Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: u+lS+uace5rqEFd2wLRr0/BfgjolyDm+E9ru9znPlV4=
Subject key identifier: 57:F0:C4:A5:C4:50:46:1A:53:48:4C:4F:F2:12:24:FA:C9:7A:8C:01
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 0197782F29687102413D278A9BBB88C18049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0C3B
Signing time: Mon 16 Jun 2025 10:00:46 +0000
Manifest this update: Mon 16 Jun 2025 10:00:46 +0000
Manifest next update: Tue 17 Jun 2025 10:00:46 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: OYwgBDjo2A/G0BcUFNrNFHrvtHzIPLdXF1/RQSvJd+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:29:68:71:02:41:3d:27:8a:9b:bb:88:c1:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Jun 16 10:00:46 2025 GMT
Not After : Jun 17 10:00:46 2025 GMT
Subject: CN=57f0c4a5c450461a53484c4ff21224fac97a8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:0f:7d:01:0d:6b:b1:ac:36:6d:7d:4a:f6:
4a:8e:1d:a6:8c:a4:04:a3:47:ee:2a:15:31:6b:dd:
b7:31:cd:7b:b5:84:ce:d2:ac:83:bb:8b:9d:ab:3e:
03:45:6b:da:ae:5a:42:90:14:67:ed:ce:69:d0:11:
66:3c:70:0a:98:b4:25:bf:0c:41:64:c7:d8:87:71:
28:a2:1c:ab:fd:68:9a:d2:6d:9e:95:22:df:60:39:
e3:bb:8c:bd:7f:f8:aa:9c:2f:0f:c5:f2:85:b3:d6:
e1:4a:91:8e:99:c3:24:c2:89:ed:34:a6:ec:53:59:
1a:f9:79:54:d1:57:0e:70:27:af:95:11:5c:3f:3e:
4d:d2:0b:c8:6a:b4:7b:16:c9:50:fb:8a:ff:87:7f:
6c:99:10:be:e0:ea:6b:9a:17:54:07:b9:d7:4e:ba:
80:9b:06:0a:f7:8b:ba:39:93:5d:7e:d5:6f:fd:5d:
19:c5:e5:a0:b1:10:43:56:a5:05:53:7c:99:bc:56:
90:c6:d6:2a:72:e4:12:b7:f6:d6:32:f1:e5:ae:7e:
5e:a2:c5:9a:a2:9a:12:17:a9:b8:2d:25:e3:3d:15:
5c:b5:f2:db:48:53:d8:66:f4:b2:fb:c8:39:e4:6e:
bb:8d:27:f0:2f:19:c5:fb:53:5e:32:e6:9f:35:66:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:C4:A5:C4:50:46:1A:53:48:4C:4F:F2:12:24:FA:C9:7A:8C:01
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:c9:f6:fc:51:19:94:ac:cd:67:21:66:b7:83:17:49:36:
c0:ac:55:e7:06:05:f2:24:81:45:75:9d:a1:d0:c7:18:6c:ef:
09:75:3e:9e:aa:a9:cb:e8:c6:39:8b:43:7e:e8:8f:0c:d0:12:
11:33:6c:21:21:8c:43:dd:f7:6d:a8:3b:05:f3:91:a9:74:ec:
14:92:62:d2:e5:07:07:af:09:5a:42:eb:3a:70:f9:5d:3b:42:
ec:fa:02:3b:4c:73:8a:c2:cc:17:17:5d:15:b8:e5:cd:ef:12:
24:96:a2:8a:ab:ce:45:2b:ca:c7:63:e4:73:08:98:e0:d7:e7:
e4:87:41:0d:d0:f8:a8:09:e9:a3:39:12:d0:72:8a:13:ff:73:
b7:0c:03:53:0a:7b:f0:21:fa:08:33:b0:52:d5:66:01:f3:86:
b5:ad:d6:c9:04:cf:9f:02:9d:03:73:45:39:ea:9b:75:ce:1d:
4f:4d:36:69:18:58:39:00:12:4e:90:db:12:88:5f:8e:27:fa:
bf:e9:d1:4f:6d:c6:97:c8:2c:e9:e3:4a:3a:be:e1:f4:5b:1e:
87:04:5c:10:ee:4e:dd:f0:f0:4f:f9:dc:f7:6a:cd:cb:75:67:
9d:10:77:14:d4:c0:97:50:e9:08:2b:dc:2e:7d:1d:67:7a:8a:
6d:68:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:07 2025 by rpki-client