Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: 5DzGmuOgD3+uzuomID/u6T7eCziZ9bn/EnQ0UWtUoVc=
Subject key identifier: D9:01:83:AA:2D:2E:45:81:CA:B6:CD:B9:4F:E0:55:EC:3C:0E:60:38
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 01969E9A189028E63CEC81621CD9436420D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 0CEB
Signing time: Mon 05 May 2025 04:00:21 +0000
Manifest this update: Mon 05 May 2025 04:00:21 +0000
Manifest next update: Tue 06 May 2025 04:00:21 +0000
Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: EOc5NXhbvgHt+96QXSDxwX6RlyweS2KODACAgAWl/KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:18:90:28:e6:3c:ec:81:62:1c:d9:43:64:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: May 5 04:00:21 2025 GMT
Not After : May 6 04:00:21 2025 GMT
Subject: CN=d90183aa2d2e4581cab6cdb94fe055ec3c0e6038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:0d:8f:cb:68:78:04:4e:1a:9b:23:fd:5e:
9f:54:54:e3:20:64:3f:82:7a:68:ae:1b:de:a3:c0:
db:95:d2:61:7f:d2:62:58:fc:0b:aa:05:99:1f:73:
7b:bf:ff:ca:75:46:e2:00:9c:19:73:ec:c9:5b:7b:
98:36:16:4a:28:51:bb:7b:d9:7c:00:0d:00:0a:c3:
ca:19:e6:68:26:d7:21:9c:1a:bd:c7:76:bc:7f:20:
dc:39:ff:04:41:88:9e:49:7e:13:5a:05:6e:5e:8a:
2f:54:43:9b:65:3a:86:b5:2f:86:0f:ff:d0:8e:41:
7c:63:67:8c:4c:33:52:98:3a:c7:23:d1:99:b5:15:
25:c5:9f:db:f7:75:a1:a5:8d:e6:88:ae:9a:bd:0e:
58:9a:4b:e7:6a:0a:a8:f7:a9:3c:a8:bc:86:2a:a3:
cf:48:85:17:d5:34:66:ff:cc:05:e7:67:b9:29:d1:
46:75:a5:fc:9e:99:47:fb:fb:86:fb:7f:81:6d:a1:
a8:37:12:ec:43:e9:69:72:6a:c4:bf:65:e0:9b:24:
10:4b:eb:cd:17:65:ab:24:1e:fa:d4:c1:db:c2:26:
44:a8:f4:99:a9:8b:96:97:77:66:5b:9c:b1:c2:0e:
6e:2a:60:49:5f:a5:63:ed:a3:2e:4a:7c:cc:d1:83:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:83:AA:2D:2E:45:81:CA:B6:CD:B9:4F:E0:55:EC:3C:0E:60:38
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:33:ea:83:3b:91:21:c7:aa:02:87:8b:e9:86:3f:30:79:
a7:50:33:df:fd:03:8a:b4:0e:87:d3:58:28:09:23:97:03:17:
36:c6:00:30:10:4a:30:10:72:84:b2:6b:fe:2d:53:e5:64:05:
3c:c9:40:26:8f:af:46:9d:63:3d:1a:bc:70:b1:ee:16:34:2c:
f2:19:52:ad:0d:25:b1:49:3c:3e:74:be:e2:a3:2f:3c:b3:b3:
b1:88:1b:4d:48:29:26:58:5a:40:59:18:3c:d0:bb:b4:12:23:
4a:98:ed:d6:1f:b3:23:f4:e3:5f:f1:a8:f2:3d:4e:ce:c7:04:
66:42:61:65:e1:fc:68:36:be:c0:49:4e:a5:55:fd:57:c1:d3:
21:78:25:dd:23:2f:82:10:22:21:1a:be:07:b2:d2:2c:f1:69:
bd:06:2e:f7:b0:bd:97:9f:4c:c9:e8:ff:8e:37:db:b2:e9:dc:
92:97:d0:a5:25:87:14:29:73:dc:04:9e:53:a8:60:56:38:9e:
cd:97:6f:49:1b:a8:2b:ae:fe:d1:5b:c2:5e:f9:25:52:8e:2b:
44:b5:0e:48:e4:94:17:29:42:1f:4a:f9:da:41:52:24:5c:2b:
ab:e5:cd:94:13:05:4f:95:13:de:bd:5a:fe:00:6a:2b:87:33:
fa:a0:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:54 2025 by rpki-client