Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: BKA1erH8j1c7FxJOjYfhcqo/zF/cNLHesAAdPwc8+xw=
Subject key identifier: D6:42:6F:E9:05:A8:6C:EF:D0:2C:96:54:B2:92:50:A6:E7:DF:D5:FD
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 019889C55F82927F68BAD761143008595922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 13:01:10 +0000
Manifest this update: Fri 08 Aug 2025 13:01:10 +0000
Manifest next update: Sat 09 Aug 2025 13:01:10 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: jPF7qlE+WwDU+HKyxcAQ9gpgzl2r1W4ou+NySOZO/vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:5f:82:92:7f:68:ba:d7:61:14:30:08:59:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Aug 8 13:01:10 2025 GMT
Not After : Aug 9 13:01:10 2025 GMT
Subject: CN=d6426fe905a86cefd02c9654b29250a6e7dfd5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:19:6a:be:5d:34:60:3e:7d:86:fc:0a:27:
bd:e8:c0:d4:70:4d:ea:11:04:1c:a4:0d:ac:97:02:
b3:0b:b2:a1:4a:3f:9f:d9:10:ab:d3:12:3f:eb:e1:
06:cf:98:34:25:7d:a4:c5:90:85:e5:e4:77:ee:61:
98:f3:2f:a3:da:e9:d7:78:6f:28:9f:3e:19:ce:58:
48:38:ff:4f:5b:e2:ce:39:b6:6e:cf:93:38:fc:e8:
20:10:e5:0e:f8:79:1f:c9:3a:18:60:99:24:d6:2e:
c7:03:33:7f:b0:0c:76:5e:ac:44:c6:d3:c7:80:2c:
54:b7:f7:f0:e4:bc:8d:db:29:c7:fa:0d:82:e6:6a:
5a:fd:ee:e7:df:33:0e:cd:24:bc:d2:97:1e:93:89:
fa:3c:22:c0:f8:bc:0b:19:12:da:72:18:d0:c5:0f:
d1:56:c9:7b:d9:05:89:16:45:13:fd:7d:64:c7:db:
96:71:f9:51:7c:c5:a0:de:37:1c:28:0f:b1:64:60:
de:9f:62:7d:40:d9:2b:24:e2:4e:79:ae:a5:ba:b7:
56:73:da:77:3d:b0:d4:67:57:e4:79:50:ff:b8:35:
48:e8:b7:3d:cf:dd:12:38:fc:bc:29:24:ba:39:32:
d5:21:08:2e:97:f5:1f:3e:b3:19:65:2a:6f:4c:88:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:6F:E9:05:A8:6C:EF:D0:2C:96:54:B2:92:50:A6:E7:DF:D5:FD
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:f0:10:2a:ab:81:3f:2b:8f:9e:0f:5b:22:71:5e:77:ad:
16:b0:88:1f:f6:30:69:bd:d9:ac:63:57:2d:cf:6f:ce:ef:42:
15:82:b2:3c:68:4b:4e:69:29:89:7f:08:1d:6a:0b:f1:6d:5b:
48:62:82:a0:a4:e1:68:be:3b:86:be:8c:ce:e0:90:ce:69:59:
63:25:25:2a:05:4e:fe:2a:3d:b0:61:cd:a0:e0:65:8a:62:07:
3c:d8:7e:e2:61:79:b9:4f:df:41:60:53:cc:3e:51:bf:3e:2e:
ce:ac:aa:e2:ed:90:1d:51:66:8a:9c:7b:64:d6:70:e8:ae:21:
49:44:83:ad:4b:b5:14:ac:f0:0f:e3:e0:ed:13:81:2d:f0:96:
e4:22:e0:7d:98:8a:cb:9e:28:ce:6a:06:15:9f:d5:7d:71:fd:
c3:7d:65:d6:ec:cd:48:71:2a:36:36:ce:66:86:b9:05:66:9d:
9a:cf:ac:6b:2c:9d:7a:1e:50:71:dd:a2:fa:e3:ac:bc:d7:f5:
89:81:a7:12:99:81:56:c3:0d:aa:9e:43:5f:df:86:40:67:fe:
b1:9a:26:17:3b:a0:1c:71:ee:3e:58:da:25:5e:8c:e6:b2:29:
de:b9:0d:e5:26:95:12:89:b4:a5:cc:c2:b8:a0:cb:3a:c9:7e:
50:37:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:09 2025 by rpki-client