Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: i9Js6PsG9yJxPnhUD2IheSIlccMDu4QsUkhFYkwIDm8=
Subject key identifier: CE:3E:0B:BF:11:FF:91:5D:4F:AC:E7:EC:D0:06:B4:B5:15:13:19:37
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 0197470C0AD576DB3200F211447EBEFE4CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 08C6
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: aYMPNIoBubWtg9zZKQJbnXDGPEYVr9ZMUvLcb6eO+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:0a:d5:76:db:32:00:f2:11:44:7e:be:fe:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=ce3e0bbf11ff915d4face7ecd006b4b515131937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:a0:88:45:1c:37:c3:a6:e1:4e:75:00:fa:
d8:f1:d5:f0:ce:c1:5a:7e:e4:e6:66:1c:56:f8:0d:
8d:60:eb:7b:e3:3f:8d:d7:38:18:1b:9c:fd:03:10:
bd:29:79:18:e1:f8:51:fa:d3:2f:41:07:2b:d7:4e:
29:b8:f7:e2:7d:80:c4:af:f7:0c:89:ff:2d:dd:bd:
3c:10:15:63:b1:11:d0:f6:fc:18:51:0c:f2:fa:3c:
88:65:56:45:07:33:35:59:d3:53:5b:91:44:2e:fb:
89:20:97:f1:ad:6d:13:6b:3a:4f:e4:0d:61:ef:ff:
d2:2c:1f:b1:a6:d9:07:7a:ff:72:3c:5e:63:13:92:
17:8d:d1:0b:91:a7:60:a2:0a:4a:71:b2:47:35:d8:
b0:e7:8c:ac:bd:90:3b:45:3a:4c:d1:6f:ab:f6:59:
3c:30:07:47:b7:0d:07:d4:2d:12:80:74:82:3b:be:
55:32:d4:32:ce:d7:c4:f9:c5:66:8c:a6:58:75:d2:
01:b1:e2:3a:12:35:35:50:0f:b5:40:55:39:c9:f4:
15:ff:e6:fe:70:e6:8b:66:20:95:11:0d:39:be:c8:
91:46:a4:08:b4:7a:41:ac:40:97:a9:56:76:39:92:
0a:0b:a7:6a:44:1e:89:8f:a5:c2:75:50:6a:92:65:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:0B:BF:11:FF:91:5D:4F:AC:E7:EC:D0:06:B4:B5:15:13:19:37
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:88:a6:be:59:d7:0e:e3:04:a1:0b:fb:d5:81:bb:4a:a2:d0:
44:fe:ce:57:ba:42:7e:42:ba:7c:af:74:95:b7:1f:0e:4e:77:
4b:77:7e:b5:d8:69:5b:16:86:a4:3f:4f:11:6d:15:90:2d:fd:
99:87:c8:83:f4:d8:2e:84:a3:f8:17:7d:74:70:6e:bf:f3:0e:
fa:b2:cf:6a:72:66:9d:98:f4:75:fb:8c:f1:fb:3a:2a:ee:27:
b4:52:4a:7c:20:0e:a1:82:2c:5e:67:c1:a7:1b:60:2f:ad:0c:
d6:db:0e:e3:4c:0c:94:4d:41:58:86:fa:6b:01:cd:59:35:e1:
7e:90:f3:bd:d4:95:4e:59:0d:3f:75:ff:df:98:96:1a:4f:16:
9b:66:be:50:d9:a0:4a:9d:78:de:5f:ce:0b:84:9b:92:46:96:
13:5f:e0:0d:5c:62:8d:56:6b:09:d4:66:46:19:25:41:59:5d:
9c:a8:07:4c:fe:ea:ba:19:47:f3:71:2c:4a:93:db:17:d9:f0:
9c:78:c9:26:f6:2e:b0:de:0c:ff:ed:04:a7:d2:c0:67:84:90:
ce:e3:a0:40:23:5e:42:df:a5:35:9f:54:16:d4:08:49:04:c9:
8a:b2:82:26:1f:08:43:bb:45:35:54:56:1f:9f:73:2e:8e:43:
95:5f:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:17 2025 by rpki-client