Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: nQr0a2PvIF1A1MhE4LEfjMH2yTAILtjDCnBGlgyszqs=
Subject key identifier: 2B:D5:AA:A9:1C:6A:44:6B:34:39:F4:BC:CE:7D:56:DE:56:72:2B:CA
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 0199FDD99A88CD0754555AFF39A3E1CFAB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0C2B
Signing time: Sun 19 Oct 2025 19:02:00 +0000
Manifest this update: Sun 19 Oct 2025 19:02:00 +0000
Manifest next update: Mon 20 Oct 2025 19:02:00 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: Nbrrxw31Wy5+8STxZaXBBjbgLumA0v8Zn9pvRtqa6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9a:88:cd:07:54:55:5a:ff:39:a3:e1:cf:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Oct 19 19:02:00 2025 GMT
Not After : Oct 20 19:02:00 2025 GMT
Subject: CN=2bd5aaa91c6a446b3439f4bcce7d56de56722bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:03:d3:52:6b:f7:b8:d3:21:d9:85:5e:7c:
7c:a7:2d:7a:35:d1:44:de:9d:65:d9:56:ec:b4:d5:
71:23:e2:71:6a:a3:59:e2:06:5b:c7:81:85:cb:34:
a5:8b:34:54:b3:36:62:f4:90:f3:4f:79:98:1d:f3:
25:a2:dd:7e:e1:5c:9e:15:97:36:ea:76:22:80:0b:
5c:45:a2:39:fa:b5:48:32:e3:15:d6:49:17:98:de:
6b:6f:ce:a3:e4:dd:96:98:6f:d3:ce:47:dc:d7:73:
c7:ed:f3:c2:26:97:f7:05:cc:e1:11:f7:5d:9e:94:
93:af:66:82:ba:10:a0:46:dd:18:5b:aa:66:09:63:
ab:c1:02:0c:0e:d8:dd:f4:2f:0e:ca:19:b5:dd:17:
44:92:a5:61:67:2c:04:63:45:57:9f:59:74:63:44:
11:a4:68:1c:39:f8:b3:3a:25:e8:8f:42:f7:4f:75:
38:c3:88:96:d9:4e:a8:c8:d7:63:11:71:25:28:f3:
5d:0b:2a:e9:3c:14:9b:a1:5b:e0:35:2c:cb:94:c1:
cf:46:10:3a:45:c6:89:6c:79:61:4c:e6:e7:03:d0:
44:1f:ec:f7:98:c4:12:a3:77:73:47:33:0c:14:56:
79:f9:83:2d:c6:74:56:59:8b:88:24:9a:6f:f6:d7:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:AA:A9:1C:6A:44:6B:34:39:F4:BC:CE:7D:56:DE:56:72:2B:CA
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:88:be:5c:66:3e:76:22:14:47:1e:da:92:2e:f7:3d:3b:
7a:fd:e2:4c:03:00:0d:32:93:46:50:2e:75:2d:48:a2:be:2a:
11:3f:9d:23:98:c7:3f:95:e9:63:af:d6:26:6f:c6:a3:0b:f7:
dc:31:70:1b:e4:6f:0a:78:48:59:91:0a:30:fe:4c:ef:d4:95:
ed:30:0e:c4:be:36:b8:2f:a8:7a:a4:8f:9d:4a:f7:da:96:1a:
e6:4a:ae:d0:45:41:a8:c2:0e:47:2e:89:c4:1b:e4:f7:1c:71:
b9:af:7a:b6:17:20:67:93:a6:aa:6a:12:74:c8:1d:cb:85:65:
47:4a:17:77:8b:9e:77:00:ec:99:03:73:d7:ba:74:d2:d6:f9:
50:75:99:75:d5:01:21:a9:c6:e9:7b:06:61:3a:21:a1:f4:90:
d0:c1:38:8a:e3:09:95:88:a6:a8:6d:b3:72:db:97:a6:98:c3:
3f:a1:39:f6:13:86:7f:dc:9e:4c:b9:f4:6b:13:d3:3a:69:53:
63:a1:e6:49:1c:7d:37:53:f3:b8:0b:d3:19:45:14:c9:70:b2:
37:5a:cb:bd:cd:a4:a3:d6:35:0c:35:1d:78:f0:5a:c8:fc:da:
c2:d1:18:42:d0:da:60:22:df:69:c3:5d:c0:b3:eb:f0:9a:7b:
77:bc:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:03 2025 by rpki-client