Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: Nzb8wDBOLwrr6z2n4lUpWbQ4jPcWtB3BcYpJoinKnL0=
Subject key identifier: CC:73:80:B0:09:13:0E:68:F5:4F:90:CE:90:9C:DE:F2:17:F7:F0:3D
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019645FBC5ABA8F4FA729C55F6A85948FC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 026F
Signing time: Thu 17 Apr 2025 23:00:50 +0000
Manifest this update: Thu 17 Apr 2025 23:00:50 +0000
Manifest next update: Fri 18 Apr 2025 23:00:50 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: aFBACDjiq4NT4+0nHovyQ6Al9AummWLpjZdECauRjOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:c5:ab:a8:f4:fa:72:9c:55:f6:a8:59:48:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Apr 17 23:00:50 2025 GMT
Not After : Apr 18 23:00:50 2025 GMT
Subject: CN=cc7380b009130e68f54f90ce909cdef217f7f03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:61:b9:c1:e5:05:8d:bb:7c:eb:d7:c1:3d:
24:80:ae:89:66:66:3b:ce:dc:82:bb:c7:0f:cb:6e:
2d:ca:72:ad:91:06:59:3d:e4:68:ca:a4:9c:8a:80:
3e:72:91:77:8f:29:5e:a8:b4:7e:76:be:db:e8:6d:
a7:b6:ed:a7:19:5e:37:b2:9c:26:a4:83:a7:c0:3c:
f1:76:0c:d0:a9:f0:21:ed:21:52:1a:ab:43:00:97:
a5:13:5d:4b:be:0b:ee:51:cd:b9:38:f9:c5:10:bd:
d8:6d:01:33:2c:e1:4f:4e:03:0d:45:ec:5d:2e:44:
00:eb:6c:91:31:b1:79:3d:77:8d:da:f9:07:06:1b:
a1:6c:ff:91:96:73:5f:df:c4:d8:fe:e7:07:fe:d6:
32:0e:6f:76:14:c9:2d:21:46:92:5f:53:13:17:5a:
00:a4:d3:85:b0:ae:bd:d9:51:34:89:47:7a:93:e4:
ef:65:6e:ed:8f:49:bf:0d:b8:2f:6e:03:f5:39:34:
78:46:df:e7:3a:d0:1e:06:64:e9:2e:da:f0:e4:09:
ec:ce:2b:04:b4:2b:29:ab:2d:60:f4:b8:a5:2b:99:
93:62:39:9c:96:d4:21:9d:9d:40:cf:a0:12:bc:54:
98:17:d7:12:42:de:83:71:77:54:bd:e7:1a:8f:ab:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:73:80:B0:09:13:0E:68:F5:4F:90:CE:90:9C:DE:F2:17:F7:F0:3D
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7e:f2:07:b2:51:b2:9d:26:e2:a2:7b:17:4c:20:f0:fd:72:
2f:d2:64:4d:3b:4d:e3:73:85:1c:3e:a5:81:46:c3:40:62:1b:
7d:74:a9:7a:37:63:73:44:2a:13:92:bb:be:a8:f6:d5:9c:df:
82:47:2d:52:4d:49:4e:02:49:11:13:53:bb:f8:6c:8a:23:27:
fa:a2:c2:1e:d4:c8:d4:8a:6a:2c:f8:6f:c6:40:7a:92:6c:04:
1d:bf:1b:a6:ea:1e:92:7a:a6:1f:52:25:f0:5b:75:c8:0d:de:
ac:aa:63:bb:84:32:4e:d4:85:f0:ce:6b:2a:7e:9a:ec:71:eb:
75:d0:69:3d:50:a6:91:8c:44:35:0d:83:ba:62:34:88:32:67:
9e:20:66:8b:5f:f9:b6:f6:a3:40:27:b4:c6:02:89:b2:17:7c:
36:cd:e6:70:06:ef:39:10:c4:18:51:6b:49:26:37:7e:36:86:
ee:ed:8a:cb:94:27:96:7b:bf:26:33:46:56:39:55:2e:71:78:
54:cc:06:14:44:b4:58:8f:8c:c6:3b:ca:40:f3:4f:7b:a4:70:
be:63:89:ea:19:90:4b:58:3a:90:99:47:b4:66:03:15:c9:3d:
29:57:e6:fd:3d:7f:a1:f7:a8:15:33:a3:ca:48:24:d0:1b:fa:
45:ae:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:06:31 2025 by rpki-client