Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: 3EslRfWfmbUF0Eo0cTLHO/iLJdsVc3sxTHmZxY+bP2Y=
Subject key identifier: 68:38:70:0D:4F:9A:5C:92:D1:02:66:F5:08:51:ED:4C:E3:03:6C:91
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 0196BB9284D70FB84EB1F6CF8C2ACEEC1A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 19:01:03 +0000
Manifest this update: Sat 10 May 2025 19:01:03 +0000
Manifest next update: Sun 11 May 2025 19:01:03 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: KT9rMJeYyyEr2//nc71lLZb6WBgaHl4fydhTc/TiiSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:84:d7:0f:b8:4e:b1:f6:cf:8c:2a:ce:ec:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: May 10 19:01:03 2025 GMT
Not After : May 11 19:01:03 2025 GMT
Subject: CN=6838700d4f9a5c92d10266f50851ed4ce3036c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:d5:ea:a2:15:6d:39:41:db:c1:c1:97:db:
4d:c1:2a:2d:4f:be:08:fc:11:03:b2:43:c3:20:7d:
d8:7e:0c:63:ea:76:16:99:8c:b6:08:5e:d0:60:71:
79:33:06:c3:c5:a3:7b:fe:7d:c6:12:ba:9b:90:58:
8b:ea:6a:ce:65:41:55:3c:84:61:24:f3:50:77:b4:
67:61:91:18:d3:e9:e7:96:6b:f0:6b:2c:cf:2a:8b:
13:6f:6d:0f:c2:36:58:56:df:73:87:f5:b9:ad:2d:
32:5d:e8:b8:19:a7:88:4c:24:54:6f:1a:5f:59:62:
5d:ab:77:dd:f4:a6:4e:90:a2:b9:a5:ae:4b:23:10:
be:76:46:36:ea:d7:f5:39:af:65:0f:88:04:fd:46:
c6:a8:8f:cc:37:37:e2:19:7f:c1:17:d5:2c:38:7d:
a9:c2:ee:19:7b:8b:ef:e9:28:ea:da:e7:63:a6:2e:
af:d2:89:7a:1d:49:9a:2f:51:67:bf:0f:29:a7:70:
1e:36:a6:01:1f:8d:29:81:e3:f9:30:76:87:7f:e6:
75:f5:fd:59:7a:21:55:43:12:f1:74:0a:b1:79:c9:
78:11:21:6a:66:01:e6:34:8f:23:ba:b4:67:85:76:
1e:ae:3c:ae:0a:27:8f:b4:78:e7:68:70:64:17:22:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:70:0D:4F:9A:5C:92:D1:02:66:F5:08:51:ED:4C:E3:03:6C:91
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fb:bf:75:99:2b:56:76:46:b5:cb:4b:9d:94:09:99:0f:48:
65:90:be:21:df:1f:25:c6:78:9d:66:d5:c0:aa:76:0b:ba:a9:
10:ec:9b:39:49:9e:5c:91:b3:d2:84:97:d7:54:d3:b7:31:30:
b4:94:30:91:d1:07:60:8d:e4:3a:fa:87:7e:31:2b:9a:a6:69:
de:1c:ca:b4:16:4a:04:9e:da:5a:64:b7:de:29:22:e0:7e:f8:
21:0c:42:69:59:6a:16:83:92:7d:16:f5:bd:73:d9:ef:cc:07:
2c:5c:76:9b:d4:94:11:a2:97:db:8d:4b:28:70:2a:4b:4b:bd:
78:fc:01:15:71:b3:55:13:47:35:23:14:91:b7:20:2d:df:bb:
26:8a:8e:bf:00:ea:26:96:b4:34:0e:e5:aa:ad:55:a7:ed:b6:
a8:dc:25:a3:96:d4:a9:86:e7:2b:b7:c9:5e:61:94:5a:c5:4c:
70:4f:89:84:3e:de:b6:b8:15:f9:83:4a:f9:fc:c6:fe:d5:b6:
f1:59:39:ec:84:dc:88:68:8f:68:f4:8a:da:88:98:fd:f8:a7:
c2:88:8f:22:56:0f:d0:89:e2:f0:ba:31:b8:48:14:be:91:c9:
bc:bb:c0:dc:6b:ab:4f:99:35:53:34:61:9f:15:ed:37:f8:8c:
70:e0:fc:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7koTXD7hOsfbPjCrO7BqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjUwNTEwMTkwMTAzWhcNMjUwNTExMTkwMTAzWjAzMTEwLwYDVQQD
Eyg2ODM4NzAwZDRmOWE1YzkyZDEwMjY2ZjUwODUxZWQ0Y2UzMDM2YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX3V6qIVbTlB28HBl9tNwSotT74I
/BEDskPDIH3Yfgxj6nYWmYy2CF7QYHF5MwbDxaN7/n3GErqbkFiL6mrOZUFVPIRh
JPNQd7RnYZEY0+nnlmvwayzPKosTb20PwjZYVt9zh/W5rS0yXei4GaeITCRUbxpf
WWJdq3fd9KZOkKK5pa5LIxC+dkY26tf1Oa9lD4gE/UbGqI/MNzfiGX/BF9UsOH2p
wu4Ze4vv6Sjq2udjpi6v0ol6HUmaL1Fnvw8pp3AeNqYBH40pgeP5MHaHf+Z19f1Z
eiFVQxLxdAqxecl4ESFqZgHmNI8jurRnhXYerjyuCiePtHjnaHBkFyJ8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg4cA1PmlyS0QJm9QhR7UzjA2yRMB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfu/dZkr
VnZGtctLnZQJmQ9IZZC+Id8fJcZ4nWbVwKp2C7qpEOybOUmeXJGz0oSX11TTtzEw
tJQwkdEHYI3kOvqHfjErmqZp3hzKtBZKBJ7aWmS33iki4H74IQxCaVlqFoOSfRb1
vXPZ78wHLFx2m9SUEaKX241LKHAqS0u9ePwBFXGzVRNHNSMUkbcgLd+7JoqOvwDq
Jpa0NA7lqq1Vp+22qNwlo5bUqYbnK7fJXmGUWsVMcE+JhD7etrgV+YNK+fzG/tW2
8Vk57ITciGiPaPSK2oiY/finwoiPIlYP0Ini8LoxuEgUvpHJvLvA3GurT5k1UzRh
nxXtN/iMcOD8ug==
-----END CERTIFICATE-----
Generated at Sun May 11 04:25:38 2025 by rpki-client