Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
File: ntj8_zGTrFO7SwfEjT3SnvWI640.mft (raw, json)
Hash identifier: DjyXFUd0av9nvZEWqYGXKUIu8syMiu+f8ddLX8fY7YA=
Subject key identifier: 8E:69:E9:00:07:99:3A:3A:E7:FE:35:12:BE:C1:6C:BA:98:21:21:92
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Certificate issuer: /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial: 0196760C32B9A6C9EA725184A7FA7B36CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:32 +0000
Manifest this update: Sun 27 Apr 2025 07:00:32 +0000
Manifest next update: Mon 28 Apr 2025 07:00:32 +0000
Files and hashes: 1: _4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa (hash: 2z2Ynum4MWOgBN264LV/zt9+ZOq8rZ9Pv93EhuMN5M8=)
2: ntj8_zGTrFO7SwfEjT3SnvWI640.crl (hash: d35+c2g+5+CU8GExVK7Bi1G235B/hQCzjZ6hd5hONNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:32:b9:a6:c9:ea:72:51:84:a7:fa:7b:36:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Validity
Not Before: Apr 27 07:00:32 2025 GMT
Not After : Apr 28 07:00:32 2025 GMT
Subject: CN=8e69e90007993a3ae7fe3512bec16cba98212192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:c9:dc:a7:c5:a7:a5:79:af:cd:99:d0:cb:
a2:d9:1e:c4:31:fe:e5:76:13:c5:22:31:56:98:a8:
80:48:f2:28:61:37:3b:ec:78:4d:99:bb:30:90:a4:
4a:3c:a1:2e:bc:2b:76:d4:67:52:27:a9:36:d0:78:
85:f7:65:f0:3f:85:53:50:bb:4b:f2:51:d9:db:b9:
9a:1e:d3:a3:ae:f1:2b:d8:6a:e4:14:e0:8f:47:a9:
29:7d:90:a1:96:81:37:77:6a:05:8a:7e:2c:19:99:
56:d6:24:35:0f:e2:90:5f:a2:37:c6:cd:0f:62:54:
47:33:6a:12:45:96:7c:8a:aa:6f:39:36:2e:6b:30:
31:75:08:5d:e4:5b:cc:42:0c:c7:69:5f:4c:f4:db:
58:a1:14:28:83:df:be:56:c6:8e:2e:3c:52:5a:ae:
93:ef:1e:11:14:64:ea:2a:76:e4:14:57:59:ec:c9:
2b:f8:c4:f5:f3:5f:5f:b2:03:11:24:19:e5:9c:2d:
a4:9f:25:0e:f6:d4:6b:1e:81:26:97:30:b9:f1:63:
ad:b7:71:67:7d:2f:dc:11:a1:ac:dc:dc:ba:ab:d9:
84:a3:57:f1:11:5c:c2:14:35:d1:b6:45:4a:1f:c4:
39:77:f7:7d:e2:91:b0:be:f6:20:22:2f:03:66:3a:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:E9:00:07:99:3A:3A:E7:FE:35:12:BE:C1:6C:BA:98:21:21:92
X509v3 Authority Key Identifier:
keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:4c:c7:1a:b7:23:03:e5:49:77:3d:67:bc:b3:63:38:d2:
64:c7:a2:32:07:a5:04:03:32:c8:bd:ce:b5:30:9e:7d:54:a0:
c3:a1:48:f9:4d:a0:11:b3:c7:4e:ea:2c:be:e5:e8:2e:ff:1e:
12:c1:5c:9f:3b:4f:b4:59:d0:66:95:2c:34:5c:68:00:21:0e:
04:7e:6f:4b:c0:0c:43:f5:8c:a3:d2:d4:c6:f0:c2:85:b7:db:
5b:ab:a1:bc:5c:ba:a6:53:36:62:aa:61:cd:2c:68:f4:a6:ce:
c5:51:f3:9b:68:87:52:98:97:a3:fb:cc:00:21:41:13:1a:d6:
df:07:b2:9d:19:3a:7a:c9:08:2f:a4:72:c7:23:4d:61:6e:f0:
17:36:43:38:6c:74:40:9e:ea:74:52:13:96:bc:93:1c:4a:6b:
01:4e:6f:55:90:17:c0:25:48:67:09:ca:ad:5b:7e:ca:b7:c0:
a9:93:82:54:7f:2b:e1:ac:a2:0d:d9:1c:79:41:9b:be:ce:89:
0b:a3:5a:d3:c1:68:57:b9:ad:04:aa:97:7e:d0:2d:a4:c8:9a:
7c:3f:9e:fa:5c:8c:55:dd:34:4f:ef:36:a3:44:3f:f8:00:30:
8b:59:fe:02:03:1e:c0:7c:ff:69:6c:10:6f:87:5c:9a:6f:19:
de:78:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:41 2025 by rpki-client