Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File: ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier: TZhqPVysk3aBUXHvOIUEK5J5bhVoP38q7cvdriZAe1A=
Subject key identifier: E8:6D:DC:15:E9:BA:B9:C3:99:5B:7F:41:4F:1F:9F:83:83:77:11:FB
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer: /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial: 019854FB5EFF815B200AD3B03618EDCB50A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number: 0977
Signing time: Tue 29 Jul 2025 07:00:16 +0000
Manifest this update: Tue 29 Jul 2025 07:00:16 +0000
Manifest next update: Wed 30 Jul 2025 07:00:16 +0000
Files and hashes: 1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: +ua9VLkc9Rp8DeKyJpoItkE/2qVyrb+xpNM9yDe/Q7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:5e:ff:81:5b:20:0a:d3:b0:36:18:ed:cb:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Validity
Not Before: Jul 29 07:00:16 2025 GMT
Not After : Jul 30 07:00:16 2025 GMT
Subject: CN=e86ddc15e9bab9c3995b7f414f1f9f83837711fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:1e:2d:87:77:1c:27:d7:0c:11:36:04:38:
89:c6:83:3b:be:f3:89:02:9e:21:24:ff:1f:11:0f:
d7:01:3b:b1:2d:69:2f:30:49:b8:ba:ac:72:60:94:
46:da:fc:c8:cd:8c:09:a8:fb:00:55:c5:37:55:3c:
1f:ad:15:04:e4:c6:0a:48:5e:a8:05:bc:8b:63:0b:
7d:9e:f9:00:bf:c6:51:21:0a:86:3e:24:32:ae:34:
df:3e:52:97:2e:35:b0:c9:b1:e4:dd:19:75:24:4b:
44:c1:1d:c3:50:e4:66:39:55:0f:31:33:ea:da:48:
d1:f6:3b:f2:37:03:2b:e9:fb:cb:1b:de:ef:e9:76:
49:c7:08:4f:65:a0:cc:91:cd:62:80:8b:ad:b3:f2:
4e:f6:54:38:1f:40:e0:d6:cc:e6:dd:40:44:ee:90:
4e:9b:66:08:cb:7d:cc:6d:db:5a:dd:80:ab:28:f6:
69:95:b6:87:bf:96:7a:18:fc:a7:f6:05:59:a2:d8:
50:26:e7:9a:26:b4:0c:fb:42:14:3c:0b:8a:60:10:
00:f9:3f:21:69:23:c0:51:ee:86:0c:75:15:64:b7:
0d:9e:8c:d5:16:31:e7:b8:0f:8c:7b:a5:fc:c8:fd:
e4:eb:52:60:47:47:91:05:5f:17:a6:29:84:4a:66:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:DC:15:E9:BA:B9:C3:99:5B:7F:41:4F:1F:9F:83:83:77:11:FB
X509v3 Authority Key Identifier:
keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:45:27:7e:c7:44:10:8b:01:a9:ab:d3:e9:5c:03:9f:84:
d9:8d:65:c3:f0:04:61:8c:43:29:32:f9:f0:51:e4:35:c1:83:
74:b5:d2:66:cd:ac:67:98:d1:6e:be:33:df:ab:71:e0:f1:d0:
48:fa:67:57:d1:a3:a3:d5:5d:75:7a:02:3f:8b:dc:22:06:40:
08:1f:59:da:c8:86:40:98:32:c0:57:7e:7e:5e:d5:a5:bf:c4:
55:37:20:25:8a:f8:a4:b0:5f:37:3a:15:29:30:d9:10:32:86:
76:d1:89:5b:b6:fb:3e:0a:87:6c:da:19:27:45:48:e9:2a:7f:
54:44:41:5f:84:d6:9f:5f:ff:11:63:34:49:f8:85:5f:5c:8a:
9d:66:59:e1:b2:03:16:09:2c:07:b9:eb:3f:0d:26:c7:87:45:
49:19:fc:7d:9a:d9:7f:bb:58:46:32:02:4e:8c:23:ca:ad:e1:
c3:97:fb:a8:0b:ad:ea:da:45:ac:87:0b:76:3e:d7:c7:4b:03:
9c:19:29:23:08:54:ce:6b:96:65:dc:9b:05:e0:4a:0c:96:77:
61:bf:a3:0e:66:86:ec:ae:03:4a:e8:f7:8f:33:7e:a1:61:13:
43:da:c0:62:81:67:d6:c1:c0:1d:8f:91:8c:65:3e:b5:c5:17:
aa:89:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:09:47 2025 by rpki-client