Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: R4Q+Yfm0vtcieW0gH8H8fW4jJvj27wmUM367GVgof3k=
Subject key identifier: FA:C2:DB:40:22:31:AC:53:93:81:5A:EE:7C:9D:F8:1F:BB:75:CD:FA
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 0197B89007D4B07EE05EEA6BDE933B3CA576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: XCiUf/aJijoGcfuvhRDemwekGYwPtwJpgNz766kebhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:07:d4:b0:7e:e0:5e:ea:6b:de:93:3b:3c:a5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=fac2db402231ac5393815aee7c9df81fbb75cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:1b:da:da:65:56:d9:57:56:2a:3a:aa:a3:
6a:62:e1:60:9e:c8:a3:c7:00:44:f5:5d:3e:ba:4b:
95:44:70:cd:f1:63:98:87:b0:13:e1:83:a0:8c:11:
a0:ff:ce:15:7b:87:ef:79:b6:1d:c8:61:0e:01:d4:
9e:ec:5c:1f:a9:5d:4a:97:54:82:5c:73:95:e6:a9:
e6:f2:37:35:d2:3c:74:2e:fb:f9:77:08:df:7f:95:
d2:e9:ce:40:9a:80:36:73:85:3e:e1:49:01:22:c0:
2d:ef:e1:9e:bc:a8:77:55:18:c7:a9:c0:d0:eb:66:
58:cb:b1:1f:da:8c:a0:57:4b:96:51:10:ce:55:f7:
97:7b:59:fc:df:9e:0f:52:6c:05:70:b9:1a:de:6a:
fc:f2:25:ad:94:d4:d2:5e:69:58:bb:c5:1e:62:f7:
51:93:51:e6:12:5b:c9:d8:51:2d:ee:a0:f5:9b:9d:
01:48:1b:e6:6f:ad:07:d0:9e:8a:cd:ee:c1:00:5e:
ab:a0:b4:63:d8:33:1a:b8:b6:6f:1b:b3:0f:de:4d:
c4:be:9b:86:7b:7e:7a:2a:6e:33:9b:46:87:73:48:
5a:8e:dd:37:9b:40:92:2a:04:ab:47:54:d8:7a:8b:
45:cd:b3:c9:98:5d:fb:29:18:ae:46:b5:15:4e:b2:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:DB:40:22:31:AC:53:93:81:5A:EE:7C:9D:F8:1F:BB:75:CD:FA
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ab:18:59:ca:e4:2d:de:bf:fd:34:e0:45:67:32:f0:ea:ae:
fc:4d:1a:fe:62:d8:75:ce:e0:c1:41:2e:8f:7a:7e:f7:5c:d9:
2f:35:be:a7:4b:bb:3f:3a:aa:1b:fa:49:37:1b:e8:b8:31:dd:
e8:dd:dc:93:06:93:ce:73:58:61:29:f0:f0:4f:3e:22:eb:a5:
c5:cb:90:f4:56:ec:eb:12:05:8f:c7:e0:d0:83:c5:5c:de:19:
25:3d:87:08:ad:6b:67:dd:91:7f:a1:66:05:1b:ef:25:be:89:
25:a0:be:f1:8e:63:c4:a7:c9:37:e8:ea:e2:0d:83:25:e5:60:
f1:2a:96:c3:d2:02:87:ec:67:16:1a:d0:76:c4:c1:28:af:45:
0d:8e:d2:70:d9:08:67:cc:f0:3e:a8:20:9f:0f:e1:ca:ec:85:
96:e8:60:bd:27:d3:66:6d:e6:1b:53:3d:99:14:91:b3:f1:9e:
0b:6e:0c:16:c9:82:98:10:b8:04:90:3a:91:1c:5c:d2:fa:b0:
0e:ea:f7:b1:be:7a:43:75:79:4d:ae:bf:01:1a:21:bb:1e:50:
c6:1d:9f:4f:d0:19:7b:b1:46:14:32:23:b0:ad:4c:85:8f:33:
ff:91:b7:f8:e4:cc:c9:69:62:f7:f0:bc:2d:ac:78:be:da:b7:
7b:7e:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client