Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: 1otNm9uLeMEoe4O4oVE9SXqeuwMPNB2PPxwfEGgZXzs=
Subject key identifier: 05:B7:A4:EA:0E:87:87:DD:0A:E6:0A:AF:FE:C1:F6:B0:26:57:42:EF
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 0198481BA3D5C5607D1E3F4AA528792BD326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 19:00:27 +0000
Manifest this update: Sat 26 Jul 2025 19:00:27 +0000
Manifest next update: Sun 27 Jul 2025 19:00:27 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: P1Wvc1/JlmU40bIwBol6aLt/CaiE5LqhpbaWSlf/BqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:a3:d5:c5:60:7d:1e:3f:4a:a5:28:79:2b:d3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Jul 26 19:00:27 2025 GMT
Not After : Jul 27 19:00:27 2025 GMT
Subject: CN=05b7a4ea0e8787dd0ae60aaffec1f6b0265742ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:c4:90:14:70:ea:0e:f6:3a:16:a8:4a:32:
04:56:f1:1b:e8:2c:52:ee:f2:81:f4:5b:fa:d1:ab:
00:23:e7:a6:30:10:a2:bd:cd:66:f0:71:68:dc:65:
b9:dc:5e:91:cb:4c:c5:be:27:8a:dd:17:bb:98:57:
1f:fc:c7:ef:21:7a:83:33:b3:63:72:9c:fc:1e:2e:
06:fc:c3:a7:63:b8:a5:d3:12:0d:e5:79:c8:b6:32:
f6:c1:4d:6a:d9:f3:0d:0b:2b:55:e0:af:f7:02:df:
aa:3e:a6:21:93:84:37:45:07:bb:c7:5c:eb:91:83:
f7:c7:58:0a:c9:b5:0b:3c:c6:92:46:cf:15:99:2b:
98:6d:03:2c:70:b4:5f:55:8d:4a:eb:c5:72:b7:c0:
08:99:56:38:cb:c5:3d:59:4f:22:df:86:98:8d:32:
66:8c:26:11:69:91:17:b1:94:9b:ef:09:19:2d:2a:
8c:e4:c4:1b:2e:96:e3:e5:fa:4b:73:45:a2:8f:9e:
2b:ee:2e:e9:f1:9f:a5:98:0e:cf:73:f4:18:8e:ca:
5c:8c:72:eb:92:f5:c2:17:2e:3f:51:25:e4:f7:2a:
94:e8:cd:00:a6:b2:ed:75:30:df:fc:d8:eb:aa:9b:
2d:c6:11:22:ff:d3:cf:4d:de:04:5c:53:70:9a:1f:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:A4:EA:0E:87:87:DD:0A:E6:0A:AF:FE:C1:F6:B0:26:57:42:EF
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:3a:c8:be:ef:ed:5a:ba:7e:7c:eb:ea:e9:9f:95:cb:fd:
af:75:94:86:26:ee:1a:79:1f:46:6a:48:65:74:c0:62:b9:9d:
5c:62:df:47:3f:98:18:22:88:3f:07:ce:b5:99:28:f9:45:59:
62:7e:2f:24:b4:b9:7c:23:e7:09:30:55:d3:43:97:cd:68:f1:
b0:d6:99:cb:1c:9c:36:c0:9e:a0:eb:c4:d9:3c:fb:aa:f9:b6:
af:ea:88:5f:2b:ed:40:2e:dd:26:5f:15:01:c7:ba:36:ca:ed:
ab:11:dd:9e:23:c4:88:4d:a8:3e:4b:7d:d2:07:63:db:1d:d4:
b5:12:f9:9d:8d:30:0f:a2:c3:9f:cf:42:90:c3:27:ee:92:3c:
60:b9:d4:2a:83:c6:89:4e:57:f9:c1:87:9e:8f:5f:98:39:68:
f9:2c:ca:17:4f:14:b7:1d:7b:69:c0:95:86:c5:19:e5:26:e1:
39:6c:f4:61:02:56:e7:f5:e6:0b:4e:63:92:21:2d:a0:60:3c:
53:11:89:1d:9a:78:8d:f8:16:cf:2e:37:e9:88:95:0f:45:9c:
49:97:0f:c6:00:b7:b4:22:52:4b:84:87:b6:97:73:39:8c:8a:
ab:7b:78:d1:5e:19:e7:49:d2:e6:71:03:0f:b7:83:f0:4c:f6:
60:26:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:30 2025 by rpki-client