Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: 4ypDqHqFR6nv79MEN/i5q1ntzkgwc3bdUE9j5h3kI8M=
Subject key identifier: C5:C8:BA:16:09:F6:35:51:B7:76:59:25:F9:40:0B:A8:0E:C1:14:F8
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0197684DEF5424CA48E9A975E24641F58F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 0294
Signing time: Fri 13 Jun 2025 08:00:27 +0000
Manifest this update: Fri 13 Jun 2025 08:00:27 +0000
Manifest next update: Sat 14 Jun 2025 08:00:27 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: sHeWcmieobc3iptcGQMNaMsUm9J6MX6CYQS9XnR2Mhk=)
2: RcZOQzwVPzta74FZUHn3H3BrDfw.roa (hash: V0krQJ1xo1MEn7oEhb7Dh/z9l1NykVrobd6V77UbzAQ=)
3: _ZjRtovsCOJczXTJb78gNEIXWRA.roa (hash: o+YLeLrWzFxVnwd97MbT9/S72tuJZDl5Wl2Z8cJ7fEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:ef:54:24:ca:48:e9:a9:75:e2:46:41:f5:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Jun 13 08:00:27 2025 GMT
Not After : Jun 14 08:00:27 2025 GMT
Subject: CN=c5c8ba1609f63551b7765925f9400ba80ec114f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:99:5c:36:99:92:e0:03:68:d1:4c:77:0f:
07:ec:4f:2d:73:12:a7:6c:20:1c:ea:ef:47:aa:0c:
36:5d:32:be:a4:63:e1:5c:e2:c8:99:27:32:8e:88:
db:c5:dc:d0:a3:4d:2a:26:fe:b0:f3:f6:9c:79:5a:
46:e8:72:32:91:01:49:3f:84:61:f6:44:cc:75:41:
9b:33:da:05:ff:55:18:11:71:60:74:2d:4d:bb:0f:
4d:52:a5:c7:48:d3:1a:7b:fa:e2:76:20:5b:79:36:
70:b6:40:e4:5b:47:06:8b:9a:f8:61:2c:97:c6:11:
81:ab:e8:b6:e4:e9:3d:de:6e:36:ba:73:5a:b4:2a:
bf:80:45:fe:1d:3b:9b:7d:67:a0:c5:6e:a9:13:b9:
0b:a8:ef:21:35:e3:d2:2d:e8:2a:03:15:17:ac:60:
68:83:7a:76:8a:a6:b8:b9:ea:8f:47:c8:05:cf:4e:
38:6d:41:1f:d2:b2:80:f3:f4:da:f1:28:fb:c8:16:
f5:db:df:62:7b:50:c6:07:92:51:3b:ef:1e:3c:e7:
2c:72:bc:e7:02:89:7f:00:43:9f:3d:1a:8e:c2:62:
8c:14:9b:1e:fe:1e:c7:bb:9e:a3:3c:cf:1f:f6:eb:
85:5b:c0:1f:93:f0:bf:20:ee:ba:e6:23:02:78:c5:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:BA:16:09:F6:35:51:B7:76:59:25:F9:40:0B:A8:0E:C1:14:F8
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:3c:6d:73:fb:5e:b5:d1:75:57:38:c5:8a:4d:8c:5b:fb:
51:e3:32:19:2d:b6:57:f7:0d:f9:05:d8:cb:9e:46:af:b8:8b:
c2:3d:89:d7:2e:b4:e0:a0:c1:95:c1:18:72:59:8f:7a:6d:1e:
9c:38:03:bd:1c:bd:1f:37:fb:ec:fc:da:af:32:e4:5f:52:3d:
f8:ec:da:21:66:d7:02:56:f8:77:2f:49:f4:1d:12:3e:7c:b9:
c4:80:08:35:23:5d:a2:82:be:0b:33:19:a0:eb:29:ff:0e:53:
68:d1:86:e6:d2:54:94:92:92:24:74:b3:e8:54:54:47:44:8e:
bf:ae:e7:02:02:5f:b0:af:7b:a1:47:07:e4:f9:ab:29:1a:77:
d0:f6:cc:10:33:1f:7f:50:7a:fb:7b:de:57:f6:14:b2:16:39:
07:4a:54:49:28:9e:df:b7:55:c8:34:10:4e:b4:9e:f0:df:fb:
8d:9c:3e:72:02:70:cd:e3:72:b2:c2:ad:44:00:8e:5a:89:49:
40:db:c4:0c:fe:7e:6f:2c:c1:a3:d8:f4:6b:86:fe:ec:4b:d9:
b8:41:55:ce:e4:cc:57:59:1c:d1:dd:1a:a3:4f:53:63:ed:2e:
19:68:b6:40:2d:fd:8f:d3:8a:31:a7:9d:37:a4:47:33:ab:05:
ca:f0:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:32 2025 by rpki-client