Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: ii9GTL1i7vHdrf5k96/r6XdIGmztwpA89xBYYLOSzSE=
Subject key identifier: D7:DF:03:5F:CB:29:26:C7:E5:C1:6E:F4:04:69:A1:07:69:AC:DB:19
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 01984AAEAB4FD65E6A087818A8F241053F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 06D6
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: vRrODzfsGgQBnUnegRQNyD5UwI6p2M94OL+lmeQv5T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ab:4f:d6:5e:6a:08:78:18:a8:f2:41:05:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=d7df035fcb2926c7e5c16ef40469a10769acdb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:07:a8:de:07:af:cb:ec:33:53:91:67:60:
0d:c4:5f:5a:a5:6f:dc:a2:75:04:86:25:a1:16:10:
82:a5:df:a7:10:68:26:2f:fe:90:72:c5:7c:e9:93:
75:3d:59:2b:c2:b2:56:23:c4:42:91:c5:a3:37:a0:
75:6e:c9:d4:63:ef:5d:16:a7:0b:05:d9:38:b2:e5:
83:a9:d8:3f:b2:19:04:01:23:b4:aa:b6:8a:36:8e:
df:b6:86:29:75:22:71:d7:08:d1:78:1a:5b:cc:10:
49:6a:e6:5d:55:c1:31:c5:13:2c:d5:ff:1f:ce:bb:
24:b5:4c:da:fe:9f:6a:65:f3:89:99:3a:ab:3c:51:
3d:c3:28:da:84:29:fc:f9:3c:5e:77:0b:fe:53:39:
48:19:f1:06:04:4f:9f:01:b8:10:fd:08:c5:f6:6b:
b7:0b:36:90:57:f1:75:cf:9b:7f:f3:92:be:27:7f:
be:56:b8:91:4c:be:6e:9d:03:cc:85:78:83:67:41:
06:31:3a:6d:aa:68:e2:24:96:93:7a:da:a3:b3:80:
cc:61:fc:71:48:ea:4f:78:63:c9:17:38:ef:42:f7:
d3:65:65:93:b0:7f:55:1b:3a:c0:bd:04:ab:56:e3:
c0:21:16:ee:92:96:45:09:59:94:e7:bc:5e:87:e7:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:03:5F:CB:29:26:C7:E5:C1:6E:F4:04:69:A1:07:69:AC:DB:19
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:85:6b:a5:06:37:49:23:40:ec:db:60:17:3e:36:47:c3:8f:
a7:b4:dd:1e:15:86:aa:19:72:99:6f:3f:31:57:d9:42:b7:86:
55:ea:37:6d:8e:f3:40:04:0e:af:5b:79:f8:84:2b:5c:5f:cb:
65:e1:ef:08:50:01:78:db:3f:b9:76:18:08:b2:01:84:f1:90:
93:c1:b3:1d:2c:55:d2:de:4f:94:01:b4:5a:1b:e3:b4:40:ce:
f0:aa:7a:62:44:86:d2:21:35:7b:43:ae:95:ab:34:80:63:77:
fd:d5:1b:0b:3d:cd:5f:8c:25:75:0f:68:ce:04:30:d0:eb:34:
1f:c2:74:df:10:6f:b9:8e:b3:95:bf:cd:a6:ea:53:3d:41:65:
28:55:e5:a5:2d:dc:16:a8:89:5d:43:ea:b3:d8:c9:b5:37:07:
4e:62:5d:51:f3:f6:6e:ca:64:84:07:1f:74:eb:d0:2d:82:2a:
0d:74:72:78:6b:bc:82:1b:8e:90:c4:7c:eb:c2:8f:58:52:91:
16:5b:10:c9:45:85:2f:3b:73:f5:3a:23:77:07:83:86:b0:79:
c2:ce:5e:c3:a9:c0:b6:06:6d:2e:01:f1:cb:92:87:8d:2d:c9:
6e:b8:35:03:cf:ce:f3:1d:96:ce:ba:d8:07:40:a9:74:00:7c:
c4:d0:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:02 2025 by rpki-client