Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: j4Bvsfkz89G58K1PG03luFX6dZ7vt2SMbRa8bAlKh/0=
Subject key identifier: F8:65:27:01:00:5E:12:9E:8D:C5:77:2F:9F:2D:7C:2F:B4:0D:62:05
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 019747E72190348D9BD721F91C601BCAA80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 05A5
Signing time: Sat 07 Jun 2025 01:00:18 +0000
Manifest this update: Sat 07 Jun 2025 01:00:18 +0000
Manifest next update: Sun 08 Jun 2025 01:00:18 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: 4DltxZciA8ILGqmR0ryFOHD58LL+yYSYeFit+A28sRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:21:90:34:8d:9b:d7:21:f9:1c:60:1b:ca:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jun 7 01:00:18 2025 GMT
Not After : Jun 8 01:00:18 2025 GMT
Subject: CN=f8652701005e129e8dc5772f9f2d7c2fb40d6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:69:69:25:8c:7f:32:a5:65:f2:93:5d:f1:
b6:81:69:33:d3:21:7d:0f:53:b5:72:ae:14:a1:1b:
04:94:28:d1:48:88:81:51:53:e5:41:42:04:3f:dc:
01:1a:90:3b:8b:57:39:6d:8f:62:46:a5:0d:61:b5:
07:a8:f3:17:98:37:68:b2:c3:36:8a:1c:ba:e9:5f:
d5:cb:87:dd:e3:24:4a:3b:6f:91:a0:2c:c6:fe:43:
86:63:ae:80:c8:5f:fd:00:eb:bb:6a:a1:1f:f3:94:
ed:18:fa:9d:46:6f:0b:0b:0c:97:b1:70:07:de:18:
e8:1a:74:23:7b:84:fa:d0:66:12:42:3d:6a:1c:6f:
eb:b0:2e:ad:2e:64:ce:a2:01:b5:ca:ed:c3:bf:c9:
92:e9:3e:f3:ba:ab:ee:5d:22:2c:a2:eb:07:7a:a9:
34:bd:40:97:6a:09:2a:49:5e:85:b2:f8:2e:c8:00:
86:2d:dd:6b:41:e8:de:5f:b4:2d:6b:79:d6:dd:10:
a3:d0:06:f3:dd:7b:9f:75:0c:0b:58:fb:fc:fb:8e:
7f:f6:3d:cc:f9:07:2a:ab:25:a4:aa:da:49:1a:50:
f6:52:31:e1:e6:52:0f:e5:16:d4:57:8d:e5:77:65:
fe:08:15:a0:e6:d5:e9:82:34:49:51:94:21:0a:0d:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:65:27:01:00:5E:12:9E:8D:C5:77:2F:9F:2D:7C:2F:B4:0D:62:05
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ac:16:9d:cd:74:57:be:36:88:fd:0e:e8:af:40:ed:9e:ca:
30:29:27:54:c8:e2:5f:04:e3:88:1a:f2:4e:f3:c4:01:53:db:
52:9d:f0:5e:9c:ed:ed:39:1c:44:e6:d2:e8:c1:8f:61:8b:b7:
2a:0a:ef:6a:93:41:1e:43:a3:3d:b3:52:cb:5c:58:7e:02:83:
46:33:fc:aa:54:cb:11:af:52:c1:76:e4:ae:0b:f2:b7:7b:da:
41:b7:ca:a8:b8:b2:a6:37:6d:17:68:70:39:48:f5:eb:5a:63:
cd:42:1c:8b:5b:9c:68:0a:a2:14:2f:1e:dd:e4:b1:72:1d:81:
c1:41:ea:77:a2:97:eb:a9:2f:a1:ec:6e:06:f7:2c:fb:af:0e:
97:57:76:60:d9:ab:e7:9c:af:fb:9a:d7:66:64:26:92:66:ad:
36:0e:5b:e8:66:e7:f5:81:ae:c2:27:62:0c:01:01:7e:66:d2:
b9:25:47:47:09:78:bc:28:60:13:43:30:7f:04:bd:b2:5b:70:
79:cd:08:ed:90:53:8e:4b:1a:12:8d:26:8d:59:9a:62:5d:6e:
23:60:e3:ab:80:60:55:50:9a:0a:21:ce:1e:5b:99:86:6f:9c:
c2:a9:f5:8d:ac:80:74:05:08:e1:11:ce:91:05:48:1c:e1:67:
a0:68:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:53 2025 by rpki-client