
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: ghFeMqM4EO5MAaB8jePM4J393QsVNSX0zu4T21pYp2I=
Subject key identifier: 16:3D:F0:06:31:69:EE:6C:49:D0:7D:91:4F:39:79:87:6C:31:5B:F6
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019674F9983425068A073379391A29E2B55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0E26
Signing time: Sun 27 Apr 2025 02:00:36 +0000
Manifest this update: Sun 27 Apr 2025 02:00:36 +0000
Manifest next update: Mon 28 Apr 2025 02:00:36 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: oaS9AvDm93DWpBzPkhMsvCYUR96aAQeVxb2+eniWG00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:98:34:25:06:8a:07:33:79:39:1a:29:e2:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Apr 27 02:00:36 2025 GMT
Not After : Apr 28 02:00:36 2025 GMT
Subject: CN=163df0063169ee6c49d07d914f3979876c315bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:63:4e:e2:8b:94:dc:12:d1:e7:e4:cc:11:
b9:87:25:2a:62:60:e6:be:8e:81:e1:7c:6f:56:13:
5f:98:63:db:85:a3:84:44:32:ad:74:8c:7a:c5:3e:
d4:0b:6c:6e:f1:65:97:80:5f:84:9b:84:7c:b1:77:
d9:68:93:0d:5e:e1:1a:9f:34:53:c6:9f:e3:20:a2:
ba:d3:f0:b8:24:d2:60:c5:46:46:a9:47:a8:1b:46:
40:78:98:65:d3:f3:c1:1c:58:03:bd:87:92:b0:98:
d8:12:98:27:04:9b:cb:10:f6:6d:bc:ea:c2:f9:3c:
69:ed:fc:86:b5:39:bc:3e:37:80:da:1d:d5:d6:de:
ed:e2:8e:79:fc:cf:71:df:5d:8a:d5:72:52:84:0c:
cb:12:3b:62:31:f5:71:2b:2a:26:66:b8:7f:77:5b:
91:29:99:1e:91:c7:81:ac:e6:23:fe:86:50:b6:6a:
12:dc:5c:6b:fd:a7:96:60:9c:72:cb:ee:b7:58:e7:
31:ed:e6:b7:ed:e7:51:97:23:84:ae:36:9d:9c:df:
93:fb:f7:9c:f6:38:a9:4c:f8:3c:dd:dd:b2:4c:88:
9b:53:c0:2c:0c:98:53:68:04:d1:d2:76:70:c3:f9:
0b:d8:64:6f:48:cd:5b:8b:88:6f:8d:30:a3:81:3e:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:F0:06:31:69:EE:6C:49:D0:7D:91:4F:39:79:87:6C:31:5B:F6
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d9:41:47:7b:42:17:f7:36:97:b6:ad:3b:6b:c6:06:80:6d:
57:03:65:33:e8:1a:6f:45:7e:52:7f:14:99:80:cf:00:4c:4e:
17:bd:87:1a:93:50:63:32:7d:a5:9b:60:14:9f:39:83:5f:19:
53:e0:d7:b5:16:1f:c3:2f:7e:fb:a0:f7:7b:a8:73:e5:9b:fe:
ce:ea:5a:a5:f3:47:12:98:2d:cb:ff:87:80:94:80:3f:24:d4:
06:ea:11:cc:fa:5f:e3:a0:9c:d8:c8:54:71:94:6a:7c:17:1c:
bb:e8:77:b2:84:39:7f:14:73:e1:90:4e:ad:b8:8b:fd:c4:6a:
1f:ff:d3:ec:a9:d5:61:0f:c4:29:87:9d:33:4c:de:6d:3b:fd:
11:e3:b0:07:f8:8d:22:7b:74:49:a3:c1:5c:72:6d:dd:e6:78:
0e:cd:8d:c3:89:2d:4c:66:30:89:f5:4d:1a:ef:00:64:a9:b3:
87:43:81:cd:63:3d:ce:86:df:e0:9d:10:37:93:f2:d1:9b:9f:
ab:77:6b:12:99:6e:a8:25:03:7e:d5:9f:e1:ec:67:5e:bd:a8:
79:1a:65:10:0b:2b:80:79:b0:54:2b:c0:98:7f:68:05:11:05:
01:2a:34:c1:e7:03:fd:c4:1d:dd:3b:6c:c1:e2:cd:0d:7b:57:
9e:1a:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:20:56 2025 by rpki-client