Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: ISjiMMNvRk+GXOEdBnwOeM8/7c0TekeFdqyMxJDXdxM=
Subject key identifier: 26:CC:C3:3B:B9:02:01:DF:3C:95:4B:55:3A:88:6A:1A:30:09:79:6B
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 0196BAED0BEB6F80609F7AC0A4BBC78A96A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0BD9
Signing time: Sat 10 May 2025 16:00:19 +0000
Manifest this update: Sat 10 May 2025 16:00:19 +0000
Manifest next update: Sun 11 May 2025 16:00:19 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: vMzJHc3fh8rxLc7T0iRNuwUZ2/dGLF2cd0cqP1iGeOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:0b:eb:6f:80:60:9f:7a:c0:a4:bb:c7:8a:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: May 10 16:00:19 2025 GMT
Not After : May 11 16:00:19 2025 GMT
Subject: CN=26ccc33bb90201df3c954b553a886a1a3009796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:bc:19:21:3f:22:9c:7c:d4:37:0a:0e:f9:
26:21:90:21:63:49:ed:f8:89:6a:b9:45:78:4f:53:
bd:34:71:8f:be:51:db:b9:97:f9:51:69:1b:34:fe:
fa:d6:a2:56:3b:c3:a0:19:0d:17:59:c2:12:45:c8:
0d:13:c8:ba:58:8b:52:b8:a2:e3:7a:e7:dd:38:85:
c6:fb:c0:b3:94:d7:8e:4a:fb:6d:41:d2:e9:6d:3c:
19:98:3c:b3:e6:25:c4:2e:4e:25:50:48:fb:f4:75:
1d:9e:65:d2:d0:76:9f:24:61:20:b2:74:24:ba:61:
f0:66:cd:81:45:76:6f:e6:66:17:ed:b7:9d:c1:48:
8b:c3:5d:95:32:de:10:c0:99:8a:19:e0:64:0b:81:
b1:5f:ca:51:90:72:87:0d:4c:0d:dd:06:a2:df:a1:
d7:b3:78:e0:06:c1:f5:5b:b4:34:78:39:0f:09:f4:
50:8d:f8:bd:dd:98:84:f8:cc:67:5a:3e:f8:b6:29:
db:4b:15:b8:05:fa:5d:11:0d:d8:cd:2f:67:6d:e9:
19:21:6e:56:90:58:3f:12:85:2d:d5:66:34:57:12:
04:19:96:d1:14:e7:71:2f:fd:ba:b4:55:71:0b:8e:
36:ec:9d:a9:c1:0d:3c:6a:66:cd:d6:37:22:be:8d:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CC:C3:3B:B9:02:01:DF:3C:95:4B:55:3A:88:6A:1A:30:09:79:6B
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:46:a6:71:a1:17:60:41:e2:bd:60:b2:ae:15:d4:93:df:12:
d0:19:68:9f:b2:2f:a9:c9:b4:f0:e7:fe:4a:c8:e8:d3:03:d8:
9c:bf:5d:7a:aa:99:0c:b1:68:6c:90:d6:c4:08:b0:ff:ea:de:
4a:be:c2:0f:07:3c:6f:cc:9b:b9:02:38:5b:81:f3:47:0a:9d:
05:0e:7a:af:5e:7d:73:c0:ea:33:51:99:da:d3:66:d6:e1:df:
97:08:eb:99:0e:69:44:78:80:66:44:49:b9:09:8d:30:59:0a:
7f:7e:fd:4c:9b:90:88:33:41:12:66:6a:c1:95:9a:c0:30:99:
6a:c1:7e:d3:57:2e:43:9e:28:46:35:76:88:51:56:1f:e3:05:
64:1b:81:c4:93:f3:30:49:2e:95:22:39:d7:d1:d2:fb:20:23:
23:cf:c8:64:42:c2:03:0c:fd:3a:98:4f:f7:98:ca:96:b7:71:
c8:43:12:1a:5c:be:e3:1d:00:d0:6e:90:f1:9d:a5:92:da:95:
f3:1f:53:3c:a7:93:1f:66:73:43:86:7c:c8:ae:66:f0:e3:52:
0c:bf:e4:17:cf:34:f2:f0:3c:74:f3:3c:7c:e2:72:50:54:69:
40:11:82:a1:87:92:0a:3d:94:de:9a:a9:bd:03:7f:d0:d5:32:
00:3f:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:37:49 2025 by rpki-client