Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: S8yeXF9P1QSDcgCZbzswwBOIsDch8Q++Gc3YUvCMvrw=
Subject key identifier: B8:72:C3:D5:72:B1:BB:6B:EE:7F:E2:C5:AA:F1:66:5A:A6:78:F3:7D
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 019654930C29323974AA46E960C5374AAC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 2C
Signing time: Sun 20 Apr 2025 19:00:45 +0000
Manifest this update: Sun 20 Apr 2025 19:00:45 +0000
Manifest next update: Mon 21 Apr 2025 19:00:45 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: pEvB8teCLoU2wJTqYdTPePuRRjkVjpoY3pWw9SIwCNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:0c:29:32:39:74:aa:46:e9:60:c5:37:4a:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Apr 20 19:00:45 2025 GMT
Not After : Apr 21 19:00:45 2025 GMT
Subject: CN=b872c3d572b1bb6bee7fe2c5aaf1665aa678f37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:e4:6f:0a:0f:df:bf:8f:69:2f:a6:3c:ab:
bd:0a:0f:2e:1f:e2:d4:b5:ec:91:81:d6:a9:ae:27:
1f:08:b7:a3:b7:6b:5f:1b:45:0b:57:12:6f:50:7b:
8d:8a:4a:44:5e:da:e2:b2:85:37:d8:02:13:41:74:
9f:d9:86:13:77:b5:d7:2a:a4:3a:52:df:d8:8c:6b:
e9:f5:3c:02:bd:d6:08:9f:c6:bb:b2:29:01:1b:6f:
9e:9c:04:8c:d9:c3:c3:97:fe:90:af:58:cb:0b:fe:
64:6f:a7:87:34:b2:f4:77:60:10:e2:b6:7a:91:02:
34:7a:73:95:71:b6:8e:ae:95:22:78:6f:74:1a:5f:
7a:44:3e:7d:d4:b5:7f:27:9e:18:75:f5:b6:69:5b:
a8:35:27:25:c4:e5:06:a7:1f:14:d0:52:2c:a8:08:
e4:30:67:9e:99:b1:1c:07:f1:51:eb:c7:1d:43:80:
9c:33:44:81:93:46:c4:bf:dd:8a:5f:2b:f0:b9:0b:
28:f5:15:bf:0d:2c:a5:d1:79:4b:ce:e5:a8:35:d5:
1e:f8:85:e9:7b:93:5b:ab:c4:90:96:7f:3e:a0:3f:
9f:a3:5f:94:f6:6b:67:90:c6:bc:f3:a2:be:da:4f:
c3:aa:cc:87:af:c9:28:6e:cc:77:42:a2:12:93:b2:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:C3:D5:72:B1:BB:6B:EE:7F:E2:C5:AA:F1:66:5A:A6:78:F3:7D
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:16:03:fd:fc:1d:e8:c6:b0:36:3c:e2:3a:1c:ef:86:f3:39:
0e:e3:b7:94:1d:96:82:b3:50:06:28:35:47:38:0f:42:ff:b5:
59:ac:f5:e4:07:19:7f:84:cb:df:87:64:a5:fb:73:33:94:65:
c7:fb:cc:8b:44:2a:00:a9:94:d5:05:29:cc:c3:7a:22:b9:40:
cd:bd:e7:ff:08:33:d3:ee:9c:b3:e2:85:ab:b7:ab:e7:5c:e3:
c1:e0:85:b8:7f:c3:0d:35:2e:3d:5f:6e:37:81:37:e7:9e:e0:
83:e7:d3:af:47:53:08:fa:26:07:d0:ca:f7:3c:72:5d:ec:b8:
a3:c2:55:de:df:a8:b3:33:1f:81:69:3d:03:c7:21:65:f9:0e:
73:39:11:82:76:a8:9e:2f:71:af:98:1f:fd:3c:d9:b0:75:f5:
c5:8b:bd:19:93:bc:83:4f:48:83:e8:08:36:d4:e8:ea:27:06:
52:d3:01:cf:9c:24:01:8b:dc:e6:2e:e8:be:be:c2:8d:e4:f3:
38:82:1f:74:69:01:87:15:96:b0:72:e0:03:31:aa:29:82:fa:
4e:e7:ff:08:b0:6e:aa:f7:41:e3:8e:f4:c0:2b:83:d3:01:44:
4b:5c:5f:a1:4b:56:5c:2d:dc:a1:a8:78:40:1b:48:1f:2f:9f:
e3:c4:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:59 2025 by rpki-client