Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: jKi8UToTGMgQtZlirBF0EP87uB7egTqSLd2w+Y1fDbU=
Subject key identifier: 1A:7E:79:72:BA:EB:F7:A0:33:A7:9C:E2:D2:DF:C5:2D:B7:F3:95:04
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 01969E632131E66994F53AFB69B9D4D82D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 0195
Signing time: Mon 05 May 2025 03:00:18 +0000
Manifest this update: Mon 05 May 2025 03:00:18 +0000
Manifest next update: Tue 06 May 2025 03:00:18 +0000
Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: I0+Bs8zYDtEhRLNjjH7cHRRoJLGSdp/+y0QNN9WaF54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:21:31:e6:69:94:f5:3a:fb:69:b9:d4:d8:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: May 5 03:00:18 2025 GMT
Not After : May 6 03:00:18 2025 GMT
Subject: CN=1a7e7972baebf7a033a79ce2d2dfc52db7f39504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:53:58:ca:f3:40:79:88:04:89:3a:29:20:
46:87:f3:ee:60:a1:ca:d2:da:30:e9:49:b7:ee:4d:
0c:09:d1:fa:6c:3b:dd:bc:e2:04:46:89:15:3f:c3:
8c:30:3f:38:f3:45:42:3a:a2:2a:27:c1:03:d6:75:
dd:e1:9a:cd:f8:b8:a3:c2:c3:e5:92:40:94:c6:d0:
5f:27:22:d8:91:52:37:71:0a:bc:3e:55:45:66:d0:
4f:91:08:c3:30:30:21:54:0c:f7:a6:22:4a:cb:59:
90:61:a5:49:87:c9:f8:37:7b:a1:7f:cc:76:85:0c:
36:7d:dd:c8:d7:05:a8:43:3e:f8:da:52:47:86:63:
61:8e:d8:76:00:04:6b:db:56:60:83:ad:2c:1b:f8:
57:b6:b2:e9:63:df:60:f5:92:05:78:21:cd:d0:c2:
45:36:4c:a8:64:f1:eb:69:29:a0:49:79:65:43:2c:
a4:ba:9b:0f:c5:f4:43:57:c9:e4:73:6d:c5:a4:f3:
40:c2:4a:62:1f:91:e0:e3:9a:06:3b:89:11:34:3b:
6e:5a:cf:5f:34:9c:72:51:40:38:f9:a7:dc:fa:b2:
9b:ad:93:fa:aa:d4:20:6b:a0:83:13:46:d9:6d:14:
59:6c:38:68:0b:fd:1b:19:2f:8d:5f:57:a1:42:1b:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7E:79:72:BA:EB:F7:A0:33:A7:9C:E2:D2:DF:C5:2D:B7:F3:95:04
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:9f:4c:65:33:dc:0a:e0:2b:09:e3:49:28:2b:3c:97:34:
cd:e9:6a:38:89:24:e4:cc:29:67:c0:90:27:8a:7e:52:35:ab:
20:4c:d3:4a:05:66:7f:78:ca:9d:68:1e:e5:0a:7c:38:84:7a:
7a:d7:b5:7c:b5:ae:8b:dd:c0:0d:2a:56:89:4f:c8:6d:46:5d:
3b:26:ec:7d:12:c6:f6:24:d7:d6:ba:64:c6:2d:18:24:81:13:
19:7f:da:1e:c4:21:9b:6c:32:72:b9:07:ad:64:97:0e:54:d8:
84:fe:26:33:f1:01:5b:54:15:ef:da:4d:67:31:9c:2a:b1:94:
13:19:bb:2d:90:5e:de:d5:8e:31:2f:44:e3:b5:4b:c5:3f:74:
4b:80:23:43:e4:51:ea:45:3e:4b:1c:40:60:96:04:d5:6e:72:
56:ce:60:b3:a8:40:69:90:31:b1:83:ab:12:86:61:cf:0c:48:
51:ac:df:52:bd:db:f4:0d:3f:c7:cc:b1:30:bc:f9:cf:16:2f:
55:7d:88:f4:92:f0:24:07:70:2e:4b:fa:20:d3:e2:39:99:6e:
6a:32:1f:73:e4:d2:04:85:ea:13:28:c9:3e:fa:1c:8f:df:82:
58:89:c7:83:4c:21:cb:de:e1:b9:41:71:33:27:e2:79:ed:f7:
9d:e9:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:05 2025 by rpki-client