:B1:62:46:5D:5E:91:04
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01974AB1D35C591BF1CB476DF2FD55281CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1511
Signing time: Sat 07 Jun 2025 14:00:57 +0000
Manifest this update: Sat 07 Jun 2025 14:00:57 +0000
Manifest next update: Sun 08 Jun 2025 14:00:57 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: rLTh1FQh6LhAtjaPEhLbkJPejZDqlb+zjITyz/e+FK0=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:d3:5c:59:1b:f1:cb:47:6d:f2:fd:55:28:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jun 7 14:00:57 2025 GMT
Not After : Jun 8 14:00:57 2025 GMT
Subject: CN=60854f903979fde441be87819eb162465d5e9104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:2a:78:24:89:46:30:d3:c0:b9:67:91:1d:
b7:05:8d:d8:c8:92:43:69:eb:f2:55:d2:8b:fb:df:
c0:ea:8f:0d:cc:09:f1:fc:90:a1:ea:43:0f:a7:ec:
41:e9:27:ab:df:6f:40:81:e7:f3:54:83:a5:93:e8:
75:67:3d:67:1c:dc:3e:d9:fe:10:c5:8b:34:89:e7:
8d:c3:93:df:fe:6d:d3:1e:01:b8:d9:40:02:73:92:
9d:ca:d0:ff:36:0f:0a:ec:da:8b:74:00:ea:0c:7a:
c6:ca:70:46:c6:2f:0a:7c:f4:51:d6:b7:0c:77:01:
55:eb:42:a1:c1:0b:96:4f:1c:2b:15:3b:22:05:ec:
ef:0a:7b:19:f6:91:49:a3:9f:84:fc:c4:58:c1:e2:
b6:8a:a4:c4:11:78:e5:9b:ec:5d:fb:b8:77:b7:55:
aa:3f:ad:8a:dc:52:27:f3:ac:e9:c9:7d:37:80:97:
0c:ea:ee:a6:bf:8d:ae:ce:e9:f1:f1:2c:6a:01:8c:
a9:be:57:c6:11:e7:5d:76:53:6c:c7:0b:da:85:f6:
ad:78:68:0d:dc:57:78:7a:84:19:dd:0f:61:57:cd:
8c:50:3f:36:48:8e:3b:0c:f4:1f:84:cc:af:43:a2:
c4:ff:1d:dd:3d:0a:82:47:5c:d1:3a:54:48:1d:69:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:4F:90:39:79:FD:E4:41:BE:87:81:9E:B1:62:46:5D:5E:91:04
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:f6:0b:ec:fb:87:06:0d:10:09:d0:73:2a:14:93:d7:1f:
66:d2:b2:ce:6c:22:ca:b4:39:5f:d2:16:f8:0a:33:c2:da:9e:
9e:f6:19:e4:78:78:a7:70:17:4d:74:a6:0b:a6:f7:54:4f:f2:
cf:e2:a9:ba:8e:43:42:1e:5b:06:fb:91:5f:48:d6:fe:88:5b:
de:6d:df:a7:8d:b6:01:38:24:29:dc:e9:14:d5:03:85:b9:e3:
f5:6b:dc:3b:0e:47:99:a2:e8:4b:fa:30:49:5a:82:ea:0f:ba:
7b:59:ce:9e:fe:fd:08:8b:d8:9f:c1:d9:30:5b:00:89:51:e9:
2d:dc:f5:ed:e5:56:15:11:c5:a5:ba:2b:18:65:e4:68:cd:0a:
e3:51:de:3a:05:47:1e:cb:81:f3:f7:40:48:2a:51:e2:4f:9e:
af:c1:11:9e:81:13:4e:88:4f:d6:97:38:51:60:df:73:36:ed:
fa:a8:7a:8f:c1:7d:49:a2:02:92:27:98:f7:95:3e:76:43:33:
fe:f1:56:38:62:08:13:15:6e:dc:c2:3e:13:35:af:d8:96:b8:
b3:43:af:1d:a5:d7:dc:f2:4a:97:f0:36:1a:1b:4d:80:6a:bb:
17:73:00:eb:49:55:a9:9b:f4:b1:11:31:50:31:16:d7:5b:48:
74:4f:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:03 2025 by rpki-client