Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: hOjaH+biWt6inGFVSxSkxU2BYXDfPIZuGpXlMRbF5v8=
Subject key identifier: 5F:86:E8:3E:65:8C:CD:1A:AC:31:3F:37:CE:55:23:60:CC:58:B5:88
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0196127CE9DC3772C81A15CF6E3CE14779C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0DF3
Signing time: Mon 07 Apr 2025 23:01:38 +0000
Manifest this update: Mon 07 Apr 2025 23:01:38 +0000
Manifest next update: Tue 08 Apr 2025 23:01:38 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: OAScOo73DIbDOap1V2P3QbE3U0APwn85IJRNOurM1II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:e9:dc:37:72:c8:1a:15:cf:6e:3c:e1:47:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Apr 7 23:01:38 2025 GMT
Not After : Apr 8 23:01:38 2025 GMT
Subject: CN=5f86e83e658ccd1aac313f37ce552360cc58b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:cb:1b:b6:d1:c1:ea:b7:fa:05:0b:d8:2b:
ee:dc:2c:7c:d0:f7:4b:99:ff:93:38:30:41:e8:bd:
49:83:14:19:e3:78:19:66:66:62:16:7e:e1:f4:32:
f3:d9:11:b3:4e:61:4e:1b:86:10:94:3e:9a:53:7a:
93:fb:f5:e5:de:14:93:9e:0f:72:34:0f:eb:14:fc:
e3:06:3e:d8:9d:2a:f3:24:3d:0b:6b:e1:8b:d2:b0:
5e:1d:c6:c0:73:ee:a9:a2:8a:f3:d1:75:d0:f8:28:
7d:49:53:61:17:ee:0f:80:03:dc:bd:f4:ad:99:a0:
87:f3:db:3d:08:15:a4:ea:6a:71:aa:4c:cf:b3:8c:
e2:56:86:77:45:a4:fe:57:9a:c4:61:b1:58:99:b2:
d1:1b:d0:ad:c9:57:f1:06:e4:cf:be:af:59:35:58:
a3:60:f6:b4:d4:bf:da:ec:f9:5b:af:bd:b3:ec:f6:
6a:bf:91:ad:1a:ae:ba:55:3b:cd:64:b7:5c:8f:2a:
74:56:5c:02:7b:61:44:ce:71:71:4d:7d:7d:83:53:
86:e1:fa:52:80:3e:d5:43:47:98:1d:41:85:d0:c0:
3a:0f:80:0d:d0:63:b5:b7:ee:7e:7d:c7:ec:ab:47:
62:ca:4a:18:b2:73:1f:94:b8:02:ca:b1:5a:47:ad:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:E8:3E:65:8C:CD:1A:AC:31:3F:37:CE:55:23:60:CC:58:B5:88
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7a:dc:8f:fd:f1:0d:27:2d:77:6b:c3:8c:d8:09:a0:ef:d6:
00:52:ea:dd:89:3e:45:45:6f:c2:26:0c:6a:c0:09:5c:ee:1d:
c1:d5:f9:00:84:2b:30:31:fd:7b:10:59:5f:95:73:03:c1:b8:
ac:6c:67:0f:b9:95:15:3c:8d:fd:22:2f:20:e1:7a:31:71:7d:
3c:0a:1b:4a:20:17:3c:8e:c1:ef:f6:d4:19:de:95:1a:2e:24:
52:0d:6b:36:dc:2d:bb:98:4c:a8:ce:a6:da:ef:72:c8:eb:fb:
d7:ef:f1:11:2a:1c:f4:3d:db:97:42:cb:c4:43:07:b3:1b:ff:
65:71:df:b5:c9:e8:dc:0d:27:2f:40:50:11:1d:ab:29:cc:2a:
da:e9:a6:f0:f6:99:d9:1a:05:af:c3:3d:e7:ed:45:52:48:d0:
b7:73:31:dc:1f:14:67:a1:7f:55:02:ec:f6:ec:61:54:49:6f:
b4:ac:09:03:9c:10:80:43:05:9b:d9:13:a3:66:c3:7c:ca:1d:
56:5d:04:50:1e:80:a9:59:6d:65:ed:9a:fa:e1:55:e5:0c:0b:
e4:35:c1:40:a1:99:c2:54:ca:37:f5:b3:50:ef:99:08:31:16:
95:df:1d:de:c2:28:79:95:89:a7:60:4f:76:b9:f3:2a:71:b8:
cd:9e:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:29 2025 by rpki-client