Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: Sh4Y3JqSY7/Vuif/CX7c9fDg5ZioQPdqAfSFnaeuD0k=
Subject key identifier: C8:05:C9:91:05:DA:0D:82:6A:03:AA:66:A8:3A:4E:F3:A7:D0:6C:09
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 019747E78A3F424B302CFAC7F7D107235389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 0650
Signing time: Sat 07 Jun 2025 01:00:45 +0000
Manifest this update: Sat 07 Jun 2025 01:00:45 +0000
Manifest next update: Sun 08 Jun 2025 01:00:45 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: sum+sxxqO1/Vq6QI9R2GxYN/r8ZNbYTvDQw8zs0kico=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:8a:3f:42:4b:30:2c:fa:c7:f7:d1:07:23:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Jun 7 01:00:45 2025 GMT
Not After : Jun 8 01:00:45 2025 GMT
Subject: CN=c805c99105da0d826a03aa66a83a4ef3a7d06c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:86:02:85:c4:27:0f:13:7e:83:80:e5:34:
d8:13:08:3b:ae:ce:ad:40:3a:02:c7:d5:0d:b9:d7:
45:2d:26:79:fa:8a:2b:7e:60:03:28:63:ec:d6:85:
b9:4b:f7:b9:c6:b5:f0:97:0f:f8:99:63:a0:2c:a0:
11:8f:2e:5c:18:c4:85:6c:a1:a9:64:07:c5:48:b8:
ec:44:49:03:ba:33:6d:90:74:07:b2:ef:7a:ca:89:
0a:5a:59:9d:eb:a1:cf:9a:fe:43:38:64:5d:57:12:
f9:8d:1e:ec:12:78:9f:5e:fa:4d:b5:12:53:ab:f7:
75:a9:fd:37:63:27:73:8e:88:5c:d6:1e:c5:d3:fb:
ac:b9:cf:00:06:e9:1b:9a:de:c7:a4:35:69:88:8b:
51:08:d8:35:b7:17:68:38:ee:7d:68:70:96:d0:39:
60:03:2f:01:86:cc:09:9d:34:c9:08:76:38:39:39:
83:72:46:3e:e7:80:51:60:83:55:fa:27:5c:aa:98:
d1:61:39:f6:30:5d:d2:11:f4:93:1a:bd:41:5f:93:
9e:5b:d3:b9:6d:9f:3c:23:cb:b5:09:ae:48:d0:23:
92:70:e2:02:e9:ff:f2:e2:46:f5:06:df:6a:25:36:
14:76:97:c5:4c:b9:0f:98:01:41:c6:60:90:07:00:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:C9:91:05:DA:0D:82:6A:03:AA:66:A8:3A:4E:F3:A7:D0:6C:09
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:da:8a:f9:55:a0:1c:71:22:b2:69:04:f7:5d:72:78:3f:
ce:c5:3f:87:aa:f3:cd:87:0a:a6:bb:ec:5b:48:8e:ed:66:15:
7f:83:93:7a:90:0e:b0:db:1d:d9:71:7b:68:02:22:1f:1d:fb:
ba:7d:8a:a8:ee:60:48:ba:b1:83:d3:9d:21:25:64:6e:fb:e5:
27:bf:28:d9:9b:93:4c:ad:87:75:d6:69:59:06:75:cc:7e:91:
c9:6d:c1:0e:59:5d:c4:42:68:dd:bf:ac:1b:51:44:72:cb:40:
2f:22:fe:b8:b5:55:c9:c2:99:33:cf:7e:61:9d:12:8f:18:63:
a6:97:c8:04:5b:79:81:71:7c:b1:1a:f0:aa:41:44:30:67:e7:
86:0a:f6:18:c0:0f:85:65:f7:c8:30:fd:ee:97:ee:5b:f6:ed:
1a:f2:9e:73:d0:8c:ed:f0:47:5f:7e:cf:70:45:e7:c8:af:20:
59:81:3f:3b:f5:59:9c:d8:d8:e9:4d:51:1c:0e:9c:f4:8f:b0:
04:90:a9:4a:95:dd:f8:f8:a3:18:5b:57:b2:62:63:3a:73:cf:
25:20:fb:50:45:5a:ac:92:bb:11:c1:63:4a:4c:bf:67:a6:72:
8b:30:bd:83:6e:d3:87:51:df:b4:8b:f9:d5:26:06:19:3d:7e:
f0:df:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:36 2025 by rpki-client