Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: miHu0p+14bZcNfywN2AiFeOLEZD860uytDhnspERa6Y=
Subject key identifier: 98:74:40:8E:27:4E:42:1E:8A:67:F2:04:17:66:5B:8C:CE:15:7A:6C
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 01960F7B9E594AB8BA7DCD1C27795F71552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 121B
Signing time: Mon 07 Apr 2025 09:01:21 +0000
Manifest this update: Mon 07 Apr 2025 09:01:21 +0000
Manifest next update: Tue 08 Apr 2025 09:01:21 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: Sy+ycL93ti51HT9SQSyNdostb0D4WBOxfaWZ7e6zGdo=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:9e:59:4a:b8:ba:7d:cd:1c:27:79:5f:71:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Apr 7 09:01:21 2025 GMT
Not After : Apr 8 09:01:21 2025 GMT
Subject: CN=9874408e274e421e8a67f20417665b8cce157a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:44:63:05:46:b5:0a:7e:0b:31:ed:73:c3:
fb:3b:cb:86:d2:b1:b6:5e:e9:f6:e8:7f:51:88:9e:
df:f5:05:a7:ff:02:c6:54:41:1f:9a:fa:5e:a6:55:
b8:ad:c9:94:bf:86:d7:45:4d:fa:44:6b:53:10:ad:
fb:f2:30:42:1d:ad:7b:97:c1:8e:28:ab:3f:eb:21:
89:34:bf:cb:66:f2:16:11:ca:8b:d8:df:29:2e:b0:
4b:45:03:fd:41:bf:24:b8:4a:f1:3f:ee:2d:8d:fe:
55:1c:48:c2:e0:93:3f:60:03:fc:80:17:ae:86:fc:
60:5b:6f:0b:84:f9:87:4c:7e:b1:df:6b:78:f2:a3:
40:7a:2a:0b:b1:9c:c1:ba:5e:6b:34:1c:73:96:d5:
1a:59:16:13:82:e1:dc:b1:39:e3:f9:2c:e1:a6:8b:
81:75:6c:59:8c:0d:c8:de:20:61:ea:49:31:da:b3:
0c:49:f0:53:c0:e4:57:e4:91:4e:7f:e1:91:77:d5:
61:06:b2:6e:ba:79:96:9b:8a:59:9f:86:cf:ee:ba:
ad:99:19:ef:6b:c5:f1:e5:bf:9a:98:22:d8:f3:77:
af:4b:be:de:de:77:98:37:5f:c9:3e:71:10:a1:86:
d8:2c:4d:55:11:fe:50:eb:6e:44:5e:07:64:94:d7:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:74:40:8E:27:4E:42:1E:8A:67:F2:04:17:66:5B:8C:CE:15:7A:6C
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:84:8f:3b:d9:cb:c8:e8:81:03:e4:29:40:98:1e:97:8d:30:
34:b3:7b:4e:fb:89:ba:1a:16:dc:b1:95:f8:58:7b:14:40:98:
1d:6b:4a:0f:00:fa:2b:f5:8b:be:51:81:4a:6a:d7:5a:d9:f4:
ac:76:e4:4a:19:43:fe:bb:ee:2d:77:9b:8c:a8:44:f4:05:e5:
5b:a5:5e:a8:99:68:6d:3f:6f:b3:5f:ef:0d:04:9c:7a:93:bd:
f0:80:b8:55:77:88:e9:7e:f0:4d:74:d3:7b:95:db:a3:92:fd:
46:c9:43:92:5a:92:6a:65:4e:fc:fc:08:47:8a:17:c8:72:6c:
66:ba:c9:7c:11:0e:13:8e:66:68:c5:40:3d:58:5e:d8:ca:2f:
6a:22:c4:8d:f6:08:9b:74:84:6e:0c:23:04:97:e0:a7:99:14:
d3:89:e8:e8:85:2a:6d:72:fb:1b:e8:8f:07:b6:99:d1:b8:4b:
77:66:81:1e:d3:6e:88:9c:cb:17:5b:a2:b7:99:d0:9e:ea:48:
6d:ba:db:a0:68:45:8b:68:50:1b:eb:95:1e:7a:f9:90:70:ce:
6c:43:97:a5:67:0c:38:3b:e5:be:84:5f:30:b5:c0:a0:44:d9:
6a:05:0d:94:dc:a9:90:05:17:f0:17:d7:f8:49:55:45:9d:6f:
e4:10:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:41 2025 by rpki-client