Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: fKrng+yG6QEC+JViX/cEh2nZZ3Fs6q5DQrjynt+zX1g=
Subject key identifier: 0D:6E:0E:EF:4E:68:97:3C:33:70:78:1D:1F:A0:EB:69:F2:B9:48:60
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 019613902EADE80B550C9DD25252D0858374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 04:02:18 +0000
Manifest this update: Tue 08 Apr 2025 04:02:18 +0000
Manifest next update: Wed 09 Apr 2025 04:02:18 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: /pCc9V8dTOy7CkiYO+CEwHuYh4fChLjj5Pv9VUJYBpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:90:2e:ad:e8:0b:55:0c:9d:d2:52:52:d0:85:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Apr 8 04:02:18 2025 GMT
Not After : Apr 9 04:02:18 2025 GMT
Subject: CN=0d6e0eef4e68973c3370781d1fa0eb69f2b94860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:17:28:3f:40:33:e7:41:0c:d2:61:c4:30:
41:55:85:95:70:91:2f:ad:ba:7a:44:72:d8:68:41:
90:30:ac:22:41:65:31:eb:bd:89:4d:b6:0d:41:13:
ab:ec:4c:b5:5d:b5:32:65:0f:cf:e0:d6:ca:11:b7:
06:c0:27:33:b9:d0:6f:6f:e9:02:fe:3a:9c:99:9b:
d9:51:d5:5c:1f:fa:07:0d:29:4b:8a:20:4d:87:cf:
98:28:ab:2f:a3:8e:d8:ca:fb:48:12:16:86:fd:08:
68:7f:76:fa:59:68:c6:c0:82:d8:87:3b:3a:ee:e2:
22:d1:e0:19:66:81:af:26:27:a9:d0:ba:f2:89:86:
b0:a0:8c:0c:19:d9:74:84:95:71:ee:5a:5a:aa:6e:
2e:93:b2:04:51:0d:8a:c6:87:2e:fc:0a:55:2a:24:
7b:ba:d6:ac:23:e2:85:49:4e:2e:1f:ab:16:c2:0c:
68:c6:e6:43:8c:79:23:6c:19:03:a2:9f:cd:28:97:
5f:59:58:ce:28:50:33:8a:6f:93:6d:20:3e:15:38:
19:5f:e2:bb:26:aa:2d:5d:9c:e5:59:c5:1b:e7:66:
9a:09:72:5d:49:e9:20:40:b7:1c:5e:90:08:bb:c9:
e0:47:b1:0e:44:f9:38:7d:e8:e9:d5:99:b8:3b:65:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:0E:EF:4E:68:97:3C:33:70:78:1D:1F:A0:EB:69:F2:B9:48:60
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:99:ab:51:a7:b1:02:ae:d6:64:c3:db:35:0d:50:83:f4:
c1:e7:cb:cb:31:93:d9:b4:19:0e:4f:0b:a5:9c:e4:be:63:d2:
a3:a0:63:87:7c:00:dd:40:fa:fb:ff:d9:3e:32:d0:cb:f7:be:
f0:14:d0:e5:1e:ed:e4:47:76:f9:4c:71:27:f5:8b:91:e4:8b:
65:24:89:3e:1b:88:f7:a5:27:1a:47:fd:39:58:40:79:9d:4e:
b3:69:32:17:6e:a5:45:76:d3:b0:49:f8:0e:2d:25:b2:9a:f5:
45:e2:f5:ca:a1:70:aa:22:d0:2d:9a:0b:af:1d:bb:9d:2d:03:
5e:d6:c1:88:3c:14:28:61:d1:23:21:93:b2:2d:1a:4f:7c:ff:
83:04:be:df:e7:b5:29:1f:c8:e0:04:c5:83:b1:65:38:cf:b4:
7a:ed:9e:89:3f:ff:78:97:f7:33:b9:74:7b:54:12:bd:5f:7e:
e2:1f:d0:fe:ea:8f:a4:cf:87:71:55:6e:5f:e7:32:50:38:9f:
a8:59:19:4f:94:45:8e:a0:1f:2f:f8:98:58:29:f1:cc:d2:9a:
ea:28:24:4d:1d:fc:c5:37:4a:91:90:41:27:01:cf:3f:e8:ae:
38:7e:50:10:29:a3:cd:2b:84:87:6b:12:c6:61:9e:22:5b:0e:
74:36:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:34 2025 by rpki-client