Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: duvsj0lPGMYMJI3x0SbjXgZKe5gfl67286in+EvwPbg=
Subject key identifier: D1:DD:13:83:05:A8:89:4C:0E:44:03:25:CD:7E:77:BC:AD:52:DF:C1
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0196403091818CACD69F6B2D0E738F97C4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1487
Signing time: Wed 16 Apr 2025 20:00:46 +0000
Manifest this update: Wed 16 Apr 2025 20:00:46 +0000
Manifest next update: Thu 17 Apr 2025 20:00:46 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: zZb1Z1qq375w5+oJwEoZPguRaYHK/Z6RdaQj7d6eV7g=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:91:81:8c:ac:d6:9f:6b:2d:0e:73:8f:97:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Apr 16 20:00:46 2025 GMT
Not After : Apr 17 20:00:46 2025 GMT
Subject: CN=d1dd138305a8894c0e440325cd7e77bcad52dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:e8:90:23:66:ef:7b:d6:b4:46:36:d0:8e:
4b:a3:3b:bd:72:8f:10:24:0b:24:ff:2b:e5:cc:8b:
41:08:9b:53:69:24:db:c3:0e:f4:9d:54:ab:39:61:
2d:13:9c:46:7b:98:8c:5c:1e:d7:c2:59:14:29:6c:
d9:8a:80:27:e8:bf:41:84:12:d8:fc:85:a6:39:ce:
9b:0e:c5:c9:95:7d:50:75:d3:a2:6e:82:2b:b1:14:
64:b0:ae:6c:ce:10:63:12:c3:bf:68:64:22:08:25:
0b:ad:5f:c1:40:ed:11:b1:e0:e3:cd:b1:fc:3d:f7:
7e:c6:20:66:9b:c1:8b:fc:e0:4f:42:75:ae:2e:0a:
14:8d:16:a4:52:1b:c4:e4:14:fc:14:90:aa:f2:7f:
56:0b:ce:92:91:b8:00:4a:52:24:3c:94:cd:c2:6d:
d6:db:b2:70:6d:e5:d8:7c:de:a6:70:64:7f:1f:52:
7d:0f:8f:e0:68:46:00:4b:95:d5:bf:88:3a:5d:75:
ac:50:03:5c:da:7b:53:6a:86:c7:64:3e:a6:f3:9a:
af:b6:b2:3d:62:f5:ed:07:7c:98:93:1d:b2:12:85:
4b:0b:67:a8:09:06:64:8e:d9:c4:a9:fb:ab:01:84:
1e:13:f9:c0:dc:1b:f5:2c:8e:92:08:eb:51:a8:57:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:13:83:05:A8:89:4C:0E:44:03:25:CD:7E:77:BC:AD:52:DF:C1
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:79:be:87:2e:da:bd:d6:e6:ed:e1:95:a2:74:68:a8:bc:c8:
77:56:a1:b6:55:45:a3:62:6e:ee:bf:14:91:bf:55:b5:9c:4a:
ab:e2:c7:b1:9d:bd:74:de:ff:c4:a8:86:f9:99:c4:04:d8:a8:
13:b8:e2:8d:5e:bb:c2:9e:af:7f:d0:6c:81:dc:f6:3b:af:e0:
db:8e:37:8c:97:97:f7:dd:b1:0c:5c:ec:bb:60:d5:e4:78:02:
33:1c:4f:20:d9:50:3e:ef:ac:f5:d4:f1:f6:07:e2:96:d8:ca:
19:be:24:6f:db:c9:40:b0:3a:c7:e4:ec:a7:33:2c:78:59:db:
75:22:1d:78:f7:92:68:43:75:18:83:08:c7:86:66:ab:23:b3:
92:f5:6a:48:72:d0:c3:9a:90:d1:01:fd:e2:24:ba:20:2f:ac:
fc:67:65:b1:b3:f8:b4:02:91:45:ea:32:ce:46:eb:17:71:e5:
d8:82:d8:7b:61:99:92:2c:93:c3:2d:a8:ee:11:71:76:d3:59:
dd:9a:e5:47:e4:6f:48:65:4e:a2:a7:3b:a8:b9:ac:cb:d7:58:
f1:eb:2f:fa:27:f7:05:7b:d3:27:7c:4b:bf:a6:bf:72:3a:8a:
82:00:91:37:9f:76:27:21:ce:1c:98:02:a5:13:f9:d5:1e:bb:
a5:db:c1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMJGBjKzWn2stDnOPl8TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjUwNDE2MjAwMDQ2WhcNMjUwNDE3MjAwMDQ2WjAzMTEwLwYDVQQD
EyhkMWRkMTM4MzA1YTg4OTRjMGU0NDAzMjVjZDdlNzdiY2FkNTJkZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLokCNm73vWtEY20I5Lozu9co8Q
JAsk/yvlzItBCJtTaSTbww70nVSrOWEtE5xGe5iMXB7XwlkUKWzZioAn6L9BhBLY
/IWmOc6bDsXJlX1QddOiboIrsRRksK5szhBjEsO/aGQiCCULrV/BQO0RseDjzbH8
Pfd+xiBmm8GL/OBPQnWuLgoUjRakUhvE5BT8FJCq8n9WC86SkbgASlIkPJTNwm3W
27JwbeXYfN6mcGR/H1J9D4/gaEYAS5XVv4g6XXWsUANc2ntTaobHZD6m85qvtrI9
YvXtB3yYkx2yEoVLC2eoCQZkjtnEqfurAYQeE/nA3Bv1LI6SCOtRqFczOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHdE4MFqIlMDkQDJc1+d7ytUt/BMB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXm+hy7a
vdbm7eGVonRoqLzId1ahtlVFo2Ju7r8Ukb9VtZxKq+LHsZ29dN7/xKiG+ZnEBNio
E7jijV67wp6vf9Bsgdz2O6/g2443jJeX992xDFzsu2DV5HgCMxxPINlQPu+s9dTx
9gfiltjKGb4kb9vJQLA6x+TspzMseFnbdSIdePeSaEN1GIMIx4ZmqyOzkvVqSHLQ
w5qQ0QH94iS6IC+s/GdlsbP4tAKRReoyzkbrF3Hl2ILYe2GZkiyTwy2o7hFxdtNZ
3ZrlR+RvSGVOoqc7qLmsy9dY8esv+if3BXvTJ3xLv6a/cjqKggCRN592JyHOHJgC
pRP51R67pdvBLA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:10 2025 by rpki-client