Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: bIp6IrMgTxBEg81w7k/1v+2sTsHwJ9ONZR2fas8e0kE=
Subject key identifier: B5:E3:54:7B:E2:1F:8D:DE:99:11:E7:BB:8A:7D:77:AF:31:B2:B5:17
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0196B85A46C163506E8B5F6C229568F682F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0EA6
Signing time: Sat 10 May 2025 04:00:46 +0000
Manifest this update: Sat 10 May 2025 04:00:46 +0000
Manifest next update: Sun 11 May 2025 04:00:46 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: gsfz9jSAQnk51fH4TCX6lt5LNGGAFEj7Ltj1iCuXbSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:46:c1:63:50:6e:8b:5f:6c:22:95:68:f6:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: May 10 04:00:46 2025 GMT
Not After : May 11 04:00:46 2025 GMT
Subject: CN=b5e3547be21f8dde9911e7bb8a7d77af31b2b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:61:ba:24:2c:8e:15:1c:92:ae:c1:da:9f:
c5:67:79:8e:91:d0:d5:e0:03:11:08:d5:e1:04:06:
dc:00:9e:be:1b:96:fc:65:50:3e:f7:eb:28:99:1e:
f6:83:cc:3b:cd:18:ab:ee:53:15:29:9f:5b:d5:ac:
5f:03:be:c7:8e:df:eb:ee:d5:df:1f:11:0d:9b:a7:
21:93:dd:c6:3a:e9:5d:6b:ae:81:1b:9f:cc:ac:ef:
c7:ba:27:ad:d8:57:c3:81:68:1d:16:53:73:8e:5b:
39:e7:26:16:e3:6b:27:5c:e9:0e:74:00:04:8e:6d:
04:81:61:b2:05:a9:c0:8f:3e:55:0a:e9:0b:23:16:
8b:ae:12:c6:bc:b9:22:53:9f:35:90:01:8b:94:f3:
8f:65:a8:f9:ae:be:0d:b1:6a:73:91:c3:a8:b2:61:
9a:66:a4:6b:bb:24:46:d4:3c:d3:ae:a4:20:71:e7:
aa:01:fc:1b:65:93:b4:e3:c4:37:74:0a:e1:9d:8f:
6c:6b:96:fd:e9:62:da:7b:68:db:11:48:6b:19:b6:
03:f5:34:10:c8:e7:08:cc:c0:6c:12:fa:de:9c:b8:
78:4f:27:07:e8:be:2c:8e:ed:8f:d5:f2:77:0e:8d:
4c:3d:7e:24:23:eb:3c:16:ed:70:84:29:79:31:80:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:54:7B:E2:1F:8D:DE:99:11:E7:BB:8A:7D:77:AF:31:B2:B5:17
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:43:f5:5f:b3:92:20:9f:f7:0a:d9:02:42:26:ef:3f:69:
83:db:1c:0a:d6:dc:2a:de:95:2b:a3:05:44:5f:49:ff:2d:29:
bd:08:05:29:64:da:42:27:ab:6c:d4:75:a5:80:fc:52:b0:7c:
ed:c9:5f:f4:d5:63:18:68:08:0a:6c:cf:05:2a:70:12:86:9b:
6d:2a:ac:dd:3b:15:91:06:7d:0e:f5:d6:13:96:b0:cd:ff:92:
92:07:af:c4:4c:2b:ca:32:b9:30:b7:c4:d5:15:c1:7b:f1:ae:
03:36:5d:8f:6a:59:f1:3f:56:d9:1e:50:93:42:ed:59:b4:6a:
fd:ac:96:a7:72:60:81:a2:b5:78:5f:fe:e0:4a:6f:c7:0c:0f:
58:52:84:b7:b9:89:20:18:ae:c8:cf:cc:ce:bf:15:8a:b6:2b:
23:c3:74:88:e8:bd:b0:58:5e:1b:e5:44:25:c7:81:6a:e1:d9:
68:5d:89:b3:d7:df:26:83:60:24:73:cc:49:c3:97:72:ee:e8:
41:93:e3:0c:70:97:3c:88:9a:8b:09:be:30:04:f1:64:38:fd:
d9:a5:a6:fa:57:9d:38:1d:b1:22:c0:5a:34:f4:3b:a9:01:7a:
58:57:1e:4c:ba:bb:14:1f:09:61:d9:2b:36:48:47:86:b3:92:
a1:d6:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:48:26 2025 by rpki-client