Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: AADsD4Gc30WnERsxI1oGdASaNS4CFc05eeCXCt6cEEM=
Subject key identifier: 7D:07:B4:39:DA:97:B1:46:1D:43:4E:EF:64:04:F2:23:D6:4E:C8:DC
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 01967D8ED7996A3BEA222484334804D17CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1132
Signing time: Mon 28 Apr 2025 18:00:35 +0000
Manifest this update: Mon 28 Apr 2025 18:00:35 +0000
Manifest next update: Tue 29 Apr 2025 18:00:35 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: +x+xPbsjhpw14oVSKPSbl/5fxAbUGgMBb9dEqCrroaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:d7:99:6a:3b:ea:22:24:84:33:48:04:d1:7c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Apr 28 18:00:35 2025 GMT
Not After : Apr 29 18:00:35 2025 GMT
Subject: CN=7d07b439da97b1461d434eef6404f223d64ec8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:db:51:f1:46:74:e7:c5:8c:05:0d:09:a9:
49:c5:5c:42:65:90:08:48:d6:fc:f2:cf:db:c5:a3:
be:d8:86:d0:45:a4:83:4c:9b:d1:8c:1d:02:b6:24:
29:41:b2:65:73:e8:1f:fe:bf:13:dd:11:89:78:e4:
49:fc:82:6e:10:20:ec:c8:99:dd:dd:d3:80:9d:db:
38:f3:56:c0:96:82:a6:24:9b:82:8d:01:d4:3a:a4:
63:b1:33:6f:f4:4b:46:25:47:c0:f4:b1:87:e1:8c:
6d:4f:58:e9:17:ce:f8:4f:a1:7a:ad:92:68:77:f5:
c4:6c:42:81:1a:9b:e0:fe:1b:7d:21:c2:0a:7a:fe:
38:9f:96:35:04:de:ba:ab:9d:8b:ce:6b:6c:bb:ca:
2c:c9:35:72:d1:6e:6f:6a:ec:7c:08:8f:8c:40:3b:
95:0c:b4:b5:19:82:2c:38:69:b7:41:aa:57:ca:21:
da:1f:f8:54:2b:5d:3c:5e:3e:fd:ac:01:93:08:db:
70:10:c6:3b:89:d3:c8:26:d6:b3:cf:49:46:dc:a0:
32:00:66:e8:45:ff:58:32:b0:34:75:10:e0:3d:ce:
7b:0b:76:1e:3f:b1:b9:16:1c:b4:c1:07:07:c2:78:
0b:ab:90:da:01:9d:5b:2c:f1:76:77:ba:f9:db:56:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:07:B4:39:DA:97:B1:46:1D:43:4E:EF:64:04:F2:23:D6:4E:C8:DC
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:b4:25:23:0f:e3:13:3d:30:cb:fd:85:4e:7e:ca:cf:05:
66:ce:31:cb:6f:ff:cd:cb:c3:49:5f:bd:5f:3c:e3:16:90:ae:
fc:f4:13:26:d7:16:67:47:92:7d:8e:af:a8:cd:69:c4:44:62:
9e:06:c9:fb:80:8e:74:a4:19:e8:92:8a:c9:de:24:a5:a4:36:
d9:b0:23:38:73:fb:3e:e9:f1:ba:f3:57:0b:d2:40:8e:d7:b8:
06:e3:d0:bb:a0:10:e4:c2:b7:47:ea:81:d6:77:a5:91:e8:cd:
fd:40:6e:43:82:a5:d4:dd:ef:a9:33:56:27:47:fd:aa:20:93:
70:24:3e:ee:39:50:83:8f:f5:1d:59:78:ff:d2:32:45:56:9e:
4a:04:bf:5c:62:7f:02:77:e4:67:51:26:af:28:99:2a:be:ee:
92:72:2e:8f:77:a2:96:92:6c:81:d8:05:c2:4e:14:85:fc:0b:
90:be:e9:18:81:9a:e0:a3:fa:79:67:28:e8:95:63:fa:7f:f9:
a6:91:df:ad:7f:ab:91:95:d9:32:05:90:9c:1b:50:d7:9f:62:
59:8b:1a:f3:c3:b4:e4:56:5f:70:9c:26:52:96:52:15:a5:89:
32:1b:d4:f6:60:cf:26:78:b8:fc:e2:ae:d1:6b:43:02:38:88:
96:95:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:27:29 2025 by rpki-client