Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: xXa56XiapvWWOfEzrpXwAJmTmJB8vAxdQGmH2Qw7j1g=
Subject key identifier: 5C:84:2D:1D:9B:BE:B8:02:C6:7B:7A:B9:8C:35:4B:C4:D2:92:CB:58
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 01974C9F9C0A96801BD194F0D60D81B60DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 02F7
Signing time: Sat 07 Jun 2025 23:00:17 +0000
Manifest this update: Sat 07 Jun 2025 23:00:17 +0000
Manifest next update: Sun 08 Jun 2025 23:00:17 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: urQYvhvJhWPPFCHCgEl6vDy1sKfBpexxveto7BlYFJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:9c:0a:96:80:1b:d1:94:f0:d6:0d:81:b6:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Jun 7 23:00:17 2025 GMT
Not After : Jun 8 23:00:17 2025 GMT
Subject: CN=5c842d1d9bbeb802c67b7ab98c354bc4d292cb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:fe:f9:ae:b0:d1:28:9d:ac:75:b7:3a:2a:
b4:e1:71:30:b4:cb:81:22:9b:8d:78:3e:57:e2:fe:
35:15:f9:13:96:54:f9:54:7e:e3:7b:50:df:a7:ff:
02:72:e3:3f:b0:cc:ad:a0:14:8d:2f:7a:5f:47:f1:
36:98:c2:c3:a9:79:74:d6:55:a0:e5:21:47:a4:e8:
3e:63:77:85:56:5c:50:9a:8e:b7:4e:d3:fb:f9:b8:
0b:94:09:8f:eb:d8:70:a5:c7:ea:7e:cf:2d:74:1c:
f5:89:ea:c1:0d:20:aa:33:df:78:78:6b:1e:83:48:
e7:b4:3f:c3:67:a0:87:69:e8:61:a2:9a:ef:91:33:
9f:6a:3d:33:7c:82:d3:24:fe:34:a0:3b:56:a1:7b:
82:07:66:75:28:ad:4b:f7:0b:ee:74:b7:bc:61:aa:
02:00:2f:88:18:5d:69:2d:67:f1:73:13:a8:77:d4:
e4:63:e0:70:12:cc:f3:96:0a:13:56:f5:07:5d:3f:
c1:ef:43:0f:4b:86:0c:3b:3f:6d:b8:7a:cc:7a:7d:
97:2c:a4:f1:a4:90:09:80:83:c2:0f:a3:df:bb:8b:
6f:57:b0:cc:ca:c8:53:88:22:9a:8c:bd:9b:31:ed:
4b:e2:1f:74:e6:98:27:15:44:48:db:5e:02:bd:c9:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:2D:1D:9B:BE:B8:02:C6:7B:7A:B9:8C:35:4B:C4:D2:92:CB:58
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b9:43:2b:8c:20:63:7e:ba:b5:50:ee:78:88:32:00:b9:69:
76:2c:b9:9d:1b:81:18:be:97:87:a2:f4:6f:e5:96:c7:38:91:
9a:69:66:67:4a:7a:ee:62:2a:a0:6a:d5:15:f6:a5:96:60:4c:
ea:a2:44:3c:6c:ad:6b:e4:bb:25:8c:37:12:42:20:c3:03:86:
f0:02:ef:43:8f:a8:81:6e:65:77:f0:49:a7:ac:31:a4:38:d2:
e7:7b:80:ef:51:e8:f6:e8:08:39:bd:f7:20:fb:d8:b7:51:6a:
e3:03:57:e1:d9:66:2b:6c:e4:df:d7:df:d0:60:3a:dd:9b:7b:
db:a5:bf:9a:2a:c7:9f:59:be:43:d2:16:1e:7a:4e:c5:69:51:
fc:81:60:4e:8b:ce:69:c9:75:81:75:7b:fc:11:63:92:7a:08:
ea:e9:e7:ba:ab:3b:a3:e1:56:2e:29:b3:4f:2e:71:aa:7f:1e:
d3:df:7a:bc:92:b2:7a:f1:1b:05:7e:90:4f:bf:27:b9:8a:2b:
f4:02:a6:dc:5a:85:bc:91:31:a4:23:f6:9b:25:5f:d1:0d:e6:
01:c6:64:c1:67:e3:27:c0:a1:b3:6c:b2:60:4e:43:5b:4c:b6:
23:fe:05:5c:4b:48:a5:39:4e:b1:2a:82:a2:a2:37:59:d9:fd:
20:75:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:42 2025 by rpki-client