Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: oJJBDF/r5V1JZHt1mm7UGU0yL3PMH6PIBh4fsYqCc4o=
Subject key identifier: 3E:51:B3:25:DF:1F:C5:55:B9:83:EA:1F:94:6F:B4:C9:27:13:EB:CC
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 0197B7EA9149A99065F93C9CCEBCF4E2BC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: E4
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: tyMXdc8dGFqKQY2Jsvw5dcAiRAOzBuM5CQ76MVWqTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:91:49:a9:90:65:f9:3c:9c:ce:bc:f4:e2:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=3e51b325df1fc555b983ea1f946fb4c92713ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:11:22:82:69:ad:68:65:63:77:cf:69:a8:
f4:ea:04:ce:30:f0:db:5d:22:7e:e4:68:13:e3:77:
f0:2b:51:8c:c9:1f:c2:9e:33:b8:33:b0:86:6d:75:
dd:e5:ee:f1:a8:78:c9:68:55:7f:f4:71:e7:26:06:
e2:e3:2d:05:02:23:ae:57:60:b5:bf:13:79:18:7a:
cc:9d:5a:65:fb:64:e8:0a:10:b0:2f:3c:5b:07:39:
58:a3:0a:96:35:9b:47:6c:f1:1c:a3:51:f2:31:1b:
37:4a:76:a6:a3:7d:c3:52:f9:b7:07:06:85:34:e0:
b8:d3:11:e4:e6:71:e6:3d:69:8a:88:cd:39:87:5a:
6b:77:92:fd:91:24:63:28:66:21:af:d0:20:e9:e1:
af:56:c8:79:6a:0c:2e:34:7f:ef:f1:09:3e:25:e8:
e0:a6:8c:85:20:5b:14:8e:e7:c8:2a:2c:f2:8f:ea:
d5:b6:a9:44:09:03:6d:14:33:0b:14:90:76:00:bb:
a1:2a:65:93:79:a9:66:02:92:d8:8f:67:9d:74:84:
6c:d5:26:1e:51:a9:31:d3:5c:42:72:e1:ef:6a:5c:
9e:45:c8:fd:34:07:36:91:14:17:cb:5f:74:bf:6a:
3e:51:f1:09:eb:53:4d:28:2a:b5:59:3a:9b:83:44:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:B3:25:DF:1F:C5:55:B9:83:EA:1F:94:6F:B4:C9:27:13:EB:CC
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:56:4d:11:9b:da:ba:34:c7:de:1a:4b:96:64:e2:bc:4f:
6e:67:25:b5:24:fd:7e:e1:00:9b:5c:85:b3:ef:cf:87:b7:a0:
13:39:2b:f9:32:65:6e:e0:20:8a:5a:60:4c:7f:a9:5e:e3:52:
23:2c:ee:53:4a:87:1e:72:5c:7c:eb:ac:3b:42:5e:7c:53:a5:
54:3a:fe:58:e2:48:5e:79:9a:60:5c:40:7a:3a:b7:70:da:8a:
a6:e1:bd:e8:2a:e0:d6:21:f8:d6:e5:6a:57:00:03:f3:50:37:
d3:4f:e9:53:06:c3:d4:4c:53:b1:f7:85:1f:86:06:c4:05:3a:
37:ad:cf:69:b8:65:ee:06:c0:aa:5b:ef:bb:e1:b1:42:78:84:
3a:a8:74:7f:67:fb:ba:d0:4d:f4:eb:1e:52:af:dd:87:87:b6:
9b:3c:44:3a:ee:71:80:9a:d5:2c:d9:18:84:d7:e9:0e:d8:d0:
7e:68:f0:ee:ed:45:d2:90:df:76:eb:da:b6:ac:ab:de:a0:cf:
ad:73:59:fe:79:98:55:46:06:47:84:9c:8a:2e:62:45:6c:3f:
3b:31:be:2b:a8:0d:78:dc:d0:bd:29:7d:d0:a7:4a:d5:f6:13:
40:e7:b2:64:dc:1f:02:39:85:d1:e2:ba:30:f3:8d:4b:00:87:
a8:ec:00:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36pFJqZBl+Tyczrz04ryPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjA0MmUzODBkNjQ3NjUxM2FjYzA4ZmI1NGZiY2M3MzYy
NmVjM2QwHhcNMjUwNjI4MTkwMTMyWhcNMjUwNjI5MTkwMTMyWjAzMTEwLwYDVQQD
EygzZTUxYjMyNWRmMWZjNTU1Yjk4M2VhMWY5NDZmYjRjOTI3MTNlYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleIRIoJprWhlY3fPaaj06gTOMPDb
XSJ+5GgT43fwK1GMyR/CnjO4M7CGbXXd5e7xqHjJaFV/9HHnJgbi4y0FAiOuV2C1
vxN5GHrMnVpl+2ToChCwLzxbBzlYowqWNZtHbPEco1HyMRs3Snamo33DUvm3BwaF
NOC40xHk5nHmPWmKiM05h1prd5L9kSRjKGYhr9Ag6eGvVsh5agwuNH/v8Qk+Jejg
poyFIFsUjufIKizyj+rVtqlECQNtFDMLFJB2ALuhKmWTealmApLYj2eddIRs1SYe
Uakx01xCcuHvalyeRcj9NAc2kRQXy190v2o+UfEJ61NNKCq1WTqbg0RYWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5RsyXfH8VVuYPqH5RvtMknE+vMMB8GA1UdIwQY
MBaAFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDct
ZGVkMzg2MmI3NjMxLzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDctZGVkMzg2MmI3NjMx
LzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgdWTRGb
2ro0x94aS5Zk4rxPbmcltST9fuEAm1yFs+/Ph7egEzkr+TJlbuAgilpgTH+pXuNS
IyzuU0qHHnJcfOusO0JefFOlVDr+WOJIXnmaYFxAejq3cNqKpuG96Crg1iH41uVq
VwAD81A300/pUwbD1ExTsfeFH4YGxAU6N63Pabhl7gbAqlvvu+GxQniEOqh0f2f7
utBN9OseUq/dh4e2mzxEOu5xgJrVLNkYhNfpDtjQfmjw7u1F0pDfduvatqyr3qDP
rXNZ/nmYVUYGR4Scii5iRWw/OzG+K6gNeNzQvSl90KdK1fYTQOeyZNwfAjmF0eK6
MPONSwCHqOwA0w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:23 2025 by rpki-client