Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: 0ck+Kwd/DRxf0PHkNeC8M96j2rJb4VkFgDKWbpoz8U8=
Subject key identifier: 63:15:F3:5D:97:8E:30:C3:8E:21:1A:02:44:81:8F:E3:93:6F:91:8E
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0196AB0C1A45754FB4164FFF408E097441C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 0232
Signing time: Wed 07 May 2025 14:00:19 +0000
Manifest this update: Wed 07 May 2025 14:00:19 +0000
Manifest next update: Thu 08 May 2025 14:00:19 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: 91AXvJw5TKZmPqAbQtf2EkpTG5nUYj/wev6d3Vj8jSU=)
2: RcZOQzwVPzta74FZUHn3H3BrDfw.roa (hash: V0krQJ1xo1MEn7oEhb7Dh/z9l1NykVrobd6V77UbzAQ=)
3: _ZjRtovsCOJczXTJb78gNEIXWRA.roa (hash: o+YLeLrWzFxVnwd97MbT9/S72tuJZDl5Wl2Z8cJ7fEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:1a:45:75:4f:b4:16:4f:ff:40:8e:09:74:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: May 7 14:00:19 2025 GMT
Not After : May 8 14:00:19 2025 GMT
Subject: CN=6315f35d978e30c38e211a0244818fe3936f918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:0a:fa:48:0d:5a:87:13:01:d1:1c:58:23:
f5:cf:f8:d1:d7:68:68:9e:96:a2:99:87:9a:ac:3d:
6d:16:4e:54:9b:6d:41:65:31:55:b1:58:35:72:b8:
5e:13:28:f2:cd:3f:f4:98:1f:72:a8:1e:47:9d:2e:
35:2b:41:e6:63:02:39:07:94:25:16:42:1f:af:db:
31:37:27:8b:62:f9:1d:4a:b3:fd:be:01:c8:13:c5:
17:41:2c:77:6c:24:d1:5d:f7:ba:88:51:0a:28:5d:
03:1b:7f:64:ac:36:5b:57:3a:c0:db:e2:e3:a3:eb:
ea:42:14:e1:ae:ba:ab:31:83:e3:69:08:c2:f0:40:
8a:00:d5:7c:7c:36:7b:26:52:7b:e9:78:78:cd:93:
94:2f:3a:78:0e:87:a4:f2:7c:41:ae:75:de:1e:0b:
c0:e7:a0:36:b6:bd:d6:38:bf:06:05:bb:91:94:78:
65:10:9d:b3:3c:d4:b6:0b:b1:74:fe:53:33:85:c1:
79:df:49:69:b3:0c:0f:f3:a1:a7:a4:56:9a:10:9b:
af:4f:b2:65:43:cb:3e:58:84:9f:6e:2a:0c:66:4d:
94:fe:23:4f:4f:c9:16:e9:e1:6d:40:ac:17:05:db:
2f:81:04:1d:ea:9d:34:49:b2:9f:5b:0d:46:3e:7e:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:F3:5D:97:8E:30:C3:8E:21:1A:02:44:81:8F:E3:93:6F:91:8E
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:fe:b5:9d:ca:16:6b:f8:5f:8c:53:45:1d:1c:b9:58:0b:
30:06:b1:dc:ac:a8:ad:67:a1:cf:f2:ab:4c:0f:a4:22:58:ed:
3f:5e:8a:b0:d1:67:22:f9:1b:e0:41:8e:0f:d2:17:8d:fe:8f:
5f:85:74:f6:9a:40:ec:b7:db:3a:78:a9:42:ca:23:84:f9:74:
ff:ff:a9:fe:b8:7f:bd:7d:18:20:e4:73:23:84:63:81:62:63:
f3:19:db:61:28:ae:38:1f:9e:06:a4:23:56:ff:43:0b:32:23:
1e:43:e9:f4:59:14:ea:3a:49:76:e4:83:fc:57:0c:84:1b:3c:
6e:24:75:e5:e0:b0:e6:e2:f8:54:c8:ad:e9:e8:69:1f:2f:76:
61:af:78:18:73:79:54:51:a5:21:4e:d2:26:ff:36:b8:75:8c:
a4:c3:ee:73:0a:91:2e:19:3d:c4:ab:cd:80:13:05:3b:c7:11:
8b:ea:7f:e6:fb:5f:8f:2e:f6:90:d2:e9:73:7f:45:0e:9b:46:
76:50:61:61:22:f2:da:c6:0e:b0:92:f1:c6:b2:41:85:71:87:
44:5d:ba:44:79:e7:d5:ee:5f:13:5b:20:8f:b9:f4:2f:cd:f3:
a9:4d:ff:e8:67:53:c0:64:37:85:a5:b6:6b:d3:df:39:9c:53:
76:a1:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:33:39 2025 by rpki-client