Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: Pt7rDXc0Sb1snmVeKYd1ca7IYhZ09vWSZwAI/Y4x7Gs=
Subject key identifier: 0A:2B:43:21:39:FA:EA:D6:70:95:72:FB:92:BE:CF:A2:1D:57:48:36
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 0196C495126D0430D4CFED2E50F49B3F70B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 13:00:25 +0000
Manifest this update: Mon 12 May 2025 13:00:25 +0000
Manifest next update: Tue 13 May 2025 13:00:25 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: SGobsmjiw62acDY65PHYw9w54QPhpNiOcepeodkupDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:12:6d:04:30:d4:cf:ed:2e:50:f4:9b:3f:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: May 12 13:00:25 2025 GMT
Not After : May 13 13:00:25 2025 GMT
Subject: CN=0a2b432139faead6709572fb92becfa21d574836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:b6:a9:db:55:9c:0c:2b:8f:e5:b9:9c:6f:
5a:2f:54:cc:33:c6:9d:20:f8:17:18:31:fe:76:c6:
9d:f2:2c:ca:95:7c:6a:1d:3f:5a:38:b8:c7:db:80:
e7:e2:b3:a4:66:d2:8b:46:04:3f:89:05:89:4e:fb:
7e:b7:43:d3:6c:ab:28:aa:d8:16:82:84:41:17:ac:
61:14:11:28:06:79:91:57:f4:7a:ec:ce:2b:cd:52:
13:e3:69:7f:27:79:1a:42:d1:42:f7:4e:a1:b5:9e:
26:46:f7:68:4a:51:47:d8:90:50:16:ed:0e:c7:f6:
e5:d9:e2:be:ca:76:f4:05:84:50:29:91:1e:d8:33:
37:44:92:b6:03:6e:17:bd:ad:25:98:9b:60:19:bd:
4b:48:a2:df:23:c2:5a:ea:21:1c:ee:6b:f5:14:6f:
c1:fa:51:3a:82:66:92:e6:13:23:cd:87:46:9a:4d:
20:72:cf:ad:51:35:26:ac:55:76:8b:d6:95:54:3a:
1f:29:c4:4a:9e:e8:2f:55:54:20:79:4b:6e:5c:41:
7e:d7:28:2f:e3:38:a8:26:c4:1f:55:e9:77:9a:62:
24:ae:d0:c2:68:91:ab:3f:28:29:16:71:8a:ea:07:
ba:f4:dc:f1:b3:0a:47:29:3c:e9:78:71:90:d4:95:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2B:43:21:39:FA:EA:D6:70:95:72:FB:92:BE:CF:A2:1D:57:48:36
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:01:d1:4b:87:d9:62:85:79:7b:b7:f2:35:75:5b:13:aa:
73:1c:d2:9a:35:9f:fb:03:21:5e:8f:da:cc:2f:f4:d2:f6:a8:
8d:ed:2e:e2:91:6b:01:68:35:8b:4d:49:99:94:51:aa:99:3c:
a5:93:e2:63:82:8b:ff:45:cb:82:a5:0b:62:b4:95:a5:2b:7c:
3c:92:20:e1:bc:5c:ee:ac:ca:35:db:4e:b4:e8:13:08:f6:bd:
7b:a5:a6:bf:23:74:b5:df:77:c9:1a:20:2f:40:3f:ab:eb:08:
bc:3b:58:b0:4e:36:49:59:8b:76:33:1b:cc:6a:17:4c:35:74:
4a:c5:e4:79:76:1c:f2:e5:fc:29:79:4d:c9:3c:b1:f0:25:a0:
f4:57:34:33:c7:10:1e:62:9e:fd:e1:20:af:8b:14:d0:aa:ab:
12:e7:d7:ce:29:66:80:99:5f:bb:01:3e:c1:ca:be:3c:b0:b8:
2c:a2:5c:7e:d9:8b:af:c6:e7:39:68:18:b5:f9:98:38:55:3b:
2d:17:bb:2a:05:35:21:bc:76:68:37:e3:08:85:2d:ff:25:46:
dd:0d:4c:f7:02:92:13:f3:bc:00:2b:59:96:4e:83:06:5b:66:
e5:47:ab:e2:13:8d:50:a5:7b:47:30:d3:69:b7:98:6c:48:09:
1e:8b:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:17:08 2025 by rpki-client