Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: gGWDtqH8o2RTzRLG+AchaUEfFeBnlFkneLhDIweYz8Q=
Subject key identifier: FC:5A:DD:F7:28:F5:27:FF:42:54:65:2A:EC:54:C3:B9:1E:24:8C:C4
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 0197B6A089432906D25FBC2CD035612CBE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0AFD
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: 88H3TNIChP8I3ld+gUsitYnUWWbsdFm8MsVE3DpI0Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:89:43:29:06:d2:5f:bc:2c:d0:35:61:2c:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=fc5addf728f527ff4254652aec54c3b91e248cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:a9:c4:87:6a:60:8e:d8:f4:33:b6:30:8a:
f4:3b:0c:aa:f0:27:83:fd:98:cd:77:88:14:1e:96:
94:a1:c9:d0:1a:38:97:31:30:d3:1e:74:6d:9c:e4:
09:88:ef:62:43:94:d4:48:3c:11:fc:43:4c:fb:41:
95:05:21:df:3f:6a:14:fe:60:83:1d:86:ea:ca:cf:
7c:45:e1:de:b9:73:81:3a:61:78:62:1c:88:aa:a1:
70:66:a9:a6:9a:ad:cf:92:b6:08:4f:67:e8:28:cf:
6d:af:ca:b0:57:69:d0:05:1e:0d:a5:37:f8:94:a9:
ab:a2:d9:93:74:46:59:8d:2c:16:62:0c:11:b7:f5:
6f:ad:2a:c2:6f:9c:b6:fd:d3:a8:11:f4:7c:fd:f0:
f1:67:f2:33:03:97:ef:65:79:f2:da:1a:02:06:ab:
ea:08:2b:6c:43:a4:69:77:0d:2b:00:43:94:02:8d:
d5:d3:a9:2a:e2:30:07:d2:3a:77:c9:a8:1c:52:ad:
4f:39:d0:15:01:f9:be:99:d4:3f:ba:16:cc:53:f5:
b8:1f:e1:1e:c4:5d:7a:fb:b4:4b:58:09:c1:db:cf:
e4:67:8c:ad:ca:fd:43:94:f2:e5:0a:28:e9:de:26:
06:03:14:2f:83:65:56:96:2f:a0:75:74:2e:9d:11:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:DD:F7:28:F5:27:FF:42:54:65:2A:EC:54:C3:B9:1E:24:8C:C4
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:05:5a:5b:cb:ac:6e:01:8b:aa:31:bb:8f:e8:86:15:11:
73:7b:34:e9:77:6b:6b:13:b2:61:ff:c0:1f:2b:67:ec:53:8e:
1e:a3:7c:bb:74:f2:18:fc:5a:eb:ef:7a:49:0b:63:85:5b:0a:
95:88:82:8a:32:ea:01:20:dd:51:c2:24:1b:d7:50:2b:77:a3:
fa:d8:46:cc:16:76:67:73:73:ea:c1:85:bb:0c:bb:51:4a:08:
30:76:1c:ef:18:65:77:8e:1d:dd:9c:4f:16:58:e0:be:d4:55:
e8:52:46:3e:68:05:32:b2:81:4a:af:29:5f:73:43:00:a3:2a:
1f:93:f6:86:28:19:4a:3e:70:f9:a2:ed:8d:11:50:c7:9b:c5:
63:05:00:15:36:2c:20:26:19:c2:50:a5:17:54:53:2a:db:2a:
6e:90:c8:9c:9c:2a:6b:8f:0e:ef:8a:b4:c7:44:0d:e8:7d:a9:
26:aa:4c:b7:32:92:7a:1e:1e:a9:8f:73:42:7c:c6:5f:6c:40:
65:45:82:1b:d1:af:41:34:d9:ad:23:90:a5:bb:26:dc:e5:59:
85:e1:92:1c:5f:fc:da:78:14:f5:31:06:c8:76:b4:9f:b3:93:
47:8e:7f:e4:f6:bd:5a:b1:35:c6:84:0c:e5:e2:fd:76:a1:f6:
2e:02:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:21 2025 by rpki-client