Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: sFXvol6k7kS3MD8BuI+By8OI1qbxeOgRQD5MsqlkX9s=
Subject key identifier: 95:3B:FC:8C:66:6A:55:75:23:B1:C0:AB:CF:C0:2B:E9:93:39:AB:96
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 0197B7EA2A8B36FB7D3CDC1E408775948818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0C5C
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: MFLYEnVjK8CoIk4IQuFl2LEqcd52rVN3GlwrvenRtA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2a:8b:36:fb:7d:3c:dc:1e:40:87:75:94:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=953bfc8c666a557523b1c0abcfc02be99339ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:9b:d3:f6:7b:97:5c:4e:e0:af:f5:a1:e4:
88:85:88:65:ee:f9:88:47:60:5f:37:d0:e7:e2:97:
2e:1d:10:c7:8d:32:3c:4c:57:20:6b:92:f2:91:31:
75:b7:0c:23:4d:88:a9:59:d8:8e:71:b2:f1:f7:e4:
a9:11:92:41:04:4d:8e:e7:ec:2f:ed:c3:36:67:00:
52:bb:e6:62:47:72:9d:8f:ed:c5:77:e3:32:49:56:
aa:27:35:28:4b:07:4f:00:57:03:db:07:17:6a:50:
1a:91:f6:51:58:cf:57:3d:ee:a9:79:2e:e4:4c:9b:
07:9c:c5:5a:e8:74:cc:b1:da:9d:f9:de:7c:5f:78:
74:98:52:0a:c6:22:17:66:2f:e8:22:0b:c6:9f:1f:
f6:2f:53:ea:b8:3c:7c:a4:30:1b:23:48:c6:5c:d0:
00:57:29:0d:63:f2:06:8f:2a:48:7b:1f:3c:67:f8:
1f:f1:07:20:3d:f4:d7:bf:aa:57:9c:e2:6a:77:7f:
b3:bc:3c:b9:bb:32:26:7d:27:6a:c6:73:69:cc:39:
4e:cd:0b:f4:e9:48:6a:fe:97:87:bf:9d:7b:27:d4:
f0:c5:71:ff:6e:94:de:46:a0:5f:95:38:a1:b0:bb:
b0:6f:38:4c:44:35:f1:e7:a0:60:67:4b:34:58:69:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:FC:8C:66:6A:55:75:23:B1:C0:AB:CF:C0:2B:E9:93:39:AB:96
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:67:32:f0:12:98:c8:77:76:13:6b:e5:58:7f:12:de:b8:20:
5b:4e:08:66:b4:3d:a3:78:bb:5c:71:7e:ac:00:bf:14:b8:af:
63:f2:74:40:09:b2:49:85:62:81:21:df:4e:e6:c8:2a:9b:3a:
63:c6:5a:f2:9c:34:0b:22:79:7b:22:db:f5:af:a6:20:b7:b4:
82:6a:36:e2:fe:d6:8f:7d:79:61:3a:8a:97:13:15:36:fe:35:
49:51:cb:17:8f:85:25:43:a0:65:11:44:3e:ce:aa:16:93:7b:
5a:1b:c1:8c:32:17:a0:f6:a6:40:93:67:d9:5b:8b:e3:72:4f:
3d:7b:37:b8:70:df:86:4d:a0:11:f6:8e:d2:20:11:e7:68:7a:
e0:76:30:fe:d7:41:3e:21:5c:0d:c2:09:4b:24:13:f0:5b:b2:
43:5c:7f:08:48:b2:a6:ea:33:52:97:fe:45:21:44:ab:0e:17:
7e:f9:38:b5:4b:cb:de:31:79:5f:b1:89:f3:01:b3:91:a0:c6:
5e:ba:d0:dc:08:6b:ed:76:4f:b8:bd:be:d6:6b:e0:82:70:f2:
ad:c8:17:2d:50:e8:c5:b1:d1:ba:ed:0e:32:78:48:07:92:0f:
20:41:21:e8:75:4a:9c:39:59:f6:e8:c8:7c:b9:5a:b6:8d:2b:
0b:5b:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:00 2025 by rpki-client