Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: LTqAmbPtr2twTkCHR7oaJ9SV8BTISKU+C+37gKc3maw=
Subject key identifier: 54:26:E9:DD:C6:60:3D:B5:37:35:55:6F:A7:7F:01:FB:02:2B:EE:D5
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 019683230B280F6C4BD952CF89864FF34F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0404
Signing time: Tue 29 Apr 2025 20:00:34 +0000
Manifest this update: Tue 29 Apr 2025 20:00:34 +0000
Manifest next update: Wed 30 Apr 2025 20:00:34 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: QYsy/S0Qs/gCgg2kruw7mWPpdwFpzLkbbLklh5+SuSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:0b:28:0f:6c:4b:d9:52:cf:89:86:4f:f3:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Apr 29 20:00:34 2025 GMT
Not After : Apr 30 20:00:34 2025 GMT
Subject: CN=5426e9ddc6603db53735556fa77f01fb022beed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:ff:13:80:32:ed:80:33:a8:d1:7d:36:3f:
5b:ea:72:2f:92:cc:8f:54:c6:db:bc:38:7b:08:af:
89:f6:2a:53:2b:b2:d3:84:40:4b:f6:17:88:b1:42:
5e:04:52:e7:56:e0:76:e7:e8:bd:41:9a:67:90:61:
d4:3e:b4:f3:b6:fb:14:22:34:6d:f1:90:2f:3b:34:
c1:01:f8:3f:f1:b9:73:eb:d4:9c:ef:ef:f1:1b:bd:
84:23:14:4e:be:8d:fa:e3:d1:fd:a5:fe:8c:f8:76:
03:b0:f5:29:b8:ac:09:9c:aa:88:e6:9f:b5:2a:7d:
6e:53:6c:90:e2:a9:53:98:9e:5b:8d:80:72:30:ce:
c8:95:19:39:8f:7f:8b:5f:c9:da:36:e6:4f:3a:9a:
c3:5a:34:32:ec:89:fd:8a:62:15:8f:87:26:7c:85:
bc:84:f3:f3:d4:4e:89:af:cf:1e:9d:32:e9:4d:7e:
20:a9:ca:1a:f8:bc:c0:37:d6:0d:77:bc:70:a7:d5:
f3:33:1f:11:4c:ed:42:4b:6e:a5:b3:e9:4c:af:bd:
7e:da:48:ae:20:88:2d:22:32:92:b1:37:bf:3a:d2:
9f:f4:3d:4c:02:2b:19:ac:97:5d:c2:1d:99:4a:a7:
be:c7:14:9b:f5:6c:34:c0:e0:c7:31:bf:82:b2:3c:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:E9:DD:C6:60:3D:B5:37:35:55:6F:A7:7F:01:FB:02:2B:EE:D5
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:c7:08:4a:91:b7:6c:df:2d:09:72:5d:d5:2f:dc:d9:a3:
85:dc:88:bf:cc:a7:13:a6:5f:80:5c:aa:35:88:04:0a:55:ab:
1d:77:c2:e3:79:34:52:f3:22:54:5b:15:6a:d4:83:4d:b3:b0:
7b:7c:0c:fb:89:ed:45:79:fc:99:a1:f7:b8:be:f2:ab:7d:ca:
21:ff:fb:7e:f9:26:48:f7:55:7d:c5:8c:2d:d7:69:fe:2c:19:
7c:ed:82:4c:40:71:69:e8:39:ba:14:7f:34:ab:ce:b5:0b:be:
d4:ac:a4:17:9d:db:18:3b:7e:17:35:96:fe:a8:8c:19:34:fe:
e1:98:8d:0a:16:03:d1:e1:70:10:f0:3e:07:b2:a1:f2:b6:44:
e3:33:3e:83:fd:ea:e0:13:21:68:08:5d:8a:3c:93:81:10:ac:
f2:73:bf:80:f5:3e:17:e8:82:ac:e3:a7:84:93:86:05:d7:df:
87:67:74:0b:bd:31:66:3e:5f:e0:b5:68:a4:eb:68:af:b4:e3:
b7:e1:96:4e:1f:93:64:77:0d:5b:83:aa:5e:1b:f2:00:bf:75:
19:72:cd:35:2f:e0:18:dc:f8:28:5c:55:2f:8d:0d:39:57:e0:
f8:18:c6:08:d7:87:37:78:4e:e4:00:75:46:cd:2b:9a:22:0a:
ff:29:3a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIwsoD2xL2VLPiYZP809IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTA0MjRjNjg4ZmY1MTlmYjllMjA0ZDhmMTU4ODU1MzQ1
NWIxNTEwHhcNMjUwNDI5MjAwMDM0WhcNMjUwNDMwMjAwMDM0WjAzMTEwLwYDVQQD
Eyg1NDI2ZTlkZGM2NjAzZGI1MzczNTU1NmZhNzdmMDFmYjAyMmJlZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kz/E4Ay7YAzqNF9Nj9b6nIvksyP
VMbbvDh7CK+J9ipTK7LThEBL9heIsUJeBFLnVuB25+i9QZpnkGHUPrTztvsUIjRt
8ZAvOzTBAfg/8blz69Sc7+/xG72EIxROvo3649H9pf6M+HYDsPUpuKwJnKqI5p+1
Kn1uU2yQ4qlTmJ5bjYByMM7IlRk5j3+LX8naNuZPOprDWjQy7In9imIVj4cmfIW8
hPPz1E6Jr88enTLpTX4gqcoa+LzAN9YNd7xwp9XzMx8RTO1CS26ls+lMr71+2kiu
IIgtIjKSsTe/OtKf9D1MAisZrJddwh2ZSqe+xxSb9Ww0wODHMb+Csjy49wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQm6d3GYD21NzVVb6d/AfsCK+7VMB8GA1UdIwQY
MBaAFDSQQkxoj/UZ+54gTY8ViFU0VbFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEt
M2YwNjgyOWUwZjVjLzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEtM2YwNjgyOWUwZjVj
LzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTHHCEqR
t2zfLQlyXdUv3NmjhdyIv8ynE6ZfgFyqNYgEClWrHXfC43k0UvMiVFsVatSDTbOw
e3wM+4ntRXn8maH3uL7yq33KIf/7fvkmSPdVfcWMLddp/iwZfO2CTEBxaeg5uhR/
NKvOtQu+1KykF53bGDt+FzWW/qiMGTT+4ZiNChYD0eFwEPA+B7Kh8rZE4zM+g/3q
4BMhaAhdijyTgRCs8nO/gPU+F+iCrOOnhJOGBdffh2d0C70xZj5f4LVopOtor7Tj
t+GWTh+TZHcNW4OqXhvyAL91GXLNNS/gGNz4KFxVL40NOVfg+BjGCNeHN3hO5AB1
Rs0rmiIK/yk6Tw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:15:46 2025 by rpki-client