Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: cW36WcqEbQifPSZtwrHpvi9+EKxmnKecSYCm7Oryxmk=
Subject key identifier: 8A:74:E0:8A:AF:0B:36:E5:4D:EB:86:57:09:E1:67:09:3E:6D:62:51
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 0198D4731412A09C7671CDC61974638364A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0B91
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: HFC3dYpiRHf1blLnj+jnaTABOkjSkSydhNmcTV+Zqyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:12:a0:9c:76:71:cd:c6:19:74:63:83:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=8a74e08aaf0b36e54deb865709e167093e6d6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:b0:15:72:da:64:e8:f8:b3:48:96:54:33:
a7:06:ce:e0:0e:ab:b0:1a:fd:3b:b5:49:62:a6:32:
23:73:20:04:24:e1:36:88:af:f5:3e:32:a4:03:d5:
5b:dd:11:b6:36:a3:f6:ad:77:bf:e7:cb:cb:1a:a4:
c2:f9:8d:d1:0a:8f:8e:76:ec:5f:89:4f:9e:d5:7b:
a7:ee:25:74:f1:e8:4f:86:a8:47:52:53:e8:c4:0c:
3b:79:72:dd:95:74:14:20:e1:f9:c0:36:f9:6d:ea:
80:c0:64:00:4e:e5:4f:ff:01:ba:4d:65:ae:7d:01:
06:be:51:c5:66:46:35:12:91:f5:cb:5a:2d:7c:95:
4e:6a:a3:cb:f4:1e:82:81:37:5f:53:f0:40:6c:a2:
b7:1e:cd:56:4a:73:cb:d4:7c:e4:bf:71:6f:ac:ba:
b0:3c:41:e6:1c:e9:ae:48:58:17:8c:73:ec:c0:d9:
53:a4:6a:4f:a5:fa:2d:47:d8:b1:9d:c2:55:7f:8c:
c7:fa:18:73:9b:8a:fe:25:4a:d7:94:d7:d5:93:02:
1d:09:da:20:ee:c2:b5:15:f3:e5:46:94:9a:52:5d:
83:95:a7:8f:af:81:fb:73:e5:40:55:61:b7:f1:1c:
0d:21:2c:44:e4:73:bd:97:0f:b6:fe:5a:d2:83:cd:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:E0:8A:AF:0B:36:E5:4D:EB:86:57:09:E1:67:09:3E:6D:62:51
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:c6:b1:90:01:62:ee:4d:5e:df:04:05:13:98:0a:c7:dc:
e6:f3:11:32:b4:c9:e5:a4:51:5d:94:c9:45:01:35:bf:36:13:
80:e7:b0:9c:a3:f1:c3:c5:1e:d8:be:6f:1b:10:9a:af:c3:aa:
42:70:4e:4a:73:96:50:31:91:a9:fb:61:46:9e:8c:83:9e:69:
72:55:20:ed:82:ac:a8:6b:bf:49:29:f4:35:b3:cc:45:88:a3:
5f:93:7d:8d:2e:bd:c2:aa:c4:b0:45:c8:d5:13:ab:19:a2:c3:
c3:f3:dc:0a:c6:3b:65:fe:2e:d3:dc:3e:fe:3c:b3:d4:67:b7:
eb:c5:ca:0d:18:7b:35:ee:96:22:36:72:81:3a:66:e3:1d:10:
56:e0:bd:e3:e2:58:5b:e3:23:49:b8:83:67:37:ac:b5:3b:e3:
b9:4c:32:ad:f8:0d:ae:e8:a6:29:1e:94:22:d9:52:32:08:0f:
c1:a1:ec:6f:d7:7f:80:fb:1f:53:fd:7c:f0:96:63:63:36:c9:
6e:39:e5:42:ff:ec:e5:c3:7b:f2:87:a9:0e:30:81:fc:de:2d:
2e:5d:e6:69:8b:73:df:ad:e7:84:0c:2d:e0:e4:9e:79:70:92:
c7:22:59:10:79:0b:24:35:58:98:8a:95:04:06:41:cd:b9:7a:
f6:c0:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:46 2025 by rpki-client