Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: ivU/Y+0VDw3cgcII2M0omiVTJTqi9JkvsB2W++EPMZ4=
Subject key identifier: 65:14:10:0E:15:AC:0F:7F:1C:CB:D0:83:BF:85:39:90:C4:C3:13:06
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 01976C9893AE4002D7984818C65F9BEE4656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 0663
Signing time: Sat 14 Jun 2025 04:00:27 +0000
Manifest this update: Sat 14 Jun 2025 04:00:27 +0000
Manifest next update: Sun 15 Jun 2025 04:00:27 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: o8yax5HXQIMntP5V3rp1uJthhDJiVomuc0tI95N5Cvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:93:ae:40:02:d7:98:48:18:c6:5f:9b:ee:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Jun 14 04:00:27 2025 GMT
Not After : Jun 15 04:00:27 2025 GMT
Subject: CN=6514100e15ac0f7f1ccbd083bf853990c4c31306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:8a:bd:c7:bc:09:e9:cc:9c:9f:11:38:01:
3e:cc:41:27:20:cb:44:e3:31:85:72:d0:a1:9b:97:
f5:d3:81:b6:74:30:4c:4a:65:9d:7e:a8:de:21:48:
ce:a5:e1:b5:d1:36:f1:3c:af:c4:92:42:c6:9f:7d:
38:3d:d3:45:93:d6:5b:a3:dc:ff:79:19:aa:91:88:
cc:97:13:0e:f9:ff:ec:a0:22:fe:8c:4a:2e:82:e5:
52:2b:35:81:a5:1c:ea:00:9d:52:94:f3:00:b7:37:
96:a2:43:b3:5e:f4:09:c2:65:9f:59:0e:67:e8:1a:
48:62:ac:26:68:d6:56:7b:02:8d:15:06:a1:69:2b:
f2:18:60:1c:68:68:94:6b:d7:b0:2b:3c:a4:12:4a:
28:e0:ea:80:bc:ea:19:8d:e9:31:bd:60:0b:f8:d3:
aa:92:a5:f5:cd:93:24:5b:ff:18:46:06:b9:f7:11:
39:02:8e:d1:44:65:f4:65:7c:8b:cb:a3:5d:0e:d9:
b8:e1:c5:b3:6d:cb:eb:c8:a5:ce:75:b9:42:34:96:
c6:1f:b0:76:5a:9c:a8:35:e7:b1:ce:c0:89:19:8e:
7f:af:b4:c1:86:1f:16:2e:98:d7:ba:04:7e:8c:76:
b8:61:f1:7f:81:0b:c9:48:a2:ba:d5:de:36:3f:db:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:10:0E:15:AC:0F:7F:1C:CB:D0:83:BF:85:39:90:C4:C3:13:06
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f7:db:da:a1:d8:95:df:2b:41:e8:5a:35:55:ad:a1:38:bf:
46:29:ed:19:ca:65:49:b6:f4:7e:0d:4d:14:0f:8f:b0:46:d1:
49:a2:a7:cd:48:d0:c3:64:22:da:1b:d2:10:60:4d:7c:32:d2:
2c:d3:89:cc:cc:c0:32:56:d6:4f:81:5f:6b:6a:a8:9b:92:b1:
75:31:eb:ae:78:ae:eb:5f:4f:32:12:ee:1f:52:d3:13:80:d3:
53:fe:30:e5:9a:28:72:82:7d:2c:80:95:1b:6c:bb:5e:44:05:
93:51:03:74:b8:67:18:d7:6b:67:f1:3e:1a:e4:96:98:79:87:
06:7b:4c:4c:10:0e:60:d6:d8:33:a4:76:46:de:57:c9:52:27:
f5:f3:a3:56:bf:24:7a:9a:30:8d:f3:b7:a9:b2:b8:11:25:6e:
e7:11:6b:aa:43:3b:f3:ee:d8:e8:f7:2f:56:31:2e:6a:c0:cb:
22:47:d8:8e:0e:ab:ac:26:5b:f8:4f:06:5f:fe:b3:ec:c2:47:
25:07:20:e2:54:11:c8:b2:17:58:6e:12:d3:e3:13:3d:7e:a7:
10:ae:d5:bc:e5:f0:81:1a:52:82:42:71:2a:90:85:9d:3b:bc:
16:09:71:54:48:eb:8e:91:1c:54:66:ad:fc:c4:91:b4:1e:7a:
0c:25:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:26 2025 by rpki-client