Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: pYT4/UOJZcvHZ4p6hVavjxqmGWOap2t3hQgo/J9PmYU=
Subject key identifier: E5:CB:5B:53:A9:56:A1:D1:94:25:39:54:50:FD:D4:7A:60:42:11:B9
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 01977A8B8D37304259297396FA00D7DD4C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 12D7
Signing time: Mon 16 Jun 2025 21:00:55 +0000
Manifest this update: Mon 16 Jun 2025 21:00:55 +0000
Manifest next update: Tue 17 Jun 2025 21:00:55 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: 9sFvQTEx/daPL1B00cifgmzUkXgF71y6ERqmuJ0IqqM=)
2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:8d:37:30:42:59:29:73:96:fa:00:d7:dd:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Jun 16 21:00:55 2025 GMT
Not After : Jun 17 21:00:55 2025 GMT
Subject: CN=e5cb5b53a956a1d19425395450fdd47a604211b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:06:64:5b:af:c7:fb:d5:61:72:dc:57:20:
72:f3:da:8c:d2:67:49:40:f5:88:4e:a1:01:2a:0a:
16:88:a5:7f:7e:62:3c:1c:d5:7b:ee:18:68:a3:11:
a2:41:50:74:53:e9:3d:b6:8c:82:fc:4a:21:4b:c4:
5b:3d:db:a4:b2:5e:c8:0f:4f:79:7f:a2:44:4e:e8:
61:38:ba:93:10:e8:73:9e:11:84:ed:41:5e:eb:e6:
3d:48:d2:3f:79:14:0a:d9:27:40:b3:20:d4:a8:0b:
d4:07:80:4b:e3:38:a8:bd:40:4f:8d:5f:6b:7a:68:
0f:b6:8c:01:9d:a4:a7:e8:44:4f:93:a7:21:74:c6:
cd:9e:1b:64:9b:a2:94:04:a5:e5:ef:fa:df:35:eb:
e1:92:ed:e6:bd:d0:0c:75:57:d9:7c:ad:63:46:f5:
c9:fc:aa:a2:1f:21:3b:df:e9:da:02:92:05:bb:3d:
62:31:58:9a:cf:a9:2f:6c:df:2e:f1:82:fc:0e:36:
0b:4c:7a:71:48:71:65:06:25:4d:6b:73:b8:7c:f2:
2f:5d:ba:e7:5a:f1:43:ee:74:e4:86:6c:2e:bd:e2:
34:73:ac:38:06:4b:5e:e5:34:3e:87:b2:49:ee:c5:
9e:98:c8:1f:7a:b8:b6:22:65:d6:b7:22:25:f3:9a:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:5B:53:A9:56:A1:D1:94:25:39:54:50:FD:D4:7A:60:42:11:B9
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:f0:b3:d4:59:8e:b1:5b:04:d6:9d:7e:38:50:2a:b3:a8:
c1:ce:8f:04:ab:e2:25:2e:56:ed:87:ce:04:ab:99:d3:d0:d2:
cb:53:47:c1:15:eb:77:cf:46:51:30:ba:fa:47:4d:4e:46:00:
be:dc:85:2e:56:3a:e2:49:3d:77:c4:95:9c:ce:28:9d:b0:0d:
2a:4c:ef:6d:52:a0:13:a9:64:ac:9b:92:a0:28:4f:53:3e:83:
7e:c9:7f:07:df:3e:a2:3b:b9:5b:c2:db:d5:c3:f1:de:e1:3e:
a2:1b:9c:ca:a3:92:3c:eb:10:9e:d7:09:af:6f:e1:34:2e:56:
32:e4:b0:0e:72:f1:f1:2d:ae:8e:52:9f:8d:01:d7:6f:0e:d1:
1b:c3:43:aa:1b:5e:b9:75:4d:57:84:44:2d:59:b2:1d:e4:3e:
93:b7:11:e8:f1:f1:37:89:1f:de:b6:3d:81:3a:5d:ae:5d:b4:
44:bd:de:2d:44:45:80:43:e3:6e:39:77:bf:52:79:8c:9e:79:
26:e9:a6:1d:83:70:84:a9:0d:69:08:b1:50:d6:cd:18:52:c1:
d5:34:da:1f:25:52:5d:59:18:43:85:54:70:88:8e:66:16:f1:
84:91:02:71:c6:e2:a5:a4:cc:1a:6a:61:e8:33:ce:f6:97:9f:
f1:2c:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:21:12 2025 by rpki-client