Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: Rqi2RAFTfE30CokJhzlr/4DY1cxKjhyNmKTHLAQ1tMo=
Subject key identifier: 45:3E:4F:F2:73:BB:92:F1:21:74:9B:A9:81:43:B4:C4:B0:4C:E1:C6
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 0196B7107333E0F17FE57863EEAC9295AB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 5F
Signing time: Fri 09 May 2025 22:00:30 +0000
Manifest this update: Fri 09 May 2025 22:00:30 +0000
Manifest next update: Sat 10 May 2025 22:00:30 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: Gbgl/2fjTsZaYrFyw1u7opqoIEeoKOlM9ayjCKjyzpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:73:33:e0:f1:7f:e5:78:63:ee:ac:92:95:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: May 9 22:00:30 2025 GMT
Not After : May 10 22:00:30 2025 GMT
Subject: CN=453e4ff273bb92f121749ba98143b4c4b04ce1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:ad:8d:b7:cb:31:80:91:2d:f8:7a:dd:14:
b3:c4:e6:6a:c5:3e:ad:47:81:30:6a:5b:e6:c0:b3:
20:38:40:a8:ed:74:e5:ed:8c:cb:3e:6c:89:db:de:
4a:15:15:c3:54:2f:5a:ba:d6:e7:48:2c:38:90:1b:
7e:f5:8c:6a:61:fa:8f:ac:79:92:33:ec:ea:fc:fb:
b7:d8:90:af:fa:96:81:96:3a:97:ee:a7:f3:c8:27:
22:99:c3:21:ab:35:91:37:e3:33:f6:fd:78:d3:3e:
22:c7:cf:ee:5e:0b:c8:f3:21:7c:96:60:f8:a5:df:
0f:55:6a:01:a9:c9:d5:f9:b3:83:5e:28:f2:db:04:
0c:f6:52:a3:8e:a4:35:3a:83:da:c3:3e:47:7a:d8:
80:f5:b9:e0:07:d3:0b:10:a7:06:04:b8:4c:11:7b:
da:20:dc:3d:22:b6:9c:fc:00:e3:1c:52:ff:1f:a1:
60:f7:d4:a6:ad:3b:b3:ba:a3:84:80:20:04:9a:d0:
8e:27:5f:b4:69:e5:41:55:40:2f:02:d7:77:1c:4d:
b7:92:e2:23:08:79:8a:b1:18:1f:71:d5:7f:3c:2c:
01:e9:27:d4:9a:29:b9:8b:6d:77:2a:63:e6:36:4f:
7b:d1:6a:90:ae:fb:7c:af:a4:7e:1f:89:8f:b0:b2:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:4F:F2:73:BB:92:F1:21:74:9B:A9:81:43:B4:C4:B0:4C:E1:C6
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:64:e9:fb:27:2f:ee:5b:3b:9b:bf:5c:a4:37:d9:24:a2:
ba:ee:55:69:32:2f:b2:46:58:34:de:47:14:c1:6c:c4:67:21:
c1:fb:49:93:c9:2d:aa:d4:10:11:55:3d:ba:20:98:76:13:f3:
76:80:7a:be:d7:26:6f:10:50:4a:0f:17:db:6f:82:01:2b:b4:
2c:3d:eb:c5:e0:03:54:68:9f:18:8f:b2:14:05:d9:1f:9b:5c:
79:bb:25:0c:3c:d3:92:fc:c8:eb:42:9a:4e:6c:9d:ab:69:ef:
7f:93:5d:93:31:38:7b:04:06:72:4f:6d:8b:53:b6:1f:78:b6:
12:6f:ce:62:d2:e7:fc:5e:75:0b:ed:21:ea:11:8f:b9:ed:f1:
42:e8:d8:d8:fa:40:76:b3:d0:fa:88:be:c6:37:df:b6:e0:6f:
1f:1a:fa:40:a3:a7:15:0b:87:a9:e0:29:0a:d4:9b:b8:e7:c3:
48:8c:0e:38:c2:18:c4:0e:14:46:c0:d1:63:88:ef:ea:5e:24:
ca:ed:25:0b:89:45:55:c1:ca:fd:2f:3f:9a:10:3f:ec:a8:4a:
02:91:fb:63:a4:ac:d6:d5:49:70:85:78:98:5b:42:80:59:a6:
c3:bb:be:f2:4e:0d:e5:fb:95:4b:3d:8a:8c:14:c8:22:2d:26:
9d:a3:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:57 2025 by rpki-client