Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: JMDTrU+efv7ihKhxGL/bX0REQweHkbJraYYleZv7HyY=
Subject key identifier: BB:37:87:4A:57:42:95:E5:40:F8:C5:7E:84:D7:C0:55:66:0C:BF:8C
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 0196507EFB3EF88F39DBABC2EAE23D249F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 122A
Signing time: Sun 20 Apr 2025 00:00:21 +0000
Manifest this update: Sun 20 Apr 2025 00:00:21 +0000
Manifest next update: Mon 21 Apr 2025 00:00:21 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: hAdfJNaykkzt+JL+fBGUMK3K+xBA07H8SxCp5r6U8lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:fb:3e:f8:8f:39:db:ab:c2:ea:e2:3d:24:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Apr 20 00:00:21 2025 GMT
Not After : Apr 21 00:00:21 2025 GMT
Subject: CN=bb37874a574295e540f8c57e84d7c055660cbf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:de:66:64:5a:de:83:ee:e3:bf:3f:44:90:
d8:57:d0:54:f3:39:3d:bb:b1:ec:55:3f:af:19:60:
ce:f2:cb:8c:99:26:82:b8:f3:d3:d1:df:41:f8:d8:
ec:ce:7d:7d:a3:cb:a4:9d:20:63:1f:ba:89:d6:72:
e8:a2:aa:b0:75:9e:25:f9:7e:f8:b2:2d:5d:a2:a3:
54:e2:67:34:e3:8a:e1:3a:41:31:0d:bd:ad:e7:1c:
2d:ae:fd:b0:5f:d7:57:41:12:4d:62:c2:fa:83:0f:
36:d3:10:8a:98:9a:cd:d4:48:f3:0d:6c:5a:ad:a2:
34:06:aa:cb:7a:ac:e2:81:86:35:3e:c9:02:0e:2f:
08:b1:0c:b7:8d:10:26:dd:b1:bf:e8:46:7b:cc:9e:
00:3e:3e:69:53:87:a1:f3:94:97:c6:ab:c1:f5:b6:
d9:fa:e3:be:20:c0:ed:6f:b1:c2:51:0a:27:c4:a0:
b7:c7:38:32:5c:56:af:64:ca:ca:dc:a3:aa:9e:a4:
06:36:1d:62:03:f3:56:a4:61:ca:b9:0e:d4:03:eb:
0c:c1:44:55:f3:2a:a7:8a:d9:37:67:fa:33:b9:a8:
e7:9a:ea:95:9f:23:01:db:58:04:f8:2b:72:16:86:
23:1b:fc:8f:ec:19:e8:44:9e:43:45:e0:7a:cb:17:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:87:4A:57:42:95:E5:40:F8:C5:7E:84:D7:C0:55:66:0C:BF:8C
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:99:ee:91:13:cf:1e:2d:b9:41:7c:e0:65:59:bd:36:0b:
64:49:80:f2:74:f4:eb:70:e2:e1:58:1f:9a:db:3a:01:e0:cf:
d7:28:dc:c6:52:ed:33:1a:e4:22:fe:cc:f9:2e:b9:9f:75:e0:
2c:ac:d7:d6:ae:03:16:a3:1e:fc:c2:54:2c:21:b6:4f:1f:90:
3a:39:35:95:d5:c2:df:bd:8a:36:79:69:47:7d:4f:57:43:85:
e6:08:cc:14:a8:ce:c5:c7:d7:19:e8:d3:d8:2e:b0:09:f3:c2:
be:5e:17:4e:a8:5f:2e:7c:f0:0e:f2:90:8c:00:5e:2c:3f:bd:
8c:63:ec:13:ba:15:3b:86:34:3b:98:56:70:d8:79:09:bb:c3:
dc:f8:bd:c5:10:84:01:4f:d1:7f:68:aa:44:7d:46:08:53:d8:
7d:65:a9:c9:bd:85:47:91:1d:a2:02:41:76:20:5c:6a:55:d3:
e8:da:b7:e1:fd:bb:c2:94:c1:80:85:32:73:7d:81:3c:44:ca:
5b:24:2f:6f:42:47:86:d6:2e:0a:e2:fb:59:c1:f3:12:48:1c:
09:26:7c:67:05:a1:fc:63:50:77:3d:2f:90:b5:45:33:ae:05:
48:bd:af:96:f1:8b:47:c8:77:e5:71:3e:63:60:70:34:2e:7f:
de:d0:77:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfvs++I8526vC6uI9JJ82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzQzZjA0YzI3ZDE1NDU1YWFhNWNkYWE0NTY5ZDM3YTg4
OTUwZDcwHhcNMjUwNDIwMDAwMDIxWhcNMjUwNDIxMDAwMDIxWjAzMTEwLwYDVQQD
EyhiYjM3ODc0YTU3NDI5NWU1NDBmOGM1N2U4NGQ3YzA1NTY2MGNiZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJTeZmRa3oPu478/RJDYV9BU8zk9
u7HsVT+vGWDO8suMmSaCuPPT0d9B+Njszn19o8uknSBjH7qJ1nLooqqwdZ4l+X74
si1doqNU4mc044rhOkExDb2t5xwtrv2wX9dXQRJNYsL6gw820xCKmJrN1EjzDWxa
raI0BqrLeqzigYY1PskCDi8IsQy3jRAm3bG/6EZ7zJ4APj5pU4eh85SXxqvB9bbZ
+uO+IMDtb7HCUQonxKC3xzgyXFavZMrK3KOqnqQGNh1iA/NWpGHKuQ7UA+sMwURV
8yqnitk3Z/ozuajnmuqVnyMB21gE+CtyFoYjG/yP7BnoRJ5DReB6yxf6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs3h0pXQpXlQPjFfoTXwFVmDL+MMB8GA1UdIwQY
MBaAFJ40PwTCfRVFWqpc2qRWnTeoiVDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDkt
MzExOWQzMzMyMjgyLzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDktMzExOWQzMzMyMjgy
LzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4WZ7pET
zx4tuUF84GVZvTYLZEmA8nT063Di4Vgfmts6AeDP1yjcxlLtMxrkIv7M+S65n3Xg
LKzX1q4DFqMe/MJULCG2Tx+QOjk1ldXC372KNnlpR31PV0OF5gjMFKjOxcfXGejT
2C6wCfPCvl4XTqhfLnzwDvKQjABeLD+9jGPsE7oVO4Y0O5hWcNh5CbvD3Pi9xRCE
AU/Rf2iqRH1GCFPYfWWpyb2FR5EdogJBdiBcalXT6Nq34f27wpTBgIUyc32BPETK
WyQvb0JHhtYuCuL7WcHzEkgcCSZ8ZwWh/GNQdz0vkLVFM64FSL2vlvGLR8h35XE+
Y2BwNC5/3tB3Xg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:53:10 2025 by rpki-client