Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: ZXjjNCiMpBGJlejrluA9v+Vep/kAXkqpvkee7hjHqxc=
Subject key identifier: 99:B2:EE:C5:C1:C6:4E:92:64:5F:4E:51:EA:C1:81:15:EF:BF:20:71
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 01984AAF4208F43D2038FF1C6944EF3E205D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 062B
Signing time: Sun 27 Jul 2025 07:00:56 +0000
Manifest this update: Sun 27 Jul 2025 07:00:56 +0000
Manifest next update: Mon 28 Jul 2025 07:00:56 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: eXP0RW4HCDlimWn6m5V56fdQmAAbvTEVRpgmzGysg3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:42:08:f4:3d:20:38:ff:1c:69:44:ef:3e:20:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jul 27 07:00:56 2025 GMT
Not After : Jul 28 07:00:56 2025 GMT
Subject: CN=99b2eec5c1c64e92645f4e51eac18115efbf2071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:27:97:e7:10:bb:5a:a8:29:93:2b:d7:ca:
ed:bf:34:c8:1a:75:19:02:7e:a4:ed:fe:22:53:9e:
33:2d:ba:97:3e:81:3f:e9:56:08:78:f3:93:09:55:
b6:37:00:cc:25:f1:07:bc:95:78:0e:a9:c5:99:42:
94:a2:da:7b:f1:dd:61:dd:a3:28:b2:0e:78:6d:d4:
6b:52:2b:9d:fe:22:ef:e9:51:1b:6a:0c:aa:a2:bb:
94:d5:c0:27:b1:17:1d:2d:f4:2c:35:d7:ca:f5:c6:
f2:75:ec:7a:53:f7:f6:f8:55:9f:bd:5b:1c:97:1b:
42:b1:b0:2a:60:5b:d9:97:10:61:3b:5f:a0:a0:cd:
d1:6d:59:8b:b8:4c:dd:5f:48:18:02:5a:6c:db:f9:
86:21:99:7c:71:36:45:af:05:9e:8c:d4:e8:f5:26:
4d:fa:08:9f:77:68:26:f1:c7:ab:d6:58:98:40:e3:
7a:fc:8d:3e:e6:c7:c5:24:4c:70:ba:c9:b3:bb:73:
f6:17:e0:9c:eb:fa:ad:fb:fb:13:39:5a:5e:2e:fc:
82:a7:73:e5:3b:6c:d7:29:43:f7:fe:13:1f:0b:df:
73:c4:63:54:70:76:71:4d:27:46:81:39:0c:1c:43:
73:5f:4c:b6:a3:f9:b4:d7:fb:51:52:c5:ec:5e:81:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:EE:C5:C1:C6:4E:92:64:5F:4E:51:EA:C1:81:15:EF:BF:20:71
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:97:7a:b7:ed:f1:b0:61:10:8b:92:ec:fa:00:20:53:aa:ed:
77:ae:b3:30:ac:c6:46:c3:bb:0f:fc:8c:c8:9e:ae:f6:cb:30:
f5:ab:31:8d:ff:84:ca:6d:c2:df:71:b2:c6:aa:2d:90:b8:32:
bb:96:c0:06:d1:25:5b:db:cc:42:2b:49:3e:eb:e8:e2:3e:a9:
a4:d3:0d:99:99:f2:ed:8c:dc:17:c3:9b:15:b7:2a:79:46:2a:
26:84:a8:7b:77:a1:9d:a3:ba:48:15:cc:0b:16:ce:f9:7a:dd:
36:51:8b:bc:32:1a:b9:83:7b:f6:b2:1a:a6:a8:ef:d6:05:06:
d2:44:3b:51:74:15:20:b1:a6:5d:41:c2:6c:da:84:32:b3:7c:
47:42:2e:bf:90:fd:1d:41:4a:a6:8d:26:fe:0b:e9:e1:de:57:
bd:3a:e1:7c:be:e4:c2:ee:3f:25:bd:16:3d:75:43:36:d9:ef:
6b:0a:31:bc:23:9b:54:5d:79:aa:bf:de:07:2a:92:bf:19:60:
25:22:34:be:95:52:6b:93:80:a8:40:9f:e9:2e:3b:0b:a1:11:
bd:b9:46:3e:26:80:89:29:cc:28:78:79:ed:a4:d9:10:12:c5:
7a:52:14:0d:e2:c2:8e:2d:11:39:8f:49:7e:8d:84:b1:d4:2e:
ab:5f:08:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKr0II9D0gOP8caUTvPiBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNlOTFkNWIwNWI0NWYwN2QzODUyNGY0ZjFlMmUzOTJi
OGE4M2EwHhcNMjUwNzI3MDcwMDU2WhcNMjUwNzI4MDcwMDU2WjAzMTEwLwYDVQQD
Eyg5OWIyZWVjNWMxYzY0ZTkyNjQ1ZjRlNTFlYWMxODExNWVmYmYyMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrknl+cQu1qoKZMr18rtvzTIGnUZ
An6k7f4iU54zLbqXPoE/6VYIePOTCVW2NwDMJfEHvJV4DqnFmUKUotp78d1h3aMo
sg54bdRrUiud/iLv6VEbagyqoruU1cAnsRcdLfQsNdfK9cbydex6U/f2+FWfvVsc
lxtCsbAqYFvZlxBhO1+goM3RbVmLuEzdX0gYAlps2/mGIZl8cTZFrwWejNTo9SZN
+gifd2gm8cer1liYQON6/I0+5sfFJExwusmzu3P2F+Cc6/qt+/sTOVpeLvyCp3Pl
O2zXKUP3/hMfC99zxGNUcHZxTSdGgTkMHENzX0y2o/m01/tRUsXsXoE57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmy7sXBxk6SZF9OUerBgRXvvyBxMB8GA1UdIwQY
MBaAFJ0j6R1bBbRfB9OFJPTx4uOSuKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAt
MzdhOWRkMDJiMmM0LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAtMzdhOWRkMDJiMmM0
LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJd6t+3x
sGEQi5Ls+gAgU6rtd66zMKzGRsO7D/yMyJ6u9ssw9asxjf+Eym3C33GyxqotkLgy
u5bABtElW9vMQitJPuvo4j6ppNMNmZny7YzcF8ObFbcqeUYqJoSoe3ehnaO6SBXM
CxbO+XrdNlGLvDIauYN79rIapqjv1gUG0kQ7UXQVILGmXUHCbNqEMrN8R0Iuv5D9
HUFKpo0m/gvp4d5XvTrhfL7kwu4/Jb0WPXVDNtnvawoxvCObVF15qr/eByqSvxlg
JSI0vpVSa5OAqECf6S47C6ERvblGPiaAiSnMKHh57aTZEBLFelIUDeLCji0ROY9J
fo2EsdQuq18I7A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:38 2025 by rpki-client