Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: apYpBSok/EvvyueGwhBlkgO6YBCVs+ENR8PKfK9x6po=
Subject key identifier: A8:85:89:BC:AA:A3:60:3B:79:B0:D1:BD:91:99:D8:40:57:29:AF:4D
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 01976D3DDB2C88CD592F115E7254C7D4D8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 1599
Signing time: Sat 14 Jun 2025 07:00:59 +0000
Manifest this update: Sat 14 Jun 2025 07:00:59 +0000
Manifest next update: Sun 15 Jun 2025 07:00:59 +0000
Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: jALeXQDohtrcEUkn4WqrYhqP8tAaAA4oaXZwuCCL6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:db:2c:88:cd:59:2f:11:5e:72:54:c7:d4:d8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jun 14 07:00:59 2025 GMT
Not After : Jun 15 07:00:59 2025 GMT
Subject: CN=a88589bcaaa3603b79b0d1bd9199d8405729af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:96:25:9a:aa:10:32:d7:4e:6a:fb:b0:e3:
82:62:a3:1c:13:c8:de:ea:0a:e9:ba:bc:b2:11:88:
e5:2b:8d:5d:58:7f:b1:87:02:7a:48:f9:59:4e:13:
ee:40:b5:b4:2f:6d:d2:12:47:68:94:bf:5d:5a:2e:
eb:b1:87:49:04:9e:24:e2:74:34:87:b3:d5:bf:ea:
14:25:76:92:04:99:5a:b1:49:c7:0c:95:2f:a3:19:
34:b3:51:a3:c4:cc:aa:c4:d6:a3:e8:95:be:93:13:
39:e4:be:23:39:1c:62:8e:ea:54:f4:77:74:ad:10:
27:0e:6a:60:2a:44:62:4a:1f:b5:2e:48:1b:af:15:
ff:e5:ab:52:fb:3b:84:73:38:45:5e:64:75:7a:7f:
27:0b:a3:d2:9a:46:80:19:ff:a2:75:32:b1:b3:d0:
b3:3d:f3:9f:90:c3:c1:2e:30:dd:e1:65:a7:7c:7a:
0c:55:db:58:15:d2:7b:ec:11:42:8e:bf:78:11:94:
e6:dc:ab:35:d5:d3:24:f5:45:33:44:2b:dc:e7:aa:
eb:80:db:e4:2a:69:36:2c:e0:9b:29:1e:e7:de:55:
97:4a:a0:a2:78:3f:89:b8:6d:8f:b6:4b:87:9c:4a:
69:47:3f:d8:07:ea:b9:3c:36:3e:f3:47:cd:27:63:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:89:BC:AA:A3:60:3B:79:B0:D1:BD:91:99:D8:40:57:29:AF:4D
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:32:f7:9e:49:ae:2a:b8:aa:aa:68:7f:c7:4b:a5:af:89:
08:90:5f:50:c8:0a:e2:25:04:c5:45:0a:60:ff:08:47:09:12:
35:14:a0:ff:d2:de:d4:b5:45:4a:70:bb:6d:35:62:e5:cf:12:
cf:ee:df:1a:3f:08:1b:f7:d5:9f:31:87:6f:a5:36:c4:cc:1e:
e5:f5:90:14:f3:88:b8:e5:82:77:f2:b4:96:bd:74:54:c1:9d:
c1:b1:dd:cd:a2:1f:8a:1a:21:12:b7:70:5a:00:48:23:d6:19:
c1:7d:71:2e:d7:9a:4e:2e:ed:bc:f6:a6:3b:d3:4d:b1:ed:a2:
27:70:8e:2e:00:ab:b5:67:3e:c5:8e:a0:75:20:90:e3:45:a3:
e9:f6:ef:d4:32:d1:c5:ba:5a:d6:83:44:f3:b2:31:46:1d:04:
ea:8b:4f:4b:bc:01:39:e2:30:45:77:9f:ea:e0:5c:01:a3:69:
d9:43:3e:b4:7a:ef:58:e2:0f:f3:14:f3:a2:22:06:3e:b0:19:
ec:89:7a:b7:86:50:6e:0d:5d:e4:3f:42:5c:fa:d1:9a:cc:58:
80:5e:2e:a0:c9:2c:b1:2c:9d:6e:dd:c7:ad:02:d5:22:86:7a:
62:5a:15:b3:6c:ab:86:d0:a4:f6:ea:04:44:43:79:7b:f0:33:
45:f1:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:37:46 2025 by rpki-client