Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: n0NG7MouShQQCSuS7AD2KTQ3smTc5ywDQr0yfRGixF4=
Subject key identifier: 51:46:ED:C4:04:F5:CC:B1:B4:EB:80:39:F3:14:22:5A:4C:C0:0E:E6
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 0197B7EAAEA1EB97B6303F510050B339AFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 05DF
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: Cc58mCjI4bQZ/A28/tXqo6zeY2ix1l3tgXKDEli+CRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ae:a1:eb:97:b6:30:3f:51:00:50:b3:39:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=5146edc404f5ccb1b4eb8039f314225a4cc00ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:2c:1f:50:11:2c:74:78:fc:0d:d2:8e:c5:
57:b2:1f:8a:ee:25:c1:28:c3:c3:cf:62:06:5c:8c:
bb:8d:b8:3d:bf:c4:69:1a:d5:c3:3e:12:ab:c0:13:
f9:86:03:da:63:b1:8d:c9:2a:c5:21:99:89:ee:5b:
6d:b8:04:90:4e:02:62:6b:ea:18:6d:c2:45:04:71:
ba:2f:2f:3e:df:e8:4d:45:01:1d:68:3f:d8:b4:90:
dd:7d:5f:25:1f:c4:73:7b:5a:b0:4e:a3:40:23:ff:
4b:85:60:35:cc:e2:f6:ec:f9:57:9e:26:68:9a:88:
a2:2b:c1:42:79:5a:78:59:f0:a7:0c:fa:c5:2c:55:
8d:13:b3:e2:37:c0:f0:b9:90:88:18:60:1b:54:51:
24:1d:31:60:2f:4d:dc:c5:ef:a0:ce:c8:9a:36:09:
b0:49:81:64:fb:b9:42:51:ff:a8:4d:f8:2a:7b:04:
27:dd:cd:25:3d:ad:ff:db:47:fa:1d:cd:b3:a4:99:
43:32:51:1c:68:a3:18:22:62:83:e4:7a:aa:e9:4a:
59:be:c8:96:76:d8:0c:c7:25:1f:ae:eb:16:a5:9f:
5a:41:a4:2f:e3:ea:d5:1b:81:14:14:32:97:4f:d3:
65:2f:67:a2:be:ab:b8:57:90:12:d0:b5:e4:4d:3c:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:ED:C4:04:F5:CC:B1:B4:EB:80:39:F3:14:22:5A:4C:C0:0E:E6
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:b7:1f:e6:fb:05:fb:2d:49:d9:52:fb:d1:d4:75:4f:05:
2c:e1:f8:55:e9:97:0e:45:2a:34:40:86:24:3b:e9:e7:76:0a:
85:e1:77:7f:4b:c2:05:cf:2a:6c:50:a7:cc:5b:c2:58:76:ac:
5f:31:89:67:3d:86:27:55:37:49:e0:84:57:08:73:5a:4b:96:
3d:f0:97:67:29:e3:43:40:cc:dc:bd:a1:7b:0f:04:e3:c3:03:
28:cd:ca:86:6b:ab:cd:87:5c:39:95:47:82:ca:c0:45:6d:d7:
c7:73:41:54:08:6f:b4:e6:7c:5a:be:88:54:96:b1:5b:ef:19:
fd:41:0e:f0:d9:c8:21:9b:73:a2:e2:ff:3d:82:62:3e:5a:7e:
b7:cf:46:2d:c5:65:cc:00:9d:98:8e:da:7e:97:a8:fe:2c:d5:
69:6e:2e:df:a2:a4:eb:26:12:b5:b3:60:93:9b:cf:e3:9c:80:
5c:1b:27:c7:b0:57:72:31:2f:6d:d5:60:58:0a:11:c2:15:0a:
3c:37:5a:b0:25:8d:2c:d0:45:2c:aa:3f:2a:5b:ac:13:ff:bb:
a8:92:75:2b:bd:e4:25:c9:6c:7d:1e:19:78:a8:41:25:6c:61:
bd:f1:f5:ee:ea:c1:69:1c:f8:f4:9f:d1:de:33:22:e8:95:c8:
67:9a:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:17 2025 by rpki-client