Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: d40G06cZJ/aIoz2eNpPBf1sFgyAIFHRFN707TdFrO5Y=
Subject key identifier: 25:A5:2A:DD:A9:F1:F6:C8:20:D6:4D:0B:00:7E:9D:F3:D2:39:B0:0F
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 0196D2BE5FC6386795CBD76B5ABC3ECFA336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 153A
Signing time: Thu 15 May 2025 07:00:13 +0000
Manifest this update: Thu 15 May 2025 07:00:13 +0000
Manifest next update: Fri 16 May 2025 07:00:13 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: BUnpDeRrtrSgtERCoZA0ul/5yz8zUU8gk6u67HjGyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:5f:c6:38:67:95:cb:d7:6b:5a:bc:3e:cf:a3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: May 15 07:00:13 2025 GMT
Not After : May 16 07:00:13 2025 GMT
Subject: CN=25a52adda9f1f6c820d64d0b007e9df3d239b00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:be:c0:0c:a0:2c:47:f0:01:e1:bc:89:c4:
3c:0f:7d:a8:26:79:23:4b:10:5c:1a:c3:bd:fe:4b:
66:e5:34:2a:1d:eb:50:5c:95:76:b0:0d:7c:0c:41:
36:30:cc:77:19:9d:45:15:1b:94:ba:5f:95:e6:8e:
a9:bb:a2:8f:f2:58:f6:87:03:6c:81:31:d1:51:4a:
0d:f5:87:02:a5:3a:35:6e:d6:ce:6d:1d:bd:49:33:
8b:ad:60:25:36:da:16:b1:65:db:f1:1f:e3:15:d6:
cf:fe:45:ce:d9:19:64:8c:23:72:c4:2e:41:b1:3c:
15:76:56:bb:c7:a8:63:71:bf:91:74:14:3f:ef:66:
98:0d:0e:13:4b:12:7d:54:70:43:01:67:0c:6e:df:
00:78:f8:31:bf:57:70:d3:13:d5:8a:2e:6c:18:34:
29:42:27:ec:5e:e7:b1:e4:7d:5a:bc:fb:00:01:04:
ee:da:01:f5:cb:cf:16:84:fc:82:64:7e:66:c5:4b:
8d:60:f3:32:fe:9c:cd:f3:88:1b:08:25:e2:48:8c:
28:f4:38:ba:e4:1b:cc:bf:45:54:df:d1:0d:90:94:
2a:ca:82:c1:a7:a6:7e:88:e7:18:79:bc:cf:d1:97:
bb:32:92:65:a4:03:a6:73:17:86:33:60:33:d7:70:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:2A:DD:A9:F1:F6:C8:20:D6:4D:0B:00:7E:9D:F3:D2:39:B0:0F
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b0:c6:85:e2:01:85:24:38:cf:98:fa:37:2f:41:55:75:0c:
60:29:d1:51:17:2a:ab:47:02:70:0b:1f:09:4c:bc:57:41:4e:
59:7f:a1:56:d9:71:c4:5b:2a:99:10:56:61:a3:23:90:eb:68:
77:76:ab:bf:9a:01:24:e9:1c:23:fb:a2:66:18:8c:bc:15:ce:
a1:8f:cc:6e:55:39:75:75:7c:ca:16:b3:0a:7c:1f:02:77:5d:
93:39:43:2c:fe:01:f7:e2:ca:67:ed:e3:8e:8e:88:01:44:6f:
c5:9d:78:af:dc:00:05:18:c8:5d:ac:e5:33:62:be:36:8e:be:
2b:53:d9:a9:e3:b5:a6:b6:fe:71:4b:f9:a0:33:58:63:b6:c2:
bc:9a:0c:fc:40:13:ec:51:17:0e:af:ee:5c:66:0d:d0:c3:2b:
39:e5:a6:85:8c:42:94:52:70:2a:4d:a2:66:3d:ce:d7:fb:1b:
a7:7a:dd:1e:8f:70:d4:1e:07:f9:07:2b:8b:a0:8c:8c:a0:65:
b8:33:f5:b3:71:5c:2c:f0:ad:64:79:34:56:99:76:11:56:48:
42:76:84:37:d0:67:54:bc:8a:b3:66:f2:5a:16:16:88:87:a4:
7f:c9:f1:21:b8:50:69:da:4c:b5:df:80:19:aa:21:30:77:1f:
00:5b:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:13:13 2025 by rpki-client