Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: fARhMq6R89BqF1it2PBFZTgaR0DGSw4NsVDlkMWPOtE=
Subject key identifier: DA:D3:58:1A:71:8F:7D:15:47:20:CD:6D:40:D8:65:B8:AA:7D:62:4D
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 019688EE2D813E470EC29624C71670CD7179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0407
Signing time: Wed 30 Apr 2025 23:00:32 +0000
Manifest this update: Wed 30 Apr 2025 23:00:32 +0000
Manifest next update: Thu 01 May 2025 23:00:32 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: vP5Q2c9G5CL8TGJ8uSJwaOsHIEW6xXUdG9PUWsVAbMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:2d:81:3e:47:0e:c2:96:24:c7:16:70:cd:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Apr 30 23:00:32 2025 GMT
Not After : May 1 23:00:32 2025 GMT
Subject: CN=dad3581a718f7d154720cd6d40d865b8aa7d624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:94:0c:f5:2c:16:21:ff:8e:47:a2:7e:e7:
ce:a3:ba:e2:aa:9f:ed:91:26:83:4c:00:90:ca:dd:
e8:f7:7a:9a:a5:69:48:1b:c6:ae:48:ee:38:a8:e6:
62:34:2f:de:53:d7:fb:16:71:6f:75:0d:cd:82:65:
a5:aa:b7:70:d8:b3:74:55:f7:f6:38:29:c0:75:95:
3e:cb:7d:46:0c:b6:96:84:66:a6:79:60:ce:ba:06:
ff:81:9c:59:e0:ff:72:c4:fe:37:39:45:b1:8b:24:
61:58:86:76:7c:1e:d7:dc:2b:f2:14:37:6a:19:bf:
cd:ae:04:c9:b7:25:c2:41:c0:ca:61:2e:5e:68:b9:
9d:d7:4c:be:e8:eb:61:d5:b6:85:31:5b:61:12:58:
c3:aa:a5:bb:e4:0e:58:45:30:ed:cd:ca:ad:37:66:
d6:f7:08:17:2a:87:3f:23:7d:c6:42:1d:59:5b:f7:
51:a1:d6:e0:2b:4f:68:58:3d:32:2d:84:51:ff:a4:
34:5f:a9:a7:61:80:8e:60:5f:53:3c:42:61:c7:f3:
c5:dc:78:b4:64:c5:ad:e1:19:e2:e1:2b:f8:38:1d:
6c:67:f4:c3:0d:e0:e8:f4:c7:45:0e:56:ef:3a:59:
94:df:c1:5f:2a:82:83:bd:52:f3:eb:ef:b3:68:b8:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:58:1A:71:8F:7D:15:47:20:CD:6D:40:D8:65:B8:AA:7D:62:4D
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:90:68:2c:61:c9:66:1a:8d:83:bf:a7:e9:a0:58:0a:9a:
82:f8:35:5f:39:9e:bd:37:f2:82:e4:5d:92:42:ac:5f:7b:5f:
34:b9:9f:9e:24:43:6b:5d:35:d2:c3:3c:d1:9a:2c:02:47:d7:
6d:70:18:ea:a9:96:53:7c:02:92:12:9a:8b:7a:51:a0:43:f1:
33:68:b8:0d:9a:1c:1e:e3:36:d3:01:d2:53:a5:3b:0e:43:5c:
26:da:ee:d1:1b:b7:e6:f9:5f:84:81:4a:c7:0d:f8:b8:73:98:
99:72:59:a9:81:5f:fa:70:cb:3a:3c:b1:da:0c:99:a1:a3:08:
d0:c5:98:79:98:59:90:68:74:c1:fd:81:bf:0f:07:42:1c:6a:
59:61:f6:5c:af:09:dd:6c:91:ff:10:5b:d2:5d:d8:3d:83:ae:
da:0c:e8:aa:ff:97:82:14:ab:10:e3:79:c9:82:a2:cc:b0:bd:
45:a8:60:f7:a1:e4:5d:3c:4c:9e:bf:b4:71:32:a0:f9:6c:ff:
40:46:7f:ad:0d:ce:b9:06:96:22:0f:ea:4c:7d:3e:04:64:41:
79:82:f7:19:74:21:76:fd:b2:5d:71:2a:c2:e5:7a:bf:d2:97:
26:ef:b2:52:a3:c8:87:f4:a8:ff:56:0b:ab:f1:36:ec:71:33:
5c:5a:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:53:33 2025 by rpki-client