Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: TwXD07SIh4N5nePixED9RY18w6JIOeOnentP52dcxFg=
Subject key identifier: 78:53:B8:0A:94:72:75:29:E1:37:50:53:AB:B5:F5:A1:A8:22:5E:E0
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 0198D6984A9DC7543317AE53E5A16AA8B72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 03C3
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: 3v/noRWfw77IxJSfrkg1uknG30ZBdnSKz45jFNx6GFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4a:9d:c7:54:33:17:ae:53:e5:a1:6a:a8:b7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=7853b80a94727529e1375053abb5f5a1a8225ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:fd:f8:6a:e1:9b:c4:45:2a:37:78:3a:4f:
f1:c5:38:5e:e8:e5:a6:b2:ca:6c:a5:6c:02:b9:a0:
6d:3e:07:45:a2:19:74:76:0f:9d:a4:c2:bf:80:14:
93:c4:ff:a8:ca:ce:21:ef:6d:ed:63:c0:74:22:d8:
b2:b9:9c:4c:06:b7:b4:8f:36:d6:e5:c0:80:c2:0f:
db:d6:3f:c1:a5:1f:70:77:55:bc:00:60:67:14:77:
48:93:57:5d:c1:ec:79:15:69:23:67:1a:0f:d1:c5:
85:b9:78:27:4d:a0:db:e2:cc:14:a1:8d:64:42:1d:
35:19:e4:43:cb:aa:58:d5:55:6d:40:cf:42:ef:6b:
87:1e:d0:ff:71:88:07:ca:f2:0e:d7:54:7b:a6:6c:
0d:9d:bc:6f:89:20:26:09:fa:c6:d0:c1:98:b4:11:
80:a6:b2:d4:e8:a2:51:37:c5:df:9b:13:d4:ef:10:
73:b0:72:ac:a5:1a:44:50:8d:4f:d2:0d:af:3a:fd:
50:2b:41:8a:e2:c7:a0:af:f6:c9:3a:6c:30:20:8f:
5c:ee:8c:8b:01:9d:7c:dd:35:04:b7:55:43:b9:12:
79:d9:80:0d:07:09:c3:b6:b2:4e:6b:3e:7e:b6:ec:
3b:10:dc:e7:a2:f3:84:e2:cf:4c:3f:51:d9:df:40:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:B8:0A:94:72:75:29:E1:37:50:53:AB:B5:F5:A1:A8:22:5E:E0
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:12:b7:1c:58:03:fb:45:49:ea:d7:5d:28:c6:be:c6:5c:c9:
9d:02:26:d0:e6:c8:f5:32:e5:09:67:4e:8b:b3:28:dd:a5:f3:
88:01:8f:b6:ae:9c:75:8d:b6:78:5f:7b:65:9c:4b:9e:21:3f:
16:5f:36:b5:0f:08:9e:18:7d:86:43:04:d7:19:cc:5a:1a:92:
26:39:f9:42:cb:7f:00:74:43:bb:40:c6:66:32:2e:3d:09:f9:
ed:a9:e3:f6:0a:25:50:9f:58:93:a7:4f:cc:ae:e8:89:ea:52:
82:17:86:03:95:2f:5f:c5:c3:57:a1:1b:84:37:20:1e:c4:01:
71:72:0e:b2:ac:84:61:42:6c:a7:0e:d0:c3:b7:f9:5e:77:8b:
e3:d7:27:25:4f:87:29:a0:fc:45:05:06:45:1e:c2:8d:3b:7b:
d3:0c:0c:73:c4:37:58:87:af:02:27:88:92:30:1d:4f:b4:2c:
b1:a0:9f:87:25:a7:7f:df:f8:bb:15:b2:9c:65:ae:d2:90:67:
c4:7d:29:64:66:1f:a7:97:34:84:fa:fe:e9:e2:2f:59:c1:04:
46:24:90:cc:cd:49:78:a7:10:cd:0c:e3:c1:8c:7c:f0:ea:90:
1e:5a:1b:5d:68:4e:df:4b:57:b7:d8:5d:fc:86:22:20:22:4d:
a2:05:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:32 2025 by rpki-client