Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: IdPtTSBhWL6ecKXEKWiulylLM0ED497pZIyHutA8kNI=
Subject key identifier: 56:A2:F7:13:E4:C4:12:87:CD:BD:3C:E2:74:62:F7:EF:0D:D3:8B:D5
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 019A71B836ACF71D95DE3576EEB38B7B41DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0C67
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: TIymciw4AUvPrKFuvln0IBEg1tMbYA7mDGpNhsvXIZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:36:ac:f7:1d:95:de:35:76:ee:b3:8b:7b:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=56a2f713e4c41287cdbd3ce27462f7ef0dd38bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:0a:2e:f3:89:98:ea:dc:2e:c8:9f:ef:a2:
63:c0:89:c2:5e:74:ed:4b:42:f2:eb:bf:42:af:e6:
99:9d:f5:b2:25:b1:ef:f9:13:31:95:f0:3f:c7:9c:
45:80:81:e4:ea:c5:9a:3a:0b:52:b7:0c:8b:0b:a6:
fd:37:cd:02:47:4f:10:7f:e9:1f:93:b1:63:f8:48:
1d:c8:d3:c9:e2:b5:33:8a:24:37:4d:17:a6:77:36:
7a:bd:09:21:3f:24:c3:aa:94:8a:b1:4c:03:5f:e7:
94:db:2d:25:25:d0:7d:42:58:73:db:48:b2:c6:89:
01:3a:10:d1:47:a8:ad:c2:a7:a6:0c:d8:ec:d1:63:
9d:88:3c:b2:84:f8:c1:36:2f:21:ab:c5:6e:b0:c8:
b1:18:e9:43:aa:a0:7b:ab:2c:25:a5:0b:8e:c9:73:
3c:4b:5a:8e:9b:1f:e1:b5:30:03:f8:00:ec:e0:5c:
3c:1d:d0:96:b0:30:cb:da:67:74:2f:cf:78:11:4a:
1d:73:15:62:51:3a:d3:1f:5b:cc:0b:8a:49:43:2e:
a1:6c:8d:fa:e4:41:88:bf:65:b6:43:16:6f:f7:37:
b8:94:69:42:f7:b1:10:17:a8:ec:e9:19:6e:1f:7d:
c4:27:c2:21:80:97:4b:ab:c7:81:5d:16:5c:95:6f:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:F7:13:E4:C4:12:87:CD:BD:3C:E2:74:62:F7:EF:0D:D3:8B:D5
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:b4:94:99:21:3c:40:b2:39:f8:22:ce:40:35:86:8e:1c:
3f:10:fc:5b:ee:05:1f:8d:a6:74:ce:5b:4c:f4:50:a0:66:e0:
ff:eb:83:74:b9:67:94:bb:cd:6d:2d:e0:39:bd:70:1c:a1:16:
cd:b6:26:0d:91:8f:a1:2a:7a:da:10:bf:fa:fe:38:02:58:c0:
fc:fa:b1:d3:3e:fb:41:eb:84:a7:19:60:7d:f2:ca:58:8e:7f:
b2:5c:0a:97:e4:af:47:00:fd:03:d6:49:3d:9a:4a:57:2c:46:
6f:4b:f8:8b:87:60:8d:9e:ad:a8:11:e4:75:08:c8:bf:bc:0b:
49:91:e9:df:74:31:f3:33:e2:35:45:b6:cd:60:d1:96:d8:b0:
66:53:38:90:56:91:76:db:66:66:79:ba:f7:bc:33:57:13:43:
d4:49:bb:9c:56:5f:86:df:e9:fa:74:e2:67:12:52:62:52:93:
e2:17:25:4f:94:7a:d7:5f:33:a0:60:2e:29:47:69:53:e9:29:
b9:92:13:75:ff:7f:a5:9b:d2:ef:f1:99:0d:87:6d:5b:fa:99:
7e:6d:fe:5a:0f:37:09:05:9f:68:59:67:53:22:f7:40:95:e3:
24:e1:c7:4a:eb:4e:79:93:77:96:db:ad:94:36:1e:6d:de:24:
bd:73:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client