Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: 9lGMvxu8Ymvq+s97pRmKJScJCxr3cKfzdnkoV5T0lWM=
Subject key identifier: 90:16:AC:2A:D9:B0:56:CE:33:0B:C2:D8:DE:97:E0:C3:41:AA:9B:87
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019921E7679CA350FB4F6F6AEB77A1A51DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 03EA
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: hDf+ZvG3W20OwSkZvjM7VBq6aOJ+RPQqwf7Q6QyVnn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:67:9c:a3:50:fb:4f:6f:6a:eb:77:a1:a5:1d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=9016ac2ad9b056ce330bc2d8de97e0c341aa9b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:bc:37:5a:78:84:7a:e4:4a:16:05:27:79:
99:41:a9:31:b9:13:02:07:23:a5:91:a5:c2:b9:f1:
82:41:6e:11:4a:f4:0b:3d:d2:e4:bb:0b:cd:cc:e1:
ef:9a:99:26:d9:e7:0a:7e:e4:7c:71:5c:7b:55:c2:
e2:f8:e6:33:2b:3d:a3:5e:2b:02:64:a9:6c:ec:61:
97:95:b1:d1:cc:fd:10:86:b9:b9:b5:b6:3a:fb:bf:
44:4a:ba:d5:c3:65:70:f7:54:b7:13:8f:99:3b:19:
57:40:c1:20:f2:89:6b:80:15:d5:48:c1:71:6c:12:
d9:67:b6:17:ec:f8:c6:e7:b0:7c:5c:bc:c6:8b:0c:
68:1b:1f:91:26:a0:77:33:d7:9b:8e:ed:59:5b:f8:
4b:54:5d:9f:52:8d:3d:2f:5e:0d:26:2e:30:f5:7b:
b2:3e:a3:bc:7d:f6:72:e4:31:6a:90:0e:cc:10:37:
d1:83:8f:cb:fe:10:b6:9e:a3:c3:54:99:6f:ec:58:
b4:d3:99:39:ff:8f:86:ad:e6:59:05:fc:9d:9a:f3:
5c:a8:ff:b4:67:62:4d:77:2b:d2:13:27:73:95:bd:
73:92:11:10:c2:ea:19:35:00:be:b4:1d:a9:b8:aa:
ef:9f:5b:43:60:e8:4c:f1:51:3e:d2:53:7f:fa:2e:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:AC:2A:D9:B0:56:CE:33:0B:C2:D8:DE:97:E0:C3:41:AA:9B:87
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:30:e1:2d:3e:b7:e2:5a:b5:d9:b5:be:90:88:fc:14:99:d0:
1c:8f:27:1c:91:dd:b2:54:df:72:0b:f6:73:d7:bf:59:87:1b:
3a:70:a2:f5:da:46:16:cb:2e:0a:c7:de:71:7e:b3:62:09:c2:
25:ed:a8:c5:eb:83:90:91:0f:e8:3f:fb:b1:4b:c0:82:91:5e:
a3:1d:fc:d8:32:94:11:49:70:d2:f9:fd:2b:c6:5c:74:1b:19:
1a:cf:a3:5c:6c:7d:da:07:af:13:35:e1:3a:37:45:13:9b:ed:
ab:72:46:39:3a:25:2c:d9:66:54:fb:4b:97:55:5a:92:e2:d9:
79:9d:35:c8:a3:4d:e1:85:bd:a5:a1:4b:43:35:cb:f7:0b:8a:
78:9d:dc:d5:18:38:90:e4:3b:5e:81:de:45:7a:0c:0f:43:18:
2c:4b:87:f2:57:bf:6d:42:92:24:95:87:68:34:25:72:1e:d2:
ab:c6:6d:0f:0a:81:b2:fe:15:f5:38:f3:81:68:af:db:74:d9:
c5:cb:7a:33:56:6a:9e:9a:42:86:86:70:b1:a7:7e:60:76:c7:
92:5d:88:4a:af:31:25:ed:cb:5e:2d:e8:0c:cc:c6:dd:87:26:
02:e6:d8:27:d2:9c:0d:08:af:ee:67:11:18:42:e1:c8:0a:1a:
8c:e5:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:12 2025 by rpki-client