Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: pMhfgpf/9Gh8w614A1b+S6QZ087XWi7elcK7Cer8nRI=
Subject key identifier: 60:7A:57:8B:82:C8:7D:27:B8:46:63:68:4E:DD:B5:71:8F:FA:D6:73
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 01963B783FB33FED9F7FF31357ECDBCB1EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 051A
Signing time: Tue 15 Apr 2025 22:00:58 +0000
Manifest this update: Tue 15 Apr 2025 22:00:58 +0000
Manifest next update: Wed 16 Apr 2025 22:00:58 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: Uys/x9IbcSX/STilIniiI+uZLShdi9zN4N8KkS8oAUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:78:3f:b3:3f:ed:9f:7f:f3:13:57:ec:db:cb:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Apr 15 22:00:58 2025 GMT
Not After : Apr 16 22:00:58 2025 GMT
Subject: CN=607a578b82c87d27b84663684eddb5718ffad673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ff:1d:ea:b9:03:ad:00:89:2c:74:89:85:47:
31:24:54:e6:38:3a:f6:57:51:74:08:1b:7c:b9:bd:
cc:f2:45:61:8a:d8:5f:29:5f:45:05:66:2f:bb:0b:
ca:f4:6a:7d:6e:2e:46:f9:b1:eb:2b:15:3b:f6:45:
3d:aa:26:fe:47:e1:74:f1:b5:f8:04:36:9f:61:cb:
fe:a3:b2:32:a1:d9:84:ee:9b:42:e4:48:db:25:87:
a9:07:22:47:83:0e:0a:76:8f:06:03:81:2f:3e:47:
8c:e0:f2:0a:b5:10:50:24:fb:3e:8d:19:2c:e9:13:
ad:37:fe:6a:b3:db:d2:29:de:d3:8c:05:1b:f5:93:
13:6a:b1:fd:4d:fb:21:28:cd:46:a3:78:63:72:05:
ec:ac:73:3f:f3:10:b9:a5:0f:5b:c4:15:17:53:06:
83:32:33:62:24:54:47:59:51:86:62:c1:bc:15:fb:
5f:4f:e1:ae:c9:16:02:91:d9:04:2c:2e:5e:ce:23:
6e:10:5f:ce:83:15:c9:ca:72:9e:a0:4e:ea:00:b6:
19:fb:c5:27:21:57:cc:04:b9:f5:da:31:40:61:11:
c8:d0:7d:b1:cd:a6:b9:1c:a9:b5:0a:2b:b4:bd:f2:
f1:c8:78:b2:69:aa:bf:3e:55:14:bb:a4:32:fb:46:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:57:8B:82:C8:7D:27:B8:46:63:68:4E:DD:B5:71:8F:FA:D6:73
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:36:6b:53:99:42:42:ac:2a:d9:91:82:0c:f5:92:22:ea:
bb:d8:0f:28:fd:f4:9b:a0:79:22:f6:51:ab:a3:20:03:28:7a:
93:73:cd:00:22:a5:3f:49:10:7b:95:92:9c:19:b3:79:77:33:
20:1e:51:33:14:af:86:af:d4:f5:90:50:23:29:dc:c1:ad:45:
3f:49:07:5c:dc:28:27:c6:53:87:00:66:dc:da:45:44:9d:8a:
25:75:45:d1:fb:2c:70:d4:60:43:bd:23:a8:66:db:18:05:b7:
37:c7:13:31:f8:7c:17:e3:b1:67:57:54:3a:d6:ff:22:b5:1d:
c0:95:13:91:4f:86:0e:84:01:73:a7:1c:3e:a9:34:55:d9:44:
f4:ae:44:39:ee:a2:66:40:1f:77:19:70:c4:b4:b5:e0:ed:20:
c7:b0:cc:92:79:9f:01:88:d1:1c:50:1c:bd:28:e0:17:76:a9:
ce:da:f5:0d:b6:d8:3e:50:fc:4c:47:56:f0:91:b1:85:26:29:
22:5d:0b:73:ca:79:83:73:a7:c9:f9:9d:18:b1:f1:bd:ad:ab:
90:03:c8:d0:af:8b:fb:16:b9:d5:92:cf:9e:a1:42:0a:ed:1c:
e4:80:1a:65:03:9a:57:b2:d0:2b:68:ed:30:71:cc:24:8e:b5:
4c:e7:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:54:26 2025 by rpki-client