Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: qm45fpu0pYTSUDPt0RvxfIjJoNEU3u8Y4rFmdSvVBp4=
Subject key identifier: 47:49:2B:C3:C7:E6:44:FF:4A:55:AE:37:83:85:5A:E8:48:AF:E6:B8
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 0196BA12149AF5837EC3B372445D045AC782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 087D
Signing time: Sat 10 May 2025 12:01:09 +0000
Manifest this update: Sat 10 May 2025 12:01:09 +0000
Manifest next update: Sun 11 May 2025 12:01:09 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: K7tlWNG/VI+ftYNEwBWcER0Uk1vk0FOjLekNgnrWtiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:14:9a:f5:83:7e:c3:b3:72:44:5d:04:5a:c7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: May 10 12:01:09 2025 GMT
Not After : May 11 12:01:09 2025 GMT
Subject: CN=47492bc3c7e644ff4a55ae3783855ae848afe6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:0e:32:4e:5d:b1:66:60:b7:86:91:84:ff:
b5:0c:fd:c4:40:93:2a:9b:2f:c8:e8:e7:b0:e6:83:
f7:bd:28:32:db:7c:e1:f6:7a:0e:73:95:80:b4:c6:
60:97:17:68:22:ae:e1:c1:46:36:6a:11:5f:02:9e:
0e:5a:3f:86:d9:10:64:f7:e2:86:fe:31:6a:db:2d:
94:78:32:90:73:2d:6e:4b:66:77:80:d5:59:a9:50:
02:0a:d0:22:89:08:64:a4:c9:c3:78:3e:00:47:2d:
19:66:07:a6:77:9c:91:a9:5f:da:ea:99:1e:cd:68:
96:e4:74:da:2d:c6:90:14:2b:92:71:3c:cd:74:cb:
80:f1:52:94:65:5d:8c:06:71:1e:33:c6:93:74:80:
cc:df:27:7a:00:54:a5:ea:e7:dc:ef:6e:d4:68:3e:
b7:9b:44:72:c6:6e:81:ce:a0:67:a1:d9:d7:fe:a7:
57:50:0e:fb:9d:bf:ce:ea:17:b3:8f:bf:6a:ee:c0:
02:a2:37:8b:3d:d4:a1:94:d5:21:7b:50:6f:da:66:
1a:4d:29:4f:71:74:02:ac:61:a9:da:d6:68:da:73:
1f:19:bc:08:a4:5a:14:2d:50:54:74:3c:71:d1:f2:
d2:0b:7f:ba:6e:76:51:5a:ee:25:2b:fc:cf:30:98:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:2B:C3:C7:E6:44:FF:4A:55:AE:37:83:85:5A:E8:48:AF:E6:B8
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:83:c0:04:6a:63:46:32:44:30:02:d3:89:b1:32:64:68:
74:b1:ff:d2:fa:34:61:fe:2b:f2:6d:34:da:1f:49:3e:34:42:
55:21:eb:ea:14:b4:9f:80:18:93:4f:95:6b:50:4f:b6:2f:b6:
4b:19:df:b6:ed:de:8a:3f:69:c4:1f:ea:19:02:7b:ce:9b:a1:
c1:35:cc:b8:9a:63:4d:27:a6:3a:e2:e5:06:1a:3e:63:63:14:
cd:d1:62:3b:67:07:da:95:21:95:38:5c:da:ff:b9:08:58:6c:
8e:10:9b:29:d5:ed:86:7d:5f:b9:bd:e9:04:30:c5:4c:bc:df:
50:5e:05:92:dd:bf:ce:97:a1:94:b0:58:fe:fd:93:08:96:55:
7f:d6:41:62:92:09:0c:7c:ee:9b:4e:f8:66:60:07:81:85:43:
1a:a9:2d:e8:cc:b4:57:82:32:82:f7:f7:6c:71:28:56:98:36:
37:73:a9:1b:fe:37:d0:93:5c:13:56:55:50:26:12:82:c5:9a:
8e:8f:67:1c:08:39:a3:20:43:0a:4c:3d:06:96:21:0d:5b:01:
7d:05:d0:8f:99:6e:24:06:d4:66:d6:c5:80:dc:9c:9d:9f:dc:
e6:74:22:ea:06:43:d0:29:b8:1f:33:4a:b7:1d:bb:29:d5:19:
99:91:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:28:08 2025 by rpki-client