Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: AGP6vqIrTpTiRgWUCKUUoL/lzcYYGPT7ZJ3VZOpLqZE=
Subject key identifier: 97:BF:F0:68:21:EA:6A:99:B2:E0:EF:07:60:24:B2:C9:B0:9C:20:D6
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0196C75F4CB7E4AF854A70E23BBA360336AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 14CD
Signing time: Tue 13 May 2025 02:00:33 +0000
Manifest this update: Tue 13 May 2025 02:00:33 +0000
Manifest next update: Wed 14 May 2025 02:00:33 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: gc+60LZs+bSmwPhwJNXFnYoGBlbbg9sZWPvVO2d0pNQ=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:4c:b7:e4:af:85:4a:70:e2:3b:ba:36:03:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: May 13 02:00:33 2025 GMT
Not After : May 14 02:00:33 2025 GMT
Subject: CN=97bff06821ea6a99b2e0ef076024b2c9b09c20d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:2f:c6:14:ba:4f:d6:41:79:f4:e5:db:e1:
66:c1:48:14:dd:cc:e6:29:01:33:b3:88:18:fb:80:
5b:d5:94:38:0c:f8:b8:df:cb:d5:26:c9:31:f4:a8:
ef:2d:4c:32:b9:7a:e7:27:ee:54:74:a3:79:36:56:
63:15:24:7e:ce:da:ad:59:a6:ce:51:c8:d6:a8:3a:
d8:06:b8:02:1b:d8:10:8a:39:28:f9:34:46:d7:45:
b1:f5:6d:ef:5c:71:ab:ea:44:0b:92:e8:1a:f8:7b:
61:89:87:0d:0e:72:27:fb:d8:28:04:b2:d3:6f:b1:
d4:da:71:ae:6e:09:f9:de:fe:c2:f1:e9:b2:43:e7:
7c:12:7e:2e:bb:b0:6c:34:74:89:f5:2d:83:88:5e:
39:e0:69:b6:b4:29:2f:13:f0:3d:26:21:24:8e:96:
10:a2:79:5e:f8:a1:27:90:f3:c8:df:55:6c:12:4d:
24:05:6d:46:60:16:92:f2:0b:a0:ca:04:88:02:74:
9a:f9:09:74:c5:27:ce:28:17:91:1a:22:70:07:77:
b3:55:5d:1a:3a:3b:b4:d8:6e:f9:54:66:8c:ee:cb:
e1:ad:8b:13:a8:26:aa:1d:fe:d1:e1:64:79:3b:0e:
5f:bb:0a:51:13:c3:b5:50:28:72:20:d8:6e:34:94:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:F0:68:21:EA:6A:99:B2:E0:EF:07:60:24:B2:C9:B0:9C:20:D6
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:3c:4a:41:e8:b1:e0:ea:b7:cc:16:41:20:f0:d4:68:7e:
ce:bb:01:bc:75:73:81:c6:f6:df:16:c8:89:dd:35:8f:1b:05:
da:29:0c:7b:81:c8:af:22:cd:80:be:af:e0:a2:32:98:24:75:
55:fc:b3:fd:a6:4d:c6:52:eb:36:68:1c:13:00:8c:f6:18:8e:
8c:e9:93:24:75:1b:1f:55:5f:15:34:38:2d:3f:71:04:2a:82:
04:0c:c4:95:a0:3f:30:4e:d2:3e:66:7b:1c:a9:c4:9c:74:7a:
de:8b:95:9e:f6:ad:e4:b2:f4:74:a5:b5:15:6f:f7:49:42:26:
59:db:23:16:b7:62:68:b1:34:fc:60:33:02:c0:0a:cb:4a:96:
56:33:29:be:f0:64:bd:ff:d8:c5:59:ed:a9:2b:54:ee:6d:c0:
5a:18:76:d2:bb:bf:fa:99:99:c9:28:4a:e3:18:2f:a2:b2:b0:
96:de:5a:be:c9:27:05:3d:6a:b8:7b:76:b2:b4:7c:cd:e9:4f:
df:0d:b3:af:5f:53:76:ef:fc:82:2d:44:96:ec:0f:30:7e:36:
d6:a0:57:4c:85:19:b4:13:f1:24:df:25:ef:13:35:ad:96:ca:
c7:a7:50:b0:86:c1:11:d0:b8:0b:a1:b2:8a:64:d2:a7:80:25:
29:8e:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:57:28 2025 by rpki-client