Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: uBkaXCmfiryb2pjaM2KZmEVpqrgOMyd6TlsuVBRaprM=
Subject key identifier: 25:FC:5B:4F:41:9E:A4:2C:FE:66:C0:07:34:20:24:21:FE:3E:A0:AA
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 01969E6319520E87F2993D0D7ED7EEFD5E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1143
Signing time: Mon 05 May 2025 03:00:16 +0000
Manifest this update: Mon 05 May 2025 03:00:16 +0000
Manifest next update: Tue 06 May 2025 03:00:16 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: aMFCPgAVgT/0TB5ZpQ2zEhwYV+VgdFMoPWF0Yefn2r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:19:52:0e:87:f2:99:3d:0d:7e:d7:ee:fd:5e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: May 5 03:00:16 2025 GMT
Not After : May 6 03:00:16 2025 GMT
Subject: CN=25fc5b4f419ea42cfe66c00734202421fe3ea0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:d3:1a:51:41:92:13:cd:e5:a9:6c:a1:d1:
0d:da:b0:7f:aa:5b:b8:c9:03:df:fd:01:45:f2:ef:
37:53:b6:e9:bb:56:cf:0d:8b:21:55:95:75:2a:c7:
13:63:f3:58:0b:03:ad:05:75:62:72:9a:41:76:54:
b6:df:bb:25:40:39:dc:fe:4d:b8:16:50:dd:2c:42:
1e:90:51:31:3b:22:17:5c:84:3b:aa:09:fb:9f:90:
c7:b7:6a:21:1e:36:5e:48:4b:28:1b:a1:4f:4b:fa:
58:60:7e:a7:32:e9:e6:46:a5:e6:57:f4:f7:16:b3:
af:2d:d0:eb:d6:a0:7c:d3:96:78:2e:12:64:31:7f:
2d:ef:a0:66:76:16:47:d8:31:3b:17:2a:6b:60:c2:
b1:1e:42:2b:ce:47:3c:ec:4d:21:ca:a7:1d:ab:83:
56:2e:96:b9:72:4c:b8:8d:71:9e:49:f5:8b:82:3a:
61:bf:ab:44:2c:9b:e9:e1:54:47:b1:02:9d:cd:00:
11:07:98:4b:d7:f3:d0:ea:4f:37:db:e3:31:09:e8:
f6:6e:ac:0d:23:10:5b:ab:40:85:fe:07:73:b9:02:
9e:e4:cc:fe:58:d0:31:e8:75:ac:c1:65:e5:47:80:
a0:35:8f:d1:df:02:ab:33:86:2e:47:fd:f4:b5:60:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:5B:4F:41:9E:A4:2C:FE:66:C0:07:34:20:24:21:FE:3E:A0:AA
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:fc:27:ce:b5:9b:48:de:6b:5c:09:40:7d:fe:5b:01:f0:
81:2e:fe:f9:ea:4e:e7:de:e7:97:1b:da:bf:f4:35:18:a3:67:
37:14:20:c9:49:7f:85:3e:0b:21:1f:a6:bf:64:6b:7f:f2:6a:
37:25:0a:1b:9b:a2:9a:68:0e:e4:b9:64:da:8f:fc:f9:16:9f:
31:e8:9c:9c:24:62:15:2d:2e:1c:3b:c9:b6:82:d8:83:1c:cf:
ec:1a:29:55:db:cc:2a:a6:54:d5:e0:bc:87:14:49:ed:40:b6:
52:61:5c:1f:52:67:b3:5c:73:e1:3f:e5:15:40:83:1b:38:68:
4d:c0:4f:eb:fd:ea:ca:28:0f:f4:0a:81:e7:43:68:1e:dc:cc:
32:33:c1:5d:6d:84:1e:16:90:14:f1:a2:63:02:1a:e1:d4:8c:
ab:06:39:dc:42:ee:63:9e:df:cb:db:ca:40:c3:fc:d7:e0:c8:
d5:f1:12:aa:8a:c7:9b:7f:66:96:9f:7f:1e:8a:e7:38:82:ae:
eb:5a:9b:8d:95:df:f0:ca:c0:57:01:ae:99:6d:5f:e8:ea:6b:
47:4f:1a:66:d6:61:2c:6a:99:ff:93:1e:2b:8d:4b:4d:29:76:
96:cc:d3:52:d3:2b:7f:17:f8:e2:52:95:59:bb:f8:df:76:9b:
ad:db:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:12:45 2025 by rpki-client