Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: Z9UN3F1MT3/myb5jDd2PKcvgBA0hIS1b5rf2JGgAHuU=
Subject key identifier: 8F:A1:23:7A:9C:C7:82:6F:69:2E:0E:0B:FF:9C:C7:6C:9C:21:6E:7D
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 0198D5BBB750264EB465C7982467BA79F410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 0673
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: wuoDSL+Jw2z7t+4ESep4ibG3pmNYeAjwmmUBP/2TZ9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b7:50:26:4e:b4:65:c7:98:24:67:ba:79:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=8fa1237a9cc7826f692e0e0bff9cc76c9c216e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:73:dc:15:22:a1:cd:75:b7:38:5e:ac:2f:
80:23:6c:c7:3e:69:90:83:2e:0e:cf:a3:d6:4c:2d:
ac:9b:84:a5:ba:f1:b1:52:9f:e1:7c:3a:26:c5:09:
86:d7:ce:73:52:e9:60:e3:4b:22:bf:03:31:14:0e:
3b:51:46:c6:88:2b:ed:8b:d9:88:34:24:4b:63:6f:
86:8d:ae:5c:ff:f6:56:8d:23:e3:9e:fa:a3:24:81:
72:ba:d7:a8:ed:3a:02:39:18:f6:ea:26:a2:52:6d:
11:3a:fb:22:46:18:4d:8c:46:58:2c:f3:32:37:d1:
47:ae:38:ab:08:1d:a5:81:61:36:e5:4d:57:b1:3e:
52:7d:a0:2f:db:40:b6:8a:a3:0e:86:61:6c:52:4d:
db:b9:dc:74:61:b2:cb:25:90:ac:05:7d:72:70:b4:
89:43:c0:0d:d1:00:ee:1f:32:03:2c:e8:d7:dd:e3:
bd:ee:72:c6:d2:7a:6e:18:8c:4d:93:fd:4a:f3:34:
ed:8f:61:a8:b0:bf:1a:9a:17:6c:48:e0:c5:b9:62:
11:7a:c6:c3:c4:aa:4a:f7:48:fe:bd:6b:9c:be:a8:
bb:a7:be:7c:33:be:5e:79:9b:78:43:4f:20:ed:c5:
20:99:07:01:c4:52:ef:b7:ef:f2:fc:97:a4:50:ac:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:23:7A:9C:C7:82:6F:69:2E:0E:0B:FF:9C:C7:6C:9C:21:6E:7D
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:78:a6:a0:19:76:9a:78:8d:20:b4:b1:f4:cf:bd:0e:ab:
c1:b2:e3:5d:0b:52:c0:b7:e7:cf:ca:9c:d3:d5:f0:50:8f:8f:
2f:83:43:76:36:98:6b:12:d9:28:99:06:b4:fc:81:8b:4e:e8:
8c:69:fd:a6:87:61:c4:45:d4:da:34:36:94:69:ff:76:3e:ee:
87:43:5f:62:85:98:f2:06:fc:cf:0a:f4:4a:22:58:34:95:69:
7b:2a:40:5a:a5:f9:c0:d3:83:23:11:94:30:31:05:39:0a:d6:
f6:a1:60:4c:6f:eb:d0:9c:4d:d2:52:2f:fe:f7:59:83:aa:a0:
0f:c5:34:86:7b:8d:a7:cb:5a:b5:11:a2:c7:80:10:88:14:ec:
8f:f0:85:1d:78:9d:fd:55:76:3c:be:7a:3c:3f:82:ac:70:de:
9d:9e:c3:b5:84:e3:29:57:b8:88:73:b5:26:0b:a5:1b:98:8e:
df:3e:e3:87:4c:0a:fd:5b:b0:e4:bb:bb:93:ba:a6:ee:98:f5:
39:6f:0f:86:d7:ad:47:8a:5c:24:92:2f:19:2b:54:88:6b:e1:
00:d0:4b:b4:d9:7b:f8:8b:51:19:ce:a4:94:01:3f:5a:1a:95:
ef:89:8b:c1:d1:16:c6:f9:e2:12:bb:2f:30:5f:d7:c4:26:53:
9f:de:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:15 2025 by rpki-client