Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: 7/74e2FZdy60f89PyB/KUSk9vscmGOCGZP9lrHnoPsU=
Subject key identifier: 3A:5C:5E:37:8C:20:38:61:D0:51:F6:15:75:0E:C5:64:51:E1:8D:C4
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019A71EEB7E8CA5B9C6AEDFE7FC6ECB161A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 0498
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: MfsyORNdEUmuquJYjbUd2JrIr/HFD9qh6QLK5NBmd3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b7:e8:ca:5b:9c:6a:ed:fe:7f:c6:ec:b1:61:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=3a5c5e378c203861d051f615750ec56451e18dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:91:a7:57:0f:b2:a4:68:41:fc:75:3b:b1:
b2:bf:4f:54:61:d5:d2:7d:e8:f2:a6:43:29:bb:c7:
f8:14:b8:5e:01:42:13:e8:51:d2:ad:c1:aa:a7:b7:
22:ba:03:23:cf:89:63:e9:2b:f1:b3:18:4b:2b:e5:
b4:1c:46:ff:c4:49:fb:71:0d:8b:2c:a5:ab:93:0b:
c3:9d:96:84:0d:e2:20:9d:a7:61:af:6a:a5:8d:14:
2c:36:6c:22:35:a2:3c:28:cb:83:05:d1:ab:07:d1:
d3:a6:20:5c:7f:ef:aa:3c:90:b3:3d:62:a7:a5:e6:
12:5d:e1:82:07:3e:37:6e:4c:73:d0:eb:b6:fc:b0:
be:f1:91:78:b2:b1:a7:fc:56:3c:69:f4:27:15:18:
d3:70:27:4f:2a:08:fd:63:91:10:f0:4f:d7:41:5e:
62:b5:48:d2:66:a2:5e:03:63:74:58:33:b0:fc:7e:
49:48:86:c5:be:16:22:16:ba:33:5e:42:29:d4:55:
ec:a9:27:21:8e:71:e7:89:ec:49:dc:5d:3c:61:92:
b5:f8:a7:ac:c1:29:16:16:12:d5:69:01:d2:8d:86:
69:24:cd:51:00:93:46:10:28:6d:38:07:4f:ec:88:
d6:ca:10:0b:50:30:8c:cd:ae:02:cc:20:6c:d6:0a:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:5E:37:8C:20:38:61:D0:51:F6:15:75:0E:C5:64:51:E1:8D:C4
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:2e:c3:b7:dd:94:df:a4:9d:31:db:24:ec:11:13:dc:4e:
46:dc:15:fe:1c:66:25:b7:7d:19:bf:43:f3:89:0c:c2:c1:9d:
62:2e:7b:0f:36:6f:2b:cd:ac:0d:95:b5:af:f5:0f:a1:b9:ce:
2a:d5:11:2b:44:e9:57:1a:74:d1:e7:69:cd:4e:aa:69:cb:d1:
6e:05:9a:78:90:9c:33:8a:a8:1c:0d:29:9e:d5:39:f0:01:c7:
1c:83:94:eb:b4:4a:d6:3d:6c:cd:51:7c:da:d8:b4:32:f7:88:
64:c1:0f:88:90:cf:30:ef:cd:3c:db:68:75:36:f1:bc:1c:1f:
c2:02:74:ca:28:8e:f8:7a:09:98:19:9d:f1:33:11:62:8b:fd:
0d:b3:ae:d9:9e:b8:2e:09:e3:6f:35:41:be:5a:ec:64:6d:be:
38:e7:d6:8d:4c:07:d7:43:24:8e:f0:55:0c:ab:25:d3:33:6c:
cb:bf:46:ce:0c:b7:04:b1:66:b2:be:b9:03:c4:ca:f4:ba:52:
99:73:ff:0d:eb:85:7e:4c:31:ce:48:3b:6d:4c:e0:a2:e4:bf:
78:6b:e3:c2:8e:6d:7d:27:c6:36:83:51:7d:50:11:c5:f9:46:
54:40:35:0e:f5:a4:f3:5c:b0:a6:65:1b:6c:97:66:2a:9c:e8:
a5:24:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client