Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: pIpdivii3OB3ibVy2RqGJTADYQ5D8S4x1OymuagIOQY=
Subject key identifier: 00:2F:56:7D:43:01:3A:CB:BC:31:DF:FE:50:E1:4F:7B:29:84:12:68
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 01959073B5456C7DCFE0295E947582A1784F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 0211
Signing time: Thu 13 Mar 2025 17:00:56 +0000
Manifest this update: Thu 13 Mar 2025 17:00:56 +0000
Manifest next update: Fri 14 Mar 2025 17:00:56 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: gw0dYprcrIqj2Sv+3P+iaYFYFxPB28t3muDgWIDk0bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:b5:45:6c:7d:cf:e0:29:5e:94:75:82:a1:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Mar 13 17:00:56 2025 GMT
Not After : Mar 14 17:00:56 2025 GMT
Subject: CN=002f567d43013acbbc31dffe50e14f7b29841268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:e4:7b:2c:f7:af:2b:c9:21:b5:2d:82:3e:
cf:be:51:99:ce:93:bc:ca:45:7d:fa:2e:15:99:e8:
49:6e:26:f5:7d:81:49:5a:b6:db:32:82:f9:4f:1b:
e2:27:36:89:fb:3a:44:d3:59:c9:76:05:c5:ee:13:
41:33:51:a9:af:34:4d:98:0a:a1:08:c0:0c:5b:de:
af:85:4f:b4:56:ed:4f:3d:a0:7e:52:24:46:b9:fb:
23:03:ef:2a:f0:08:11:23:ad:40:17:05:2e:a9:54:
64:b7:58:12:dd:3a:d7:ea:bc:2c:e9:07:4c:a2:30:
0e:e6:a3:88:ab:1b:de:c5:ed:8c:f7:9b:61:93:46:
6f:4b:5a:ab:05:71:2c:7a:20:9e:46:73:57:db:a1:
b2:57:cc:32:99:10:c9:01:a6:d2:c3:40:16:7a:92:
92:6e:10:c3:63:74:43:84:2f:02:76:d0:dc:9b:42:
75:42:09:4a:5f:d9:fb:db:d4:16:68:11:0f:5a:00:
70:db:a8:79:52:9d:ae:f4:99:69:0c:40:1f:73:07:
99:18:17:84:48:dd:5b:e8:55:f3:90:90:95:16:2c:
d1:f6:ee:8a:f9:c5:fa:54:82:1e:df:ed:20:fd:02:
d8:74:4f:c5:2c:c3:78:60:9f:88:fd:ac:2b:f4:63:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2F:56:7D:43:01:3A:CB:BC:31:DF:FE:50:E1:4F:7B:29:84:12:68
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:aa:ca:da:2f:cc:c5:4a:a5:ec:9c:67:ee:82:b5:ef:9d:
8c:85:df:23:23:1f:a4:3f:2f:25:97:a5:08:f9:d4:87:8a:cd:
c1:fb:c3:21:82:a8:f0:9f:2c:c6:09:26:1c:11:35:3e:5e:ee:
a9:7c:08:8d:3f:33:32:a2:71:67:a4:ee:5f:ca:04:e0:b4:f3:
f4:a4:20:64:80:b7:13:60:08:5a:9c:e5:f8:9e:4d:96:fc:46:
1b:e5:5d:68:22:3e:0a:45:9d:af:08:fb:d9:f9:a0:ee:bc:83:
81:0e:3b:57:8e:9b:31:26:a2:ca:19:c1:1b:99:48:81:28:e3:
bc:c1:79:7a:e8:8d:bc:13:3e:61:3b:ca:52:85:ae:6e:c3:bc:
73:dd:bd:3e:67:01:4c:c4:7f:26:2a:a9:11:f0:87:6c:33:df:
ee:f4:c3:17:c0:b1:16:74:24:8a:95:d3:6a:5d:2f:35:96:80:
66:f4:c6:8a:5d:ae:1a:30:a3:15:5f:54:61:52:f9:4c:51:6e:
78:1a:bb:6f:ab:41:d9:c5:70:9b:91:2a:d5:95:a2:ba:4b:82:
ab:92:91:aa:26:c8:4a:62:a6:04:4e:5b:47:88:96:2c:92:b2:
30:1d:5e:69:38:83:ff:0d:a2:67:13:13:77:03:38:83:97:39:
b2:20:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:44 2025 by rpki-client