Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: 5QxSXuEv+GBoKIj2eS8EpW0KQugNn3EdN+fKaU5fnSU=
Subject key identifier: 24:03:C7:E6:82:DB:95:C2:67:BF:DB:A9:CE:C8:82:40:50:B8:1D:17
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 0197B7EA9D04CCFD6D2C755369299842A73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 068A
Signing time: Sat 28 Jun 2025 19:01:35 +0000
Manifest this update: Sat 28 Jun 2025 19:01:35 +0000
Manifest next update: Sun 29 Jun 2025 19:01:35 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: gbpd3DzRGBl68gNt5Sp+dnBJJP0R0zXvmtn/ddYcnWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9d:04:cc:fd:6d:2c:75:53:69:29:98:42:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Jun 28 19:01:35 2025 GMT
Not After : Jun 29 19:01:35 2025 GMT
Subject: CN=2403c7e682db95c267bfdba9cec8824050b81d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:63:34:d6:21:35:3f:39:04:14:79:79:61:
ac:8f:05:35:17:74:5d:18:6b:a5:0e:44:96:ab:30:
1e:2b:43:34:0f:f8:4c:8c:7e:92:4a:5f:f2:2c:8a:
34:83:19:51:67:1d:ef:dc:a0:54:76:72:0a:da:74:
11:7f:06:38:69:17:05:a0:da:bd:2c:29:89:1f:54:
cd:f2:5a:99:24:7b:55:a1:1e:c3:87:8c:09:26:da:
35:11:37:45:a3:ba:46:ac:48:c2:b9:51:e0:3b:39:
44:42:f4:b2:84:b5:b9:b7:10:f8:ce:1c:85:cb:84:
1f:d8:e3:65:d2:59:34:51:ce:74:80:1f:df:8f:ea:
b4:f0:17:e7:d7:73:65:b6:d5:48:9a:8e:34:67:92:
33:e9:e1:7b:cf:c5:e8:8b:fc:00:c9:47:18:a1:6a:
8a:c2:f4:56:e9:31:71:84:37:27:c4:a8:3b:cd:4e:
af:ec:d1:4e:25:60:18:d1:68:6a:32:70:ca:a5:e0:
c4:cf:86:31:a0:9c:24:97:4c:ee:f6:ab:31:43:55:
9c:00:d9:b5:ee:24:01:54:2e:d7:3b:7a:b5:ac:e3:
ab:ed:63:5d:52:98:6d:67:5d:3e:1f:01:93:00:46:
b3:2a:97:82:bd:8c:d7:c6:4a:56:4c:58:10:41:93:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:C7:E6:82:DB:95:C2:67:BF:DB:A9:CE:C8:82:40:50:B8:1D:17
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:08:66:f8:3d:f2:81:f7:f6:94:52:35:f2:3c:08:24:09:26:
db:7a:dd:2f:03:24:f4:29:d5:3c:7d:d0:0e:d8:f5:c6:8e:49:
bc:da:07:d8:58:25:71:0e:45:22:df:49:4c:63:f8:6f:cb:62:
4b:7d:0c:97:b7:ae:57:4b:e5:f7:f4:ef:88:b5:ad:a2:58:40:
dd:da:5b:4e:e8:7b:f4:a7:1a:c3:13:9c:0c:b9:47:f9:77:bc:
39:33:89:8e:2e:b7:9a:5b:a2:d4:30:48:1a:ba:c1:41:ce:24:
af:a0:73:0a:b3:5c:34:08:2c:94:ad:62:f9:68:e8:da:e0:b0:
f3:0a:86:6e:da:8e:c1:17:77:aa:44:68:64:af:f8:a3:26:6c:
c9:86:69:da:31:b5:d8:9c:91:04:62:02:2d:08:3b:1c:4e:df:
fe:5b:56:96:41:c9:a7:b3:92:21:f7:be:7b:bc:95:c6:41:25:
ce:e9:9f:e5:1b:4e:1e:8e:83:60:a1:7f:2f:27:16:97:c7:c2:
50:00:4d:46:25:df:fe:50:1c:a3:87:e3:bb:a6:a9:3a:10:81:
45:b9:ae:39:6d:97:9b:cf:9f:b4:7a:26:e0:36:ec:8b:00:8b:
e7:e0:1a:9f:b1:57:cf:fd:e8:89:44:6e:68:2d:b2:9a:56:3f:
ba:7a:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:05 2025 by rpki-client