Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: xpY0Rr/GoLevYqa23DxppLRKuQhCq6GaWwD61MJcbOc=
Subject key identifier: DD:C5:A8:1F:29:19:8E:5B:C2:D2:92:1D:F6:5E:9A:51:CD:97:95:EC
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 0197B6A17D9F1C5D41062B133AA41D44F1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 06B1
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: oF7PzAd31rRjJDfZ4iEwt4i7d4DLM3DUPuxpQg3otxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7d:9f:1c:5d:41:06:2b:13:3a:a4:1d:44:f1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=ddc5a81f29198e5bc2d2921df65e9a51cd9795ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:6d:64:f4:c6:e4:68:d1:60:e4:b5:e4:0d:
71:4b:aa:04:d0:65:7e:be:94:31:7f:ef:ee:c0:d7:
81:25:73:ee:39:3b:06:5d:87:b9:06:38:6e:91:b7:
26:35:4d:37:95:03:20:69:78:7d:06:42:ee:65:8b:
88:77:4b:73:f7:13:cf:c7:1e:bb:b2:a5:bb:ae:c5:
0f:b9:44:dd:f5:76:5f:23:f0:30:63:a8:86:b9:31:
15:3c:73:29:ac:a1:2e:24:d5:59:38:e9:c3:b1:65:
5f:a6:ec:a0:10:41:2b:f1:52:72:da:dd:8d:ba:93:
d7:f6:64:28:26:7a:f7:7b:a6:ec:78:a8:90:d6:e2:
24:b4:40:96:99:76:0a:dc:5d:66:43:a0:58:07:f9:
9b:7f:72:96:42:b8:cd:d2:8c:5f:e2:2e:dc:be:e5:
85:3f:03:45:33:e4:65:9a:8c:37:ef:5a:eb:85:2c:
38:bd:59:21:5c:df:1f:30:44:04:5b:b1:33:d2:83:
74:98:d9:4a:6f:8e:3a:81:f1:5e:30:86:22:85:1c:
44:42:33:9e:8c:8b:51:2e:e8:88:ff:79:e2:56:47:
f7:89:fa:f3:11:38:c8:99:d8:ae:06:40:86:93:be:
3b:1e:86:59:d5:53:02:b7:18:f2:1f:f0:47:e2:74:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:A8:1F:29:19:8E:5B:C2:D2:92:1D:F6:5E:9A:51:CD:97:95:EC
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cc:fa:81:1c:68:b9:41:64:82:39:84:80:35:f3:89:fc:23:
8b:06:dd:1a:83:91:93:46:65:1f:dc:20:ac:49:e8:f3:1d:53:
c6:ad:85:16:7f:be:8a:22:fc:0a:d2:4f:dc:31:f1:d9:d4:6f:
36:23:3f:cc:45:97:ba:81:78:6b:ae:3e:41:d4:a6:73:36:0b:
5b:b1:19:e4:c4:ea:5a:d7:aa:31:ab:c7:df:6b:fb:18:b8:10:
93:f4:34:8c:aa:b1:e5:9c:6a:b1:2d:10:b9:10:f0:80:38:59:
74:5b:ba:60:f0:33:88:15:de:89:e3:a0:8b:a6:14:bd:51:1f:
8b:15:c8:e6:27:56:52:69:e0:90:2f:57:dd:ae:32:31:e3:1d:
b9:68:32:37:b6:84:5c:5c:40:57:0b:cb:65:e5:28:de:49:7a:
29:36:8a:76:6a:a8:cd:8b:31:97:19:63:99:2d:33:51:76:34:
bb:6a:f9:e5:5b:8a:6b:9a:46:5b:9a:65:97:aa:03:11:ac:05:
c4:ba:89:99:ab:f4:78:0a:65:cf:4d:5f:e4:ac:12:14:c0:d6:
72:4a:a6:9a:6e:c6:81:7a:8c:8b:65:2d:f8:be:30:36:e4:52:
80:16:d8:f9:8c:df:b9:73:ac:53:2f:c9:c8:1f:11:d1:00:29:
f6:f9:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:03 2025 by rpki-client