Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: 0Ki1ZQJftnoeyQNQNaJZEqh7NifSbEpA8pa1CD1lTX0=
Subject key identifier: 04:38:04:14:D7:80:68:0D:54:51:F2:A4:68:A7:90:34:29:54:41:FD
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 0197B8FD77EB4C859B207CA2303F1C34B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 069D
Signing time: Sun 29 Jun 2025 00:01:48 +0000
Manifest this update: Sun 29 Jun 2025 00:01:48 +0000
Manifest next update: Mon 30 Jun 2025 00:01:48 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: /nDb8jOuMkmPPpQ+eMQeDm1uRkEsXDzO/OF03g2fKwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:77:eb:4c:85:9b:20:7c:a2:30:3f:1c:34:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Jun 29 00:01:48 2025 GMT
Not After : Jun 30 00:01:48 2025 GMT
Subject: CN=04380414d780680d5451f2a468a79034295441fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:52:40:1d:7c:41:90:1e:77:cb:35:ca:9e:
fa:9e:ab:a1:a4:3e:7c:7e:7b:34:be:8f:97:cb:61:
85:18:ab:78:58:17:4f:19:03:36:69:3f:51:8a:e7:
76:e3:6f:e3:4c:fc:2c:d0:b9:fe:84:35:b2:e0:10:
96:bb:70:0a:e9:42:0a:87:10:65:b0:2c:20:6f:e2:
67:4b:75:85:2c:79:af:6e:b5:be:5c:13:d9:4b:99:
c6:35:a1:3d:00:56:4a:fa:f2:a3:35:53:5e:09:42:
3b:90:ac:f6:42:ad:c6:ef:0d:9d:c6:e0:a9:44:af:
a2:cd:13:4a:6e:c8:fd:fd:e7:d5:8e:b7:4b:6a:a5:
fe:38:56:e8:2a:09:8e:31:fc:e4:59:9f:6e:6a:2c:
ce:77:42:f3:f6:0f:30:33:17:c7:ff:91:d2:10:68:
0c:a7:e1:d9:1a:95:c2:cf:ab:bc:77:14:97:39:cd:
2b:cb:b5:0b:f9:b2:6a:d3:34:a1:f6:9c:d1:b1:a8:
54:55:b0:7b:5b:2d:3a:e8:78:3f:e3:ed:97:57:5d:
b6:c7:f7:6e:4c:c8:a8:7a:d2:eb:ee:7e:15:fc:2d:
10:e7:2a:77:8a:d0:a7:09:ec:4b:27:24:9e:f9:64:
ab:b5:47:87:c3:9d:70:d9:88:0f:d3:60:d6:28:ad:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:04:14:D7:80:68:0D:54:51:F2:A4:68:A7:90:34:29:54:41:FD
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:f5:a3:a5:be:9d:ed:65:d8:70:c5:5c:fc:e3:78:24:8b:
36:7a:63:fd:ed:3c:8d:a6:38:5c:d1:bb:3f:e1:18:75:ca:9a:
83:80:5e:ef:1d:67:e4:a6:ca:8c:d5:38:fe:08:e1:bf:d0:60:
14:44:5b:a2:98:3a:77:97:96:20:fa:0d:93:05:e0:8d:4c:7b:
7b:ff:cc:a2:f5:68:ff:21:2f:46:17:6d:cf:95:36:a8:e0:ab:
bd:a6:fa:8e:7b:e5:05:16:33:14:c9:ed:ef:c2:c3:b6:ea:ed:
41:d3:b2:49:7a:6e:30:e9:0c:0e:62:ed:c5:71:55:47:6e:1a:
65:97:69:5c:c0:1b:30:10:ea:08:de:5e:46:7a:f3:4a:e5:7b:
b1:8c:af:bb:d7:b8:75:5e:75:38:1c:24:cd:53:b3:a9:8e:d9:
7c:7d:e7:5b:bf:c8:91:9b:ff:47:bc:8f:df:27:eb:f4:d2:d1:
27:43:91:11:ea:fb:40:16:cf:92:a1:50:53:17:a6:d4:53:c4:
61:19:d5:c5:65:13:1b:28:e9:93:22:2c:a0:60:7a:83:0a:ef:
43:21:32:cb:bc:61:79:8a:d0:b6:9d:41:83:f5:c2:13:66:77:
91:db:6f:4f:7c:65:f9:0d:6f:66:7f:93:49:87:a0:41:e2:d8:
d2:eb:ed:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:12 2025 by rpki-client