Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: zO0IZUNe/nxHgBxcRd65IhqTRM5wx9rYHj8jUtg9Elg=
Subject key identifier: 67:58:31:BB:9A:B7:6A:0F:C9:82:0D:1E:B8:1F:CE:8A:73:B1:BF:4D
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 019784D7B46E5D5CF7EBAB7AD85FD39105A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 08E6
Signing time: Wed 18 Jun 2025 21:00:18 +0000
Manifest this update: Wed 18 Jun 2025 21:00:18 +0000
Manifest next update: Thu 19 Jun 2025 21:00:18 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: V2kA9rX0Q4JYmu/SUeiUa/0d3AGVk75V/AEhiVwcCmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d7:b4:6e:5d:5c:f7:eb:ab:7a:d8:5f:d3:91:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Jun 18 21:00:18 2025 GMT
Not After : Jun 19 21:00:18 2025 GMT
Subject: CN=675831bb9ab76a0fc9820d1eb81fce8a73b1bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:80:a4:a9:30:83:7a:bf:aa:96:87:cc:ad:
04:69:11:05:2e:7e:c6:11:29:b6:2f:1a:41:8b:64:
a5:bf:0b:7c:eb:99:f1:21:ba:ca:99:1e:29:a9:d7:
e6:b4:21:c9:5b:0d:b8:0a:89:11:f4:16:97:7e:76:
6d:e9:6c:a3:2d:08:5d:ae:d8:61:1c:5f:93:44:3a:
ce:22:47:6e:e2:ff:dc:af:01:cf:a1:b3:f8:77:33:
6f:ad:a0:bd:87:0e:28:b2:d6:71:98:96:31:5a:ae:
be:49:95:82:0a:21:5d:79:d6:54:19:d5:6b:b3:f3:
9d:fa:b5:be:42:44:0a:69:f4:c0:f2:82:53:ee:4e:
c3:63:12:72:de:aa:bd:bf:82:46:34:29:89:db:4f:
f7:40:26:5c:19:24:5b:14:ba:4e:8a:da:54:5e:0b:
d3:31:57:13:61:6c:42:7f:11:b3:a3:31:6c:13:43:
7e:d7:0a:74:b9:13:db:80:fe:41:f1:f7:3c:8f:a0:
08:e4:cf:ac:3c:e7:6d:31:69:5c:fe:53:69:ed:13:
07:90:2e:0f:22:a8:ac:52:01:f0:0d:4e:4e:56:7d:
16:b4:a2:75:2d:2c:b5:f5:49:fc:d9:0c:31:10:2c:
d4:56:86:42:64:4f:97:0d:3f:64:cb:1d:56:6a:e3:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:31:BB:9A:B7:6A:0F:C9:82:0D:1E:B8:1F:CE:8A:73:B1:BF:4D
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:3d:5c:96:aa:90:be:09:57:07:1c:82:b2:84:33:29:37:
52:1b:da:72:b4:27:b7:ba:d4:07:06:04:ea:ee:30:08:39:34:
bc:36:f3:ba:d0:e0:60:54:c1:92:85:d3:0e:d6:94:5f:06:f8:
cc:4a:e6:e3:19:cc:0d:bf:19:79:46:ab:12:48:3d:e0:fd:e0:
1c:3c:33:b6:7f:66:dc:5c:26:22:bf:e4:d3:60:cf:58:e8:b2:
43:c0:47:f0:6f:23:79:98:40:31:c3:d8:c0:d0:4d:c5:72:c9:
b1:7c:92:26:e5:13:17:4f:f7:3a:5c:c2:a1:12:cc:4b:53:9d:
14:10:64:d5:f4:99:f9:54:57:e0:ab:67:82:59:9a:74:4b:e2:
07:77:44:3e:53:7a:7d:b1:9f:74:0e:39:e0:b4:c2:a9:af:89:
72:73:bd:27:b4:19:29:d5:3e:af:6f:6a:c8:54:96:67:8f:11:
5f:72:d9:ce:19:d7:74:96:fb:9c:12:99:d4:1e:70:89:cc:a0:
07:8b:3b:53:fe:e6:51:6b:3c:b6:6f:b0:c1:8b:fd:1c:09:c5:
4c:53:56:f6:f0:72:f5:fd:44:91:ca:b3:03:da:aa:7b:4d:a8:
87:98:5c:ef:50:5e:b4:8f:7f:6d:f1:69:79:07:85:7f:44:9f:
d3:19:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:04:32 2025 by rpki-client