
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File: ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier: BxGpRYCzdNkyrEDeZF0CVYP+LgDTtU8tbTqoZAWOorg=
Subject key identifier: DA:99:44:EE:52:CA:FD:85:70:A2:3B:0E:C6:58:F1:C0:EB:1E:6D:A5
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer: /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial: 01988168D09C13DD937CE5DAA5B1B83F63ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number: 098E
Signing time: Wed 06 Aug 2025 22:03:06 +0000
Manifest this update: Wed 06 Aug 2025 22:03:06 +0000
Manifest next update: Thu 07 Aug 2025 22:03:06 +0000
Files and hashes: 1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: xagrUJoWF4GFvTkemqGYov6T4SxVGT4czRkg+WYgSZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:d0:9c:13:dd:93:7c:e5:da:a5:b1:b8:3f:63:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Validity
Not Before: Aug 6 22:03:06 2025 GMT
Not After : Aug 7 22:03:06 2025 GMT
Subject: CN=da9944ee52cafd8570a23b0ec658f1c0eb1e6da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:71:22:08:85:8f:3c:c1:51:09:98:41:54:
83:84:7d:6e:c0:f5:5e:c2:70:78:5d:83:e7:8b:57:
c7:ec:04:2d:4d:4a:fc:8c:d5:a5:db:bb:73:8e:a1:
e7:ae:8a:a4:56:ac:ad:f9:04:51:ae:b4:08:8f:9e:
7f:ef:05:48:96:00:69:63:d0:d9:2e:60:12:52:1b:
87:b9:7f:34:5f:b2:da:e1:09:a7:35:d8:d3:07:fc:
a8:a7:cc:be:51:b2:ea:9f:21:03:f8:97:22:ad:61:
8e:56:44:4c:88:0a:47:d0:5d:2b:30:78:3a:db:a8:
cc:70:a2:ed:d8:9a:ce:2e:19:5d:ca:c0:7c:85:79:
9d:c0:f9:35:62:7f:b9:de:d8:05:aa:92:b5:9f:fc:
4d:64:33:df:2b:38:96:43:db:6c:7d:f6:2e:a1:b5:
74:29:50:3e:d0:5c:6c:8c:d9:af:10:a9:65:1a:31:
b1:4b:28:a2:1d:92:b5:79:28:3a:f8:05:a6:f9:3e:
fe:1b:b2:c5:82:aa:f1:8d:6d:35:03:85:e5:d7:c7:
a1:b8:ae:08:eb:ff:43:7d:33:18:96:44:87:17:d8:
10:38:89:5b:ab:90:ba:79:ce:2d:78:72:70:9e:e2:
0c:62:36:51:4b:e8:8e:17:c3:8a:dd:17:fc:0c:e7:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:44:EE:52:CA:FD:85:70:A2:3B:0E:C6:58:F1:C0:EB:1E:6D:A5
X509v3 Authority Key Identifier:
keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ea:39:51:46:c7:48:b1:1a:d0:51:1d:4b:cc:26:12:3d:f9:
19:7f:a3:08:2a:a3:1e:62:57:0b:72:a9:9b:43:0e:ea:dd:26:
2f:c6:bf:5d:02:49:39:9b:35:8b:8e:e1:94:f3:bf:3c:32:7a:
36:36:38:4e:77:ec:d1:f2:07:f6:52:08:d0:b4:82:87:3a:fc:
4f:f5:f9:1a:f1:e6:51:9b:d7:53:5c:3f:e7:d0:fc:ec:1e:c7:
7a:59:40:ca:a3:b3:ed:30:3c:47:44:4a:04:45:68:7d:60:7a:
e7:d0:c9:c5:07:b5:df:39:b1:76:eb:06:a6:d8:99:5e:60:14:
2c:01:23:70:3a:48:cd:29:1d:01:ef:dc:fe:ff:8b:a8:26:03:
3d:51:37:53:4b:a8:54:1e:01:f9:01:f5:cf:45:bf:e0:ba:bd:
84:1e:e2:51:e4:ed:50:a7:66:4e:7e:b4:cb:49:bc:79:15:1d:
4f:09:77:12:95:54:9b:18:e8:e8:d4:3d:f0:f2:7a:86:45:f2:
11:9d:49:9e:05:b9:f9:7a:85:ef:ff:d9:3d:d0:58:ca:8c:78:
f3:37:44:27:45:7f:af:7f:74:6d:e9:b9:ff:68:dd:c5:eb:45:
84:ef:60:9b:52:e5:fc:17:5e:de:83:b7:b6:21:4d:31:17:e5:
18:54:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:46 2025 by rpki-client