Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: 0r59yF5huO8MBGJ4PZQLY1ppKVV+QwsHf23kYLF3+NU=
Subject key identifier: 63:EA:E5:A1:B6:96:36:B8:00:35:A3:32:D7:F0:F2:8F:0C:B2:61:70
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 01984AAEC741AAA5F730EF02B2B3684A3539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 0130
Signing time: Sun 27 Jul 2025 07:00:24 +0000
Manifest this update: Sun 27 Jul 2025 07:00:24 +0000
Manifest next update: Mon 28 Jul 2025 07:00:24 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: On4sy6z/fh0fiDbY6b/2F9vcc4mTnqW1vjfexiJJWbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c7:41:aa:a5:f7:30:ef:02:b2:b3:68:4a:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Jul 27 07:00:24 2025 GMT
Not After : Jul 28 07:00:24 2025 GMT
Subject: CN=63eae5a1b69636b80035a332d7f0f28f0cb26170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:1a:dc:18:7b:4e:bd:b6:66:2f:4d:70:76:74:
3e:e4:ff:8f:9c:f0:84:54:17:fc:e7:57:65:67:72:
b9:94:ad:1c:38:f4:22:0a:8f:2d:f4:78:e7:ae:93:
25:5b:f4:0b:19:04:76:c9:9f:fe:b1:f6:c1:0b:19:
19:8a:28:9f:24:04:d8:5e:15:a7:13:9e:34:43:3b:
ad:11:75:d6:68:97:26:19:31:9f:cb:97:b1:3e:61:
c6:d9:aa:dd:e2:39:95:15:f4:89:af:9e:b0:78:ef:
46:7f:be:70:a5:79:c7:d7:7a:f7:63:53:5f:d9:6e:
31:4c:76:cd:14:2a:4b:99:3a:c5:54:1c:2c:b6:06:
79:98:b4:30:92:e0:d8:c2:0a:95:cc:05:7b:75:cf:
7e:0b:da:50:06:de:ea:6a:63:d5:0d:33:d8:e2:23:
49:1a:d0:d2:0b:1a:97:5a:51:87:44:e9:45:6b:2f:
3f:0c:8b:78:43:90:48:97:a1:f7:a9:ef:42:bb:61:
06:94:f4:28:c4:9f:9f:d7:51:3e:83:fd:1c:e2:87:
0d:32:b2:33:ce:d3:e5:f1:34:14:1b:77:9c:8c:6d:
1a:c1:aa:dd:e4:17:50:54:14:9a:23:8b:0f:6f:6a:
7b:19:71:09:69:82:c1:98:c9:d9:da:1c:c9:b0:94:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:E5:A1:B6:96:36:B8:00:35:A3:32:D7:F0:F2:8F:0C:B2:61:70
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:94:5f:f5:0e:44:14:f5:e8:5d:b9:03:27:e7:15:b7:9f:
43:a1:60:7e:96:eb:71:1c:93:d0:f8:6d:15:11:56:4d:90:05:
50:c8:35:f0:bf:f4:04:49:a8:0f:a5:8b:ea:9a:7f:ac:f9:e9:
0c:f3:09:55:8c:9b:5b:b1:84:60:97:ec:d1:15:e2:c0:44:7f:
72:68:d2:cf:61:80:f2:fe:af:72:97:b4:da:c2:b8:8d:af:5c:
07:00:8e:8c:7f:4b:90:3c:ad:d7:48:ad:05:52:35:99:18:3d:
db:92:15:69:9b:d7:60:1f:08:e6:9c:40:a4:c1:52:58:38:2b:
a1:85:aa:b8:3c:25:0f:ef:79:53:c4:9d:57:e7:2a:9a:eb:4b:
15:f5:67:fa:b3:66:70:05:ea:33:d9:fe:52:6b:a6:a7:0f:00:
69:f7:79:e7:91:2c:ff:8d:2a:be:e5:4a:cd:d5:29:3c:18:bf:
f6:3e:a6:b5:12:a4:81:6f:ea:f0:49:59:1c:08:5b:14:e3:7c:
b3:6f:d6:a8:2b:ac:31:7f:65:51:e6:0d:8a:7f:c7:ba:36:79:
5c:00:a8:ff:99:3a:57:48:44:92:03:e1:b2:44:21:63:99:81:
0f:d0:bf:95:ab:ef:64:2a:e1:e3:e6:6c:89:ca:34:a1:a5:7b:
5a:b7:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:26:48 2025 by rpki-client