Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: hNUvSbPT1oXw+Br4zC4yFyxYhafTfTXXu5Cfu9eDzSw=
Subject key identifier: C2:A8:9A:15:3E:94:15:0D:33:78:DA:DB:10:4A:2E:18:13:6B:40:12
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 0194BB604A3C8730A946325EA4BCA483063B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0318
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: d8OvV6ERqUz2IQKp79fwaaC12VBPFPqkO4txEbF1WVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4a:3c:87:30:a9:46:32:5e:a4:bc:a4:83:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=c2a89a153e94150d3378dadb104a2e18136b4012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:f3:0a:c3:2c:d1:d5:83:dc:4a:38:2a:47:
79:35:8b:36:8c:5c:5f:5e:5d:a8:9f:bc:a0:da:6f:
ec:82:4d:92:8c:ae:74:15:a8:74:b8:50:32:e9:37:
40:1a:74:a6:e2:4f:ac:b9:22:59:ac:d8:21:1b:f1:
f5:4a:c7:58:db:57:11:c2:00:3e:e8:9f:53:8c:ac:
83:cd:25:20:84:70:61:36:1f:5d:a5:94:93:1d:9e:
44:00:29:fa:c8:6b:fc:a0:5d:3a:8f:e6:ee:02:65:
88:b2:af:b1:c4:81:cf:aa:ca:4a:9f:61:65:fd:c7:
50:07:ed:4d:8f:f2:df:bc:be:cb:8f:fa:4c:76:5e:
ae:01:0e:17:62:c5:32:56:fa:10:f4:6a:fe:52:5e:
e9:f7:03:b4:cb:05:dd:68:75:6e:9f:4e:95:17:21:
21:64:e0:64:ec:7b:e2:e8:ac:e6:f3:ca:81:20:c5:
2f:ca:e5:a8:d3:d1:48:f1:94:d6:46:11:c7:7d:69:
86:33:c2:fc:00:ec:e8:a9:a4:b6:5b:c0:67:ea:e9:
0f:27:3b:d7:63:e3:de:ec:24:3d:96:c9:21:b4:83:
3b:3e:23:fc:c4:90:0a:f3:1e:be:06:0c:01:a6:db:
0c:0d:2a:af:16:b5:52:76:71:8b:37:1d:68:13:9b:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:9A:15:3E:94:15:0D:33:78:DA:DB:10:4A:2E:18:13:6B:40:12
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9e:f0:4c:87:5d:12:ec:ee:da:fb:6a:4c:e3:37:d7:81:bc:
75:cd:60:1e:ab:7e:a7:d1:e4:ff:0b:e7:ef:d0:9c:ed:15:2f:
b5:3d:b3:bd:24:96:a3:35:29:21:e0:1c:f5:9b:b1:fe:6d:4e:
1b:13:f8:82:c3:fa:3e:4b:07:fc:96:c2:6b:d4:ef:b8:bb:3b:
13:f8:09:bf:c8:b0:db:c4:0a:52:f6:32:88:4d:fd:d1:e6:7a:
60:39:9a:55:65:22:2c:46:20:4c:44:2e:be:b5:79:39:00:b1:
b1:ac:7e:bc:76:61:aa:7e:4c:c0:95:84:a1:e6:1a:3d:eb:fb:
18:95:58:32:62:81:3c:55:9d:2e:b5:3b:c3:9a:2f:4b:51:d2:
f8:fe:a3:c3:33:17:55:0e:29:08:3f:70:40:21:f2:55:8f:07:
82:bb:24:b2:63:f7:eb:49:66:f6:4a:90:c7:11:b0:ed:73:1c:
13:c6:89:4a:03:05:34:d4:f6:67:ee:b3:c7:46:15:04:a7:66:
c9:c9:dd:5a:42:92:cf:aa:a4:0c:e0:40:75:c8:7d:3f:0d:c3:
81:63:1c:0d:f4:9d:70:9d:29:33:75:dd:8f:b3:ee:3e:d7:8f:
5e:a0:71:20:1b:02:d7:93:f9:d7:1d:ee:59:3d:60:96:5a:58:
87:94:08:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YEo8hzCpRjJepLykgwY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTA0MjRjNjg4ZmY1MTlmYjllMjA0ZDhmMTU4ODU1MzQ1
NWIxNTEwHhcNMjUwMTMxMDgwMDM3WhcNMjUwMjAxMDgwMDM3WjAzMTEwLwYDVQQD
EyhjMmE4OWExNTNlOTQxNTBkMzM3OGRhZGIxMDRhMmUxODEzNmI0MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6fzCsMs0dWD3Eo4Kkd5NYs2jFxf
Xl2on7yg2m/sgk2SjK50Fah0uFAy6TdAGnSm4k+suSJZrNghG/H1SsdY21cRwgA+
6J9TjKyDzSUghHBhNh9dpZSTHZ5EACn6yGv8oF06j+buAmWIsq+xxIHPqspKn2Fl
/cdQB+1Nj/LfvL7Lj/pMdl6uAQ4XYsUyVvoQ9Gr+Ul7p9wO0ywXdaHVun06VFyEh
ZOBk7Hvi6Kzm88qBIMUvyuWo09FI8ZTWRhHHfWmGM8L8AOzoqaS2W8Bn6ukPJzvX
Y+Pe7CQ9lskhtIM7PiP8xJAK8x6+BgwBptsMDSqvFrVSdnGLNx1oE5vEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKomhU+lBUNM3ja2xBKLhgTa0ASMB8GA1UdIwQY
MBaAFDSQQkxoj/UZ+54gTY8ViFU0VbFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEt
M2YwNjgyOWUwZjVjLzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEtM2YwNjgyOWUwZjVj
LzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ7wTIdd
Euzu2vtqTOM314G8dc1gHqt+p9Hk/wvn79Cc7RUvtT2zvSSWozUpIeAc9Zux/m1O
GxP4gsP6PksH/JbCa9TvuLs7E/gJv8iw28QKUvYyiE390eZ6YDmaVWUiLEYgTEQu
vrV5OQCxsax+vHZhqn5MwJWEoeYaPev7GJVYMmKBPFWdLrU7w5ovS1HS+P6jwzMX
VQ4pCD9wQCHyVY8HgrsksmP360lm9kqQxxGw7XMcE8aJSgMFNNT2Z+6zx0YVBKdm
ycndWkKSz6qkDOBAdch9Pw3DgWMcDfSdcJ0pM3Xdj7PuPtePXqBxIBsC15P51x3u
WT1gllpYh5QIFQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:24 2025 by rpki-client on console-fra.rpki-client.org