Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: WGIoDl8Mt8pn25XZlCVrE/Bo5zQMnIYi4MdWpiyIw5I=
Subject key identifier: 8B:D0:2F:94:0E:00:71:06:8F:AB:B0:94:F6:B0:F9:C3:7F:B8:5D:AD
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 0196BD126FB5152470B3A3F1E2ADBC1685B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0422
Signing time: Sun 11 May 2025 02:00:24 +0000
Manifest this update: Sun 11 May 2025 02:00:24 +0000
Manifest next update: Mon 12 May 2025 02:00:24 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: SXZWy0kxkCgVkG8OhBAT09QfzH9WUiDycUb766iRgJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:6f:b5:15:24:70:b3:a3:f1:e2:ad:bc:16:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: May 11 02:00:24 2025 GMT
Not After : May 12 02:00:24 2025 GMT
Subject: CN=8bd02f940e0071068fabb094f6b0f9c37fb85dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:b6:50:22:2a:ce:63:e6:d6:c0:1e:5e:43:
d1:61:d9:72:b9:ae:b6:6a:c0:39:88:72:6c:0a:d1:
45:cd:a5:b8:68:49:3c:f8:07:4b:78:58:1c:6b:d1:
2c:7b:95:b0:9e:44:8d:10:21:f6:a6:fa:be:cc:ff:
fc:6b:85:f9:00:ba:20:02:96:c1:77:0b:d1:90:4d:
2d:b5:8b:5f:e9:8f:f0:37:e2:88:b9:0e:f7:bd:be:
d3:ad:99:8c:16:81:a8:2d:7c:f3:5f:7d:d9:e9:2c:
9f:2d:35:50:ec:0e:d7:67:34:51:bd:aa:d6:c6:e7:
22:90:7f:0f:14:2f:31:2d:39:a9:bd:c4:56:90:24:
b0:2a:a2:70:d4:0c:c9:f5:de:61:30:8c:c6:1e:90:
6d:60:db:54:f5:1f:af:a9:53:38:d4:da:79:53:6e:
a8:4e:92:a2:68:6b:e0:47:07:c1:c8:53:c0:3a:93:
c0:af:3d:2f:4c:e5:36:c4:18:47:42:4e:2a:0f:ec:
bb:33:da:14:f9:28:ca:cc:70:24:63:7f:07:12:b9:
6a:fc:20:e9:2a:40:65:12:8d:bc:6b:08:2a:ee:f2:
06:d6:de:09:82:60:3e:3a:00:50:8f:13:bb:2f:aa:
94:56:89:12:30:bb:37:9f:f4:cb:97:e4:87:d9:35:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:2F:94:0E:00:71:06:8F:AB:B0:94:F6:B0:F9:C3:7F:B8:5D:AD
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:b9:cf:79:46:83:72:a1:e3:81:7a:ca:f5:2a:a0:ea:9d:
92:35:b9:8c:5d:d1:91:43:2e:46:d1:e7:15:45:c9:8c:7d:b0:
cf:4b:74:d9:7c:d1:fb:54:ab:d0:fc:d1:93:bd:d7:7c:ae:9e:
06:7b:e5:85:f7:31:c3:72:91:e7:36:98:13:68:75:5b:6b:e1:
10:4d:8b:98:b5:0a:a2:88:dc:56:39:42:7c:98:2f:55:3b:26:
92:70:47:2a:e7:fc:2c:4a:13:c6:7f:93:b0:ed:fa:39:ec:c4:
19:9d:cf:ef:b6:bb:8e:c4:3a:e5:a8:a4:0a:23:f2:f0:4d:c4:
0a:4c:b7:e7:48:f7:d7:e9:ad:42:11:84:e9:3c:75:6d:d6:6d:
f3:73:e5:3f:a7:77:cd:b6:eb:c2:9a:3d:b1:9d:42:4f:0f:68:
f1:b7:1e:f8:af:c2:c6:d1:50:d2:8c:3c:a2:a8:88:26:0e:d3:
a6:d6:71:bf:90:25:34:22:09:cf:9c:78:6c:0d:2a:71:a4:1c:
59:90:29:85:ae:f8:5a:47:d5:77:f8:13:22:a7:08:2f:84:3a:
33:d5:15:b1:d5:cd:8b:7c:5a:f3:49:76:d6:27:4d:8b:18:9b:
35:98:d7:31:f4:fb:ad:03:8f:1f:f6:98:72:25:14:25:8a:76:
34:44:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:57 2025 by rpki-client