
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: 1DPNHMpq6ZYnBoPsnI5ADOYwcZ31UYlAL8QV6hxeFy0=
Subject key identifier: F7:C5:4A:96:BA:3F:0A:98:EF:C3:6C:56:01:DB:4F:FF:DD:76:E2:1C
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 0197470BFA93D30BB02412A3DEB0D3BF06D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 0662
Signing time: Fri 06 Jun 2025 21:00:56 +0000
Manifest this update: Fri 06 Jun 2025 21:00:56 +0000
Manifest next update: Sat 07 Jun 2025 21:00:56 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: h/GyJ/u1hpOi+6N+hqkjQgN2ZWA0URhm2SRZ7zpuA40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:fa:93:d3:0b:b0:24:12:a3:de:b0:d3:bf:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Jun 6 21:00:56 2025 GMT
Not After : Jun 7 21:00:56 2025 GMT
Subject: CN=f7c54a96ba3f0a98efc36c5601db4fffdd76e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:19:f6:9f:91:27:8c:e2:29:21:51:65:a7:
b2:1d:9b:52:b2:e5:21:5d:10:b9:44:36:64:df:62:
d0:73:2e:7b:3a:a1:d3:b6:83:e8:a8:79:98:40:ae:
56:10:60:b1:3d:e3:76:5c:74:8b:cf:84:75:2e:48:
3c:13:a6:8a:10:96:90:f7:4a:eb:bf:b3:58:a7:60:
6c:3c:0b:4f:db:ab:49:aa:88:a4:71:f7:e7:13:10:
c5:67:ce:6e:46:c2:c7:15:72:4a:3f:fe:5b:7e:86:
35:6b:a0:cf:aa:15:7a:58:0b:ac:c9:d0:9a:21:39:
f0:f3:39:bd:47:5f:a0:76:dd:5a:49:b8:47:64:b7:
6a:70:82:58:a0:3c:f2:54:3c:61:b9:aa:bc:cf:07:
e3:1c:a6:cd:22:ae:f0:e0:af:34:c6:96:e2:59:dc:
83:5f:5b:fd:e0:99:4c:8b:9a:f0:76:68:46:3e:b6:
b9:59:02:d5:09:e5:91:ee:d0:e4:8d:47:62:35:f2:
ae:6f:ff:25:87:0f:67:6e:ca:77:32:b0:c6:ab:4e:
cd:f0:b0:1c:ff:58:89:e9:7f:2a:a9:6a:45:30:67:
f9:0d:de:f6:17:19:0b:a7:cb:72:31:a9:7a:39:5f:
55:da:d4:46:61:c6:0a:00:6f:c5:74:ac:d0:e9:58:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:4A:96:BA:3F:0A:98:EF:C3:6C:56:01:DB:4F:FF:DD:76:E2:1C
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:38:91:38:42:cd:bc:33:bb:be:e0:cb:d7:cc:19:83:03:8b:
89:7e:f8:af:64:ec:73:9c:62:67:e3:c9:51:a5:cf:c2:d4:18:
6a:2d:7a:75:2b:b4:78:8d:9a:41:7a:85:d3:f6:cf:cc:91:a5:
5d:2b:3e:bd:dc:f8:e1:07:66:a4:f4:0d:7d:b8:ed:21:62:8b:
2d:9b:66:31:3b:d8:fd:b7:e4:d5:a2:41:a5:60:76:6f:50:0c:
ee:48:23:83:43:e6:c5:86:32:9a:54:b4:90:c8:51:1c:67:c6:
67:f5:20:7f:5a:35:7e:0b:1e:98:b8:dc:0f:57:a2:ce:6b:fd:
51:43:37:fc:5d:a7:52:98:52:57:a6:a4:66:88:a4:81:b8:77:
55:5b:25:96:06:3d:3b:cd:b9:b1:02:f1:b7:01:ee:51:6a:0e:
2c:db:a2:e9:13:be:8e:f1:1a:6e:3e:a0:18:38:39:43:7a:c3:
b5:05:e6:d0:b6:f9:4f:bc:b4:05:43:05:29:cb:bd:fe:64:d0:
c5:9b:4c:b1:cf:0f:39:0e:0b:4e:7d:4a:5f:40:e5:d1:d3:26:
b9:3e:9e:19:1f:5e:c7:19:26:2a:05:8d:3b:30:f8:d8:9d:9a:
2a:5e:6d:09:16:9e:8e:d3:c4:eb:03:7f:2b:91:0a:8a:dd:b7:
7b:f5:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:32 2025 by rpki-client