Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: AHU5C74mhtQMWNp69uTZLnRcm2hvWN7jYTJnC3zSnLo=
Subject key identifier: 24:FD:57:92:FE:74:95:1A:22:AD:95:33:76:BA:48:D1:09:72:3D:92
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 01974E20653612C91EF8803D9AAFBBA3D2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 12C0
Signing time: Sun 08 Jun 2025 06:00:35 +0000
Manifest this update: Sun 08 Jun 2025 06:00:35 +0000
Manifest next update: Mon 09 Jun 2025 06:00:35 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: AuLRGurSqB9qY4bgncvKRSgkiiLfPSBlv1QP2n9oF60=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:65:36:12:c9:1e:f8:80:3d:9a:af:bb:a3:d2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Jun 8 06:00:35 2025 GMT
Not After : Jun 9 06:00:35 2025 GMT
Subject: CN=24fd5792fe74951a22ad953376ba48d109723d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:ea:21:e7:49:94:b6:b0:b8:4f:74:dc:5c:
6a:d2:92:6c:f1:68:b5:da:ce:ae:8b:89:91:fe:4a:
26:6e:da:1c:c1:78:54:b4:49:db:36:2c:7d:5c:f5:
27:ef:83:ae:e0:70:b8:9c:cb:86:75:89:0d:9c:ed:
9c:7f:58:01:23:e5:8c:f3:a1:9e:c6:b2:0e:dd:e7:
99:e0:52:1d:66:e4:6e:ba:6c:fc:25:c1:e0:77:45:
7f:01:94:12:04:55:4b:de:c1:54:77:26:de:23:52:
81:a0:56:c9:4d:56:24:83:7c:ea:5e:03:e1:71:00:
bd:59:eb:76:09:41:cf:71:68:21:98:cc:3c:74:48:
6d:e6:de:ba:6c:ed:84:13:f5:7b:ba:bf:34:33:40:
ab:74:34:a1:33:24:f0:63:73:4f:d4:19:c0:2c:7f:
dd:99:57:04:75:86:60:53:ac:62:37:81:48:b1:3d:
05:15:95:19:28:52:6c:b1:6d:fa:72:55:58:02:cc:
30:ca:e3:29:52:90:14:ff:66:d2:85:59:60:a4:36:
ff:65:9d:b5:6d:3c:70:1a:7e:94:42:8a:52:85:45:
1d:27:c8:5f:7c:6c:07:b4:27:ae:b0:88:47:14:55:
71:fb:2f:96:91:93:ff:57:3a:b1:71:f6:70:2e:ee:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:57:92:FE:74:95:1A:22:AD:95:33:76:BA:48:D1:09:72:3D:92
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:55:75:74:71:28:f4:94:aa:b2:9c:c2:ce:02:df:90:60:b1:
a7:a9:30:3a:33:1c:78:f5:3f:7d:6a:06:df:64:c1:70:36:5e:
37:e8:dd:a7:9f:e7:5d:ee:e9:25:d3:67:28:9c:a4:6b:94:99:
6d:5e:e5:5c:b4:01:3e:c5:28:3f:0b:73:d5:9f:07:a6:e5:5c:
fa:9c:68:8b:02:91:c1:82:47:a0:e5:f4:c8:82:53:6c:61:06:
b6:44:66:15:21:55:b4:12:1f:51:16:24:fd:02:4b:f7:b4:40:
fc:e3:59:c4:ca:85:16:25:5c:86:36:cf:69:26:f5:54:0b:0f:
f1:c3:8c:a2:c7:ae:be:1d:f7:4d:bb:81:1d:2f:58:7f:bd:69:
eb:8a:07:9b:9b:92:9b:58:40:ec:df:66:ce:04:2c:49:59:01:
93:85:93:09:ff:d3:e7:4d:bd:9d:d9:0b:4e:15:ae:11:91:0a:
e9:4c:05:2a:0c:d0:47:e0:ba:cf:e7:08:7c:5e:93:36:6d:4d:
95:5f:73:c3:b3:91:18:46:ad:76:48:84:08:d7:11:d0:13:2b:
bc:41:41:d9:3b:f0:c8:de:50:c5:35:91:8d:f9:1c:9c:8a:27:
cc:46:05:ad:78:f2:4f:d1:f8:f7:69:55:bf:fe:91:a5:11:87:
79:32:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:01:03 2025 by rpki-client