Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: Khxb865/IrHWeg1+ocB2qTWKGWon1efnbK5X2G27AvQ=
Subject key identifier: 30:96:7D:C6:FA:FF:68:0A:90:92:0D:FB:C7:72:10:D7:E2:6F:2B:20
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 019769CEFCE45C5CC801D50F2CF8D55354BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: 8vJYlmusA3nRPNeYQdec6etdVIrGEEyvTu2KvrvDw5A=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:fc:e4:5c:5c:c8:01:d5:0f:2c:f8:d5:53:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=30967dc6faff680a90920dfbc77210d7e26f2b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:eb:67:bd:ce:ef:76:d2:31:3e:68:7e:a9:
73:a1:20:a8:43:36:cf:ca:e5:6b:72:9e:5f:54:39:
1c:c5:22:8e:32:80:61:a1:b2:5e:3f:4b:d4:1b:2b:
02:6b:0a:4d:c0:6e:54:e3:b0:fe:16:31:f2:2e:d0:
06:27:2d:88:2d:f7:4f:b0:b4:b4:da:05:db:43:7f:
f0:3f:f3:da:3d:0b:e9:2f:5b:a0:be:6c:b0:e0:f2:
21:92:1c:95:76:a9:b8:03:95:26:f1:52:66:8b:3d:
3c:67:bd:96:f9:9a:ca:d1:58:d8:50:c0:5f:1c:f3:
59:95:0b:54:a3:8b:19:44:74:eb:4e:24:19:03:8f:
71:b3:9b:bd:f3:2f:3e:93:e4:0c:7a:99:8e:73:d2:
d2:a0:ea:cf:30:c6:73:22:fa:c3:78:fb:e7:26:35:
e5:be:75:eb:f7:78:21:c3:72:3a:6d:4d:51:6d:8d:
b5:f6:17:21:4e:9b:20:86:60:d0:19:81:56:27:d8:
fd:23:81:d0:9e:c1:4c:85:81:25:e2:b0:5d:02:9b:
69:e3:fc:33:85:0f:39:09:31:8e:a6:b1:be:45:59:
17:37:3d:2d:71:3d:2a:44:01:b2:be:45:90:f7:14:
79:04:01:bc:c9:c8:c9:c1:19:e8:a7:55:36:33:94:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:7D:C6:FA:FF:68:0A:90:92:0D:FB:C7:72:10:D7:E2:6F:2B:20
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:07:7a:54:4c:45:89:af:b7:a2:a8:5b:1e:bc:90:9b:c9:6e:
50:cb:a7:35:25:18:d9:c4:bf:ce:cb:41:3d:9f:36:f6:a2:63:
3a:88:ac:dd:46:e9:8f:ef:fe:de:ea:0a:08:43:57:db:23:4a:
42:31:c4:a8:ad:29:81:67:3c:6b:f9:f6:fa:c4:72:86:90:9f:
d4:c5:b7:65:55:76:97:be:14:b8:bb:8f:08:2c:24:fe:86:93:
a6:79:2d:bb:1f:11:59:e5:db:f4:a6:ed:0f:bf:23:d3:ae:d6:
30:08:0f:27:29:73:8f:4c:2b:b9:9b:82:7b:e9:72:6f:32:65:
ea:2f:81:dc:07:8a:18:91:9c:51:8c:42:f1:58:f1:30:f3:50:
aa:06:ae:81:f1:c7:ad:92:80:f9:38:25:f0:4b:00:ef:49:18:
a7:3f:3b:e4:60:16:47:e9:ff:5f:02:5b:60:19:91:18:ff:81:
ed:91:d4:48:d7:fb:33:d6:90:e8:4d:7c:87:0e:8a:cd:c0:89:
ea:8d:8d:d3:72:86:8a:49:14:aa:c7:d9:e1:85:58:45:fb:24:
b6:76:e1:70:53:07:9e:71:1e:24:eb:b8:ed:2a:60:b8:65:85:
c5:da:ba:b6:63:23:ef:86:7b:b2:89:43:08:8a:d8:cb:7d:89:
12:8e:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:02 2025 by rpki-client