Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: utn7p7cddatoDO4pZcpT4GkjtwXDDiDNmb40BqyG6kc=
Subject key identifier: 43:47:D9:61:21:72:40:51:40:A7:1E:B2:9B:6F:54:11:47:49:99:06
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 01958C293B93396562A123CB7E5FD2CDC087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 11D7
Signing time: Wed 12 Mar 2025 21:01:07 +0000
Manifest this update: Wed 12 Mar 2025 21:01:07 +0000
Manifest next update: Thu 13 Mar 2025 21:01:07 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: 1cP3Tm1n6UXi6CQxNbZsHjmqMOqkgBTe3zDQYQBxKmA=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:3b:93:39:65:62:a1:23:cb:7e:5f:d2:cd:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Mar 12 21:01:07 2025 GMT
Not After : Mar 13 21:01:07 2025 GMT
Subject: CN=4347d9612172405140a71eb29b6f541147499906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:30:04:e8:fb:bc:86:04:ca:33:f7:ee:e8:7d:
1e:03:09:5e:da:e6:9e:91:08:74:d8:f8:12:01:04:
b7:36:ab:57:e3:07:a0:ac:5e:2e:ec:9c:32:b8:c9:
0b:d7:a1:64:6f:e6:d7:54:3e:ea:d7:31:b2:e3:2c:
d0:e1:61:91:5a:1d:4e:66:30:8d:d1:0c:0e:75:54:
5a:73:ad:d9:85:b7:d8:aa:b4:4e:c2:e9:52:07:2f:
2c:a5:6d:35:54:f5:9b:0b:7b:06:96:1a:85:f4:7d:
4e:66:8c:e2:fa:cc:b0:18:b5:20:3f:79:4a:91:74:
ad:bd:e0:a4:8c:6e:fa:07:b3:1e:a0:0a:0d:d7:37:
89:b8:4a:d1:fa:2b:9b:6e:32:15:3b:d2:6d:de:5e:
79:07:63:9c:49:80:65:c5:36:38:7a:6b:31:1d:46:
4e:a0:ab:bd:a2:64:0f:2a:6c:40:b4:96:f0:5b:8c:
75:40:44:8f:1d:63:82:0b:40:5d:cf:75:dc:87:5a:
b7:8d:af:ea:f1:10:5e:ac:c3:13:0b:09:65:5d:71:
e2:d7:c1:ed:60:93:f8:b7:b6:58:6c:45:0a:e6:08:
b1:42:a9:18:ef:75:3b:9c:c5:a3:6d:48:5d:70:fd:
e4:c5:89:33:3c:fc:18:d9:40:d3:4a:9b:a9:59:07:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:D9:61:21:72:40:51:40:A7:1E:B2:9B:6F:54:11:47:49:99:06
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:42:67:12:d8:d5:97:59:2c:c9:94:81:4d:fd:c6:68:f1:0c:
bb:cc:76:5d:34:3f:66:29:6b:17:4c:b4:f5:17:0d:fc:67:4c:
a7:5a:7d:9c:99:56:18:a4:36:b3:41:3d:d6:6a:2b:ad:51:59:
f5:a1:08:19:6f:6f:73:e0:b6:d7:9e:4e:24:86:8c:21:54:b6:
b6:d9:57:d1:f7:d4:24:5c:09:2f:ad:11:0b:4d:c3:d8:5a:3f:
f1:45:e5:31:7a:4c:6a:60:21:fb:16:7c:6b:1e:04:82:b1:77:
ad:b6:23:b0:19:79:03:cc:1d:9a:69:15:e4:35:e5:0c:c4:8e:
51:8e:6a:c5:a6:b6:ab:46:48:c4:23:4d:e0:c4:5b:d6:39:c9:
ca:09:1d:48:87:26:c5:ac:00:b0:d9:ee:03:4c:d7:80:d1:3d:
72:03:b4:f1:aa:db:2c:26:ea:ec:e7:94:d4:9c:12:d4:1b:7f:
fc:bc:50:9b:78:c2:7e:ed:f7:3e:c8:6d:ca:94:49:b1:4c:1a:
78:9a:30:a0:55:63:c0:be:f2:5c:d2:8b:e7:60:34:62:2f:31:
c0:a9:36:64:1b:bd:51:88:b5:28:6e:53:55:99:df:96:73:20:
09:14:d0:7f:60:cd:55:f9:21:f1:66:ff:77:93:8c:0f:80:c9:
4b:a3:db:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:20 2025 by rpki-client