Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: 4d12RfmKdqXTp73t38a5lK4D45ux18G7SkmzL5ZYnos=
Subject key identifier: 3E:C7:FB:33:F5:40:BE:A0:48:94:42:E8:2D:07:05:3C:7F:59:65:B6
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 0197B6D7548E539D2C112064D3D12E2C251E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 032E
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: ZDaD1ljn0NrlWfHcMBPrEr/vzWsjTh/hqoKkFPQq5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:54:8e:53:9d:2c:11:20:64:d3:d1:2e:2c:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=3ec7fb33f540bea0489442e82d07053c7f5965b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:58:7f:ab:e2:e7:05:e4:f2:0b:f5:6b:5e:
71:ae:ba:6e:05:29:b3:a8:eb:d1:b7:0c:f8:d9:f9:
1e:36:f5:bd:a9:51:8f:74:a1:5f:5d:6d:c9:93:aa:
df:e4:6a:32:f8:51:e0:0a:37:2f:67:4d:2d:2e:99:
55:56:d3:79:3d:77:20:42:a6:ae:36:60:6c:f7:fb:
67:1e:0f:d0:61:25:3f:73:93:9b:15:fb:c2:7c:e8:
dd:75:30:f2:cd:12:a2:27:39:61:6c:30:5c:17:63:
3f:9a:05:ff:3d:ba:1a:4e:a3:f4:52:39:51:30:13:
97:a4:f8:29:c6:1f:36:5f:65:31:15:dc:aa:43:ea:
9e:dc:bd:0e:5b:f5:89:d3:27:b4:17:50:67:b9:4d:
b1:a3:e6:10:58:6b:04:f4:0a:26:56:53:e2:c5:12:
47:b4:6b:3c:74:a3:7d:9b:50:e6:2a:03:03:00:30:
05:b9:19:b0:47:b8:49:1f:d2:8c:3a:3f:e9:40:10:
c1:bd:91:65:2d:15:6a:55:dd:3a:11:4c:aa:c7:d5:
4e:bc:3e:28:bd:6b:bd:e9:c7:58:97:2e:db:8d:8e:
b2:ea:a0:d8:92:13:0a:9c:ce:ae:1d:27:5b:bc:da:
37:2e:86:2b:87:5f:16:2b:f8:43:b0:00:f0:4f:20:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:FB:33:F5:40:BE:A0:48:94:42:E8:2D:07:05:3C:7F:59:65:B6
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:ce:61:82:3e:76:1d:bf:bc:19:dd:a0:23:9d:d0:a8:85:
1d:f9:ef:82:5e:69:38:e9:ad:58:a9:83:89:35:2b:4f:a9:e4:
b5:c5:ff:97:37:01:ba:be:9c:fd:7c:05:aa:fb:1b:30:a8:09:
ad:ba:82:66:70:97:c2:19:93:95:42:26:63:71:92:be:ff:e2:
7b:46:c6:1a:86:84:11:f6:b6:3b:d6:2c:a8:5f:06:20:8a:cc:
30:3a:fd:5f:8f:f7:4a:41:02:09:5b:81:ed:b7:c8:a3:2b:d0:
e9:b4:2b:39:e7:7a:23:1b:f8:1b:7d:90:1a:6f:e7:96:9a:da:
3f:f1:3a:24:05:d2:ec:ae:da:55:90:75:2f:4d:59:3f:8e:82:
54:6a:ae:99:a3:76:8c:cf:a5:98:b9:e8:24:67:5e:5b:e6:ed:
eb:3c:62:99:1b:d4:c0:9a:57:99:5a:5c:c6:61:64:d0:3c:1f:
2d:b3:27:08:d4:8b:12:94:84:cb:32:a6:c0:0c:98:d0:3a:52:
bb:66:79:72:8a:5b:e2:af:3f:ef:0a:cf:9d:f2:f8:a1:4f:5a:
46:f6:46:af:67:24:ea:33:ca:de:4f:d9:4c:ff:22:ec:5a:99:
57:db:dd:6b:08:80:3c:5b:19:97:e7:dd:e4:b1:b5:0c:f6:eb:
66:45:92:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211SOU50sESBk09EuLCUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1
Njk3ZTMwHhcNMjUwNjI4MTQwMDU0WhcNMjUwNjI5MTQwMDU0WjAzMTEwLwYDVQQD
EygzZWM3ZmIzM2Y1NDBiZWEwNDg5NDQyZTgyZDA3MDUzYzdmNTk2NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZYf6vi5wXk8gv1a15xrrpuBSmz
qOvRtwz42fkeNvW9qVGPdKFfXW3Jk6rf5Goy+FHgCjcvZ00tLplVVtN5PXcgQqau
NmBs9/tnHg/QYSU/c5ObFfvCfOjddTDyzRKiJzlhbDBcF2M/mgX/PboaTqP0UjlR
MBOXpPgpxh82X2UxFdyqQ+qe3L0OW/WJ0ye0F1BnuU2xo+YQWGsE9AomVlPixRJH
tGs8dKN9m1DmKgMDADAFuRmwR7hJH9KMOj/pQBDBvZFlLRVqVd06EUyqx9VOvD4o
vWu96cdYly7bjY6y6qDYkhMKnM6uHSdbvNo3LoYrh18WK/hDsADwTyCJEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7H+zP1QL6gSJRC6C0HBTx/WWW2MB8GA1UdIwQY
MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt
ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3
LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCXOYYI+
dh2/vBndoCOd0KiFHfnvgl5pOOmtWKmDiTUrT6nktcX/lzcBur6c/XwFqvsbMKgJ
rbqCZnCXwhmTlUImY3GSvv/ie0bGGoaEEfa2O9YsqF8GIIrMMDr9X4/3SkECCVuB
7bfIoyvQ6bQrOed6Ixv4G32QGm/nlpraP/E6JAXS7K7aVZB1L01ZP46CVGqumaN2
jM+lmLnoJGdeW+bt6zximRvUwJpXmVpcxmFk0DwfLbMnCNSLEpSEyzKmwAyY0DpS
u2Z5copb4q8/7wrPnfL4oU9aRvZGr2ck6jPK3k/ZTP8i7FqZV9vdawiAPFsZl+fd
5LG1DPbrZkWS7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client