Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: UZzD0Fvqc2T7SGD6+QNVvCxcpf0jbEJ2gDeVP3PbF1k=
Subject key identifier: 35:8C:C4:3F:DA:F4:03:49:78:EE:90:F2:41:EE:57:62:57:89:D6:B6
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0195127E5B99263D373AFB1926CF1E21957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1076
Signing time: Mon 17 Feb 2025 06:00:25 +0000
Manifest this update: Mon 17 Feb 2025 06:00:25 +0000
Manifest next update: Tue 18 Feb 2025 06:00:25 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: lEYks8ShCbOEUBk8KsQUB8HdVg/HoM0O1zfBf6tBxpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:5b:99:26:3d:37:3a:fb:19:26:cf:1e:21:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Feb 17 06:00:25 2025 GMT
Not After : Feb 18 06:00:25 2025 GMT
Subject: CN=358cc43fdaf4034978ee90f241ee57625789d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:62:fe:8a:66:20:2b:9e:70:9b:a1:bd:48:
47:52:a2:cf:e7:1f:be:ee:7e:0b:9f:84:3c:54:88:
e0:2f:cc:3e:21:b7:fc:4c:ed:b8:95:12:ab:38:da:
2d:36:91:21:57:af:3a:d2:d1:11:c8:6b:28:c0:01:
fc:6a:4c:08:77:a9:ce:3d:58:0f:5b:71:11:be:4d:
f5:48:18:cf:13:dc:16:99:9f:a3:fd:de:c2:8d:85:
7c:13:fe:8b:06:62:ec:83:7d:ea:c9:f3:f9:5d:00:
6d:e7:0a:7a:d0:0e:7b:e7:10:e5:0b:de:5c:a2:3e:
bb:eb:e5:53:ca:b0:d8:b8:dc:50:d0:b9:d0:11:60:
7c:2b:7d:e8:7b:2c:08:c0:98:7d:a3:02:0f:76:80:
a5:4b:d3:1e:ea:1e:52:92:3d:4b:d9:50:bb:df:49:
33:d1:e2:4c:c9:93:8e:c4:e7:a4:0c:04:c4:6d:1b:
78:50:01:e1:e8:ef:11:cd:cf:e1:e0:2c:a7:45:b0:
9f:ae:a5:16:dc:e5:cd:07:d9:db:33:bb:24:6f:9b:
dc:6f:62:e3:05:2e:3d:46:e1:2f:13:a5:a3:73:2b:
4d:b4:b9:79:72:f5:32:cc:ce:4b:e9:c4:fd:05:cb:
ee:8f:96:1c:65:c1:3e:c8:da:3d:b0:73:09:42:5b:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:C4:3F:DA:F4:03:49:78:EE:90:F2:41:EE:57:62:57:89:D6:B6
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dc:37:fa:1b:5e:ec:7b:7b:a8:9d:77:ae:85:b3:97:51:1d:
62:ea:cc:59:8c:01:18:8d:2c:5a:04:0c:5a:ac:72:ef:00:e7:
3c:dd:fc:24:cd:3e:90:b6:50:3b:10:7e:62:57:c7:3f:d3:50:
5b:81:eb:dc:4c:16:3d:1a:d1:07:21:62:6a:d3:8f:96:c4:46:
c8:65:fc:bb:43:7f:06:97:ab:18:ee:14:38:63:98:a8:21:a6:
62:99:05:5e:c4:19:57:b7:80:7b:49:a6:c9:76:1a:21:28:bf:
63:fd:78:80:cc:76:dd:66:66:eb:a1:a6:d7:de:6a:fb:1a:0c:
7b:a9:63:68:bf:1d:c5:65:04:47:a0:74:16:cd:70:c2:d6:27:
bc:e1:2b:58:99:65:5b:44:a2:d9:3f:f1:08:64:f6:ca:e1:ca:
84:a6:e4:57:51:04:08:ae:8b:91:ff:b2:87:93:6a:28:43:6c:
09:54:7f:90:97:92:7d:f5:ea:0f:7a:31:e8:7e:2c:6e:ab:75:
80:ee:10:12:2d:8b:c5:6b:52:01:d8:63:ef:69:4e:4d:8e:ae:
84:7e:14:92:37:8c:65:1a:44:17:ee:92:c5:cc:a6:57:be:4d:
e5:42:0c:cd:af:6c:25:84:33:4f:e7:65:8d:2c:ba:6d:ad:f1:
fb:20:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:21 2025 by rpki-client