Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: LuD9rPV1iX2Ujf5XmL41SC5Yn5m08TMrCL9DoHXrRL0=
Subject key identifier: C8:EB:25:CF:23:44:A4:32:6F:37:2C:0E:9A:B1:83:5A:6D:F7:6B:38
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 01964F355FCF6CEF06576D534D70FE363E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 111A
Signing time: Sat 19 Apr 2025 18:00:20 +0000
Manifest this update: Sat 19 Apr 2025 18:00:20 +0000
Manifest next update: Sun 20 Apr 2025 18:00:20 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: JMw8HKOOAFOHbZ8hV0+ZsIvmjPRkDSJ+rMpNpueTbts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:5f:cf:6c:ef:06:57:6d:53:4d:70:fe:36:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Apr 19 18:00:20 2025 GMT
Not After : Apr 20 18:00:20 2025 GMT
Subject: CN=c8eb25cf2344a4326f372c0e9ab1835a6df76b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:3d:b4:46:eb:23:40:1f:13:75:aa:ee:49:
40:91:68:a0:bf:e1:a1:f9:4c:3a:7b:7b:5e:2b:b7:
13:22:90:bc:a3:c1:ec:de:14:9a:b5:80:a4:99:c6:
af:58:c1:b4:f7:22:d5:0e:9b:d7:97:a6:ab:e4:4f:
29:d8:23:07:6a:c7:23:c2:40:c0:f3:3d:98:41:eb:
bd:cc:e6:9b:de:cd:4a:bf:81:7e:cf:01:18:81:9f:
d2:7f:c1:e6:8c:de:53:82:36:c4:a6:6f:f4:71:74:
10:91:b1:c5:ee:ae:75:b6:fc:86:fe:52:53:c5:45:
33:cb:ae:9c:fb:8f:0c:b6:a2:56:ab:20:26:2a:0b:
a6:bb:eb:fe:95:f2:3c:da:27:d0:f5:ec:47:35:d5:
44:1b:f8:ab:f8:a7:99:fe:c4:45:1f:cc:f0:8f:41:
e7:48:83:0c:1e:fc:4c:ed:9f:f4:61:fa:a1:bc:54:
73:e2:77:70:0d:c8:18:ce:8a:a9:71:10:79:d7:03:
5b:35:c2:14:13:55:56:8e:66:00:7d:de:99:fd:90:
90:4b:e5:3d:dd:30:89:e8:d5:e4:47:8b:9b:cd:20:
a6:92:3a:07:1c:33:a5:fa:01:a8:76:be:8f:51:ca:
10:3a:9e:60:06:64:af:bc:6c:0e:21:31:37:d7:b6:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:25:CF:23:44:A4:32:6F:37:2C:0E:9A:B1:83:5A:6D:F7:6B:38
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:35:bd:fe:0b:b7:d6:e7:e0:2d:03:54:09:5e:0c:bd:41:94:
75:e3:be:c4:c2:75:5e:24:a3:87:66:65:05:5a:8a:04:36:29:
9f:38:ac:dc:2b:65:a8:8b:79:f0:34:14:3e:bb:12:6a:de:69:
7a:a3:51:cd:d4:d2:7a:af:e0:e2:ff:7f:75:29:6a:f1:78:11:
fe:a0:73:a8:e5:37:77:e3:11:ba:5e:64:c2:e2:95:e3:48:c6:
ab:a6:77:53:b6:24:03:37:81:25:16:7c:5a:2f:49:1c:05:4c:
61:7f:ff:a8:4c:2c:e5:be:7f:2d:f3:3c:a6:19:0d:f0:ea:76:
6a:16:b8:a8:67:21:5f:1b:65:eb:ea:1c:5a:96:ac:68:25:5c:
29:df:0a:e4:16:08:89:67:d3:3f:44:17:ae:df:eb:a2:ed:b8:
84:65:f4:55:4a:de:f0:91:3e:f4:12:a1:73:9a:f8:0a:80:33:
42:ed:2a:25:ad:fb:8a:62:f4:92:c8:ca:f9:0a:b8:73:33:92:
82:c5:7d:fb:a6:c4:03:61:84:22:a2:cc:41:50:6e:9a:82:5b:
3a:c0:73:90:b9:b1:5f:48:ab:68:b5:6c:ec:19:2e:ad:bf:9e:
8c:b9:23:d1:ac:c9:c1:8b:97:17:94:82:53:fa:97:b7:e5:fd:
2a:64:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:44 2025 by rpki-client