Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: oHcNNZnyR0pIMiyP9QSsnv97s3PF3qRbuNHPRlFwVzc=
Subject key identifier: 03:CA:A8:80:10:27:43:A4:02:8E:A4:9E:3C:77:24:63:B6:A9:68:FC
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 01968D01D85E318DDDDA95A9A81F15551A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 125C
Signing time: Thu 01 May 2025 18:00:30 +0000
Manifest this update: Thu 01 May 2025 18:00:30 +0000
Manifest next update: Fri 02 May 2025 18:00:30 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: 74+FUVavFgVA3l0OdxyArjB23k4T1JgM92cBF8Fj+dI=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:d8:5e:31:8d:dd:da:95:a9:a8:1f:15:55:1a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: May 1 18:00:30 2025 GMT
Not After : May 2 18:00:30 2025 GMT
Subject: CN=03caa880102743a4028ea49e3c772463b6a968fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:c7:18:b4:21:ff:03:dc:8a:36:4e:93:7b:
41:ee:8a:8b:f6:99:d4:7a:d5:b7:78:65:b1:79:2a:
e3:e6:dd:2e:b1:99:48:80:36:7c:b0:ea:ac:35:21:
4b:80:bb:30:51:43:ed:7b:7d:4b:ad:64:9c:28:01:
2b:06:2b:e9:91:a4:13:1c:d6:70:36:bf:42:62:e5:
ba:a9:80:68:e9:99:4f:7b:8c:54:7a:6e:83:f1:bb:
a7:1d:4f:f7:ae:90:6f:9a:e7:55:d0:ae:b7:92:0a:
3b:ac:ec:4e:f5:c9:39:e4:6e:ed:84:d1:c1:8c:06:
43:63:27:cb:5a:18:45:de:c1:92:bc:a1:be:58:b5:
cd:13:61:67:93:d4:77:f5:a7:79:dd:7c:6d:eb:9c:
f6:fc:2e:77:6e:d9:71:d6:9b:a1:f9:83:3b:ca:2e:
4a:bd:f7:69:4f:a7:4f:7b:ba:d1:1e:51:93:4d:fc:
e5:8b:a0:37:54:e9:99:66:2e:72:24:45:17:a8:23:
f5:75:af:2e:e5:56:76:5c:3b:26:86:7a:6a:69:aa:
34:1b:6f:b7:8c:08:9a:97:b4:75:30:12:d0:c8:b4:
20:20:95:f3:f1:a7:e1:a7:1e:2b:82:69:c6:d4:20:
51:a6:0f:14:dc:01:8e:ef:18:d1:32:b8:8b:95:44:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:A8:80:10:27:43:A4:02:8E:A4:9E:3C:77:24:63:B6:A9:68:FC
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:39:26:86:ce:b7:db:92:89:fc:64:6a:5d:bd:df:04:b8:
58:b1:84:d8:d0:26:d1:24:86:88:09:4b:67:ee:39:f7:29:b1:
99:ac:0b:94:d2:c9:09:f0:17:26:32:ac:f2:f6:95:a1:80:f4:
37:97:11:aa:f8:28:94:11:b2:0c:e5:05:4b:c5:67:a1:b4:bd:
8d:ca:2b:2a:6b:cc:39:41:10:4d:4f:0b:b0:a1:e6:53:e8:a3:
7e:15:2d:8c:86:c6:e5:28:6d:71:bc:2f:4e:64:7e:cf:ef:1b:
b2:5e:9d:78:ec:d9:e0:4e:87:99:da:23:d8:4c:5e:81:e5:e8:
8e:db:d5:7a:0b:dc:bf:d9:12:73:42:95:9f:ad:27:7c:65:55:
4d:43:d4:d8:fb:04:79:09:b6:7c:42:3f:57:cd:e1:bf:56:6b:
c3:fe:f6:4c:7d:c5:26:b4:30:59:96:52:3e:31:62:7e:e5:8b:
35:23:04:a0:2f:26:a0:4f:de:f8:83:30:eb:7e:7e:ae:4f:9f:
7c:a7:76:e4:32:fa:ae:64:c8:04:a5:3c:37:3a:59:a5:38:04:
5b:cd:4b:f0:a4:31:d0:f9:91:0f:00:77:0c:66:0f:3a:e4:4f:
f9:47:20:43:88:a4:61:9e:3a:f2:d6:07:2e:e5:39:76:78:20:
26:f7:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:54:47 2025 by rpki-client