Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: oZE0bIKUlMsMHWlkBwBAUfh4LY6FLFE/uL2Tf2LaSYs=
Subject key identifier: 4C:5D:BE:77:C6:51:29:0C:D4:D7:93:80:67:AD:06:19:51:C1:91:9C
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 01974DB2F1946FA056A86E9F57295705BC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 04:01:02 +0000
Manifest this update: Sun 08 Jun 2025 04:01:02 +0000
Manifest next update: Mon 09 Jun 2025 04:01:02 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: ockU9wdLzxd1LsUD2Mj6FprutEtSS0niTKj8NKDwdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:f1:94:6f:a0:56:a8:6e:9f:57:29:57:05:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Jun 8 04:01:02 2025 GMT
Not After : Jun 9 04:01:02 2025 GMT
Subject: CN=4c5dbe77c651290cd4d7938067ad061951c1919c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:80:a5:e9:66:f2:73:18:1b:d6:8e:95:0a:
d1:40:66:46:b4:be:64:27:e2:c8:04:5b:08:41:95:
34:b7:9d:9a:31:ac:50:62:f5:3b:d0:e6:47:61:46:
3e:d5:1e:60:d4:f8:90:27:9a:3d:6b:1d:69:2e:0e:
92:f7:ba:5e:c5:ea:21:20:ae:7d:30:76:44:0f:9b:
d9:98:40:89:35:c7:36:92:64:ba:01:33:03:e5:d7:
2f:f9:85:bf:7f:e7:f6:56:c4:90:5a:fb:40:b5:9f:
7f:e8:a1:de:c6:8a:9a:09:8a:e2:90:84:7b:41:97:
1a:86:76:eb:68:be:c9:5d:24:7a:55:a8:66:93:3c:
3f:a8:73:46:89:87:92:b4:c3:b4:01:8d:3f:94:97:
8c:ca:4d:9d:40:ad:62:12:5c:3f:c2:4c:ee:e5:f4:
81:65:64:2b:5b:84:46:7b:53:0e:fd:cc:97:e9:d5:
0a:04:57:c6:25:6d:7b:fc:de:5a:95:2c:89:6e:96:
71:f8:39:e8:80:fd:7c:da:e4:56:7f:c6:da:13:c5:
55:58:13:3a:ad:a2:49:a1:b8:a3:32:32:9d:c1:94:
26:6d:9f:a8:a3:8e:5e:a9:0e:f1:6d:53:59:39:7f:
15:7f:3a:a5:96:3a:af:44:90:cf:e2:4a:c4:56:82:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5D:BE:77:C6:51:29:0C:D4:D7:93:80:67:AD:06:19:51:C1:91:9C
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:b6:6e:b7:84:49:2b:f8:7e:77:db:83:9b:a2:d3:a5:59:
8a:44:f2:db:20:91:68:ff:2d:a9:36:55:ca:1b:35:71:a0:ee:
a7:74:b3:b0:6e:9f:58:0e:a9:3d:29:13:12:5c:7a:4b:a8:a5:
6a:f4:c0:6e:63:d2:d0:1b:25:e5:e7:ae:16:3e:cc:8e:b8:18:
c6:b9:99:87:a3:b5:71:1b:d4:43:68:0f:10:fd:f2:c4:cd:8a:
51:95:75:5a:bf:15:e2:c5:b1:30:1d:db:af:9d:1d:19:35:ea:
a9:5b:5d:00:ff:82:51:cb:0d:e8:1e:a4:07:b1:fe:21:b7:4c:
d9:92:91:3c:6f:31:44:c4:de:7f:6f:a7:51:33:95:31:43:bf:
fc:19:88:d8:34:dd:31:7a:c1:e2:54:3b:23:d5:30:54:17:11:
15:91:70:9a:ef:10:2b:f8:02:bf:44:a1:7a:da:07:15:ad:21:
f0:44:1c:e6:05:26:1f:46:ab:1a:99:73:61:92:bf:03:fc:0d:
34:08:ee:14:e4:b0:60:00:b9:20:a7:53:21:f5:22:0e:ca:ac:
a0:6f:56:32:4a:ef:7c:8b:31:94:02:a1:9f:2d:1c:8b:24:52:
fa:fe:12:70:b5:51:47:08:20:be:f8:db:cd:c8:cf:cc:d2:0a:
2a:b7:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:56 2025 by rpki-client