Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: ao2vecKen8JmluRbqLp+XOuSn/nSDM2wQxIoGW/vCXU=
Subject key identifier: C7:44:35:9C:D8:C8:8E:78:D9:81:93:E6:37:96:04:D0:47:8B:BD:D8
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 0196BBC90C3F2814D841612883E95A2738D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 02AC
Signing time: Sat 10 May 2025 20:00:37 +0000
Manifest this update: Sat 10 May 2025 20:00:37 +0000
Manifest next update: Sun 11 May 2025 20:00:37 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: n3vHyg8gOKmRjrg0Kn/WlcD3Zrbzz3Ue2s6DhOGyV80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:0c:3f:28:14:d8:41:61:28:83:e9:5a:27:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: May 10 20:00:37 2025 GMT
Not After : May 11 20:00:37 2025 GMT
Subject: CN=c744359cd8c88e78d98193e6379604d0478bbdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:05:1d:08:f4:49:a0:6a:79:ef:b7:24:da:
4b:24:7d:7d:5e:91:46:b4:4f:ac:f1:e9:ac:87:68:
28:43:e1:82:7f:62:3e:a4:4c:d0:c0:d5:b8:78:1b:
8d:c3:10:67:01:41:2a:07:34:9e:c9:48:00:89:d2:
04:c2:0c:a4:a1:f6:88:bd:4b:13:e1:c8:78:e9:fe:
44:a3:2a:d8:a9:5a:ac:8c:f0:69:b6:bf:4e:f2:49:
18:f6:b1:57:a5:32:ae:39:2d:0b:de:69:6e:82:03:
3a:22:0e:70:31:d1:47:b2:02:ec:53:4a:a6:94:ef:
bf:a7:13:a8:08:58:ac:6b:33:03:8e:8b:d5:25:b6:
81:b2:d8:77:48:f5:f3:3b:1b:8f:64:92:28:7a:f5:
cd:4c:36:4d:bc:f6:e5:90:a8:f9:f4:d7:1f:d0:47:
ed:cf:29:03:b8:d7:1a:9b:13:af:df:24:54:4f:ab:
11:16:18:70:a4:06:ba:07:23:77:30:ee:cb:dd:85:
d7:d9:32:76:72:7d:40:09:ec:a2:7c:38:83:b2:f7:
8a:c1:cb:92:1e:88:e7:ac:72:cd:e9:35:4a:fc:fa:
0c:2c:8f:73:75:51:b5:84:82:2e:fe:26:0c:15:16:
5f:4d:72:7b:3e:e1:e4:9e:a5:f4:19:2a:09:d2:b4:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:35:9C:D8:C8:8E:78:D9:81:93:E6:37:96:04:D0:47:8B:BD:D8
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b2:ff:a3:8f:21:1d:0a:7f:97:68:cf:8b:f0:e4:ef:6a:8c:
8b:df:c5:2e:73:f9:75:59:6e:ef:9a:86:af:30:98:08:f4:7e:
87:b8:ea:8c:06:81:8b:8b:ab:74:52:90:cb:45:fb:9c:13:4f:
91:df:c2:94:a7:7b:fe:2a:13:f2:4e:76:68:f3:31:f8:10:f9:
0e:b1:df:67:08:bd:43:a2:45:b8:80:a0:d6:9b:a7:a8:7d:d9:
a0:d5:43:19:4f:bc:44:f3:91:f2:59:28:71:85:db:32:ef:35:
50:65:58:c3:01:65:a9:99:0a:55:85:36:a0:46:d6:b2:fe:2c:
12:b9:af:ac:97:e5:eb:c4:89:cb:80:d3:32:34:ca:4b:6a:37:
a7:23:4b:a9:7d:e7:64:af:24:a0:cf:6a:05:87:32:2c:f0:0a:
aa:f8:63:c7:be:b3:dc:49:43:ce:01:5d:81:ba:43:69:94:8b:
49:2a:d8:1c:2e:25:f2:89:78:6e:8d:06:2c:53:58:a5:2e:66:
21:c4:19:b7:1a:3d:66:8d:08:da:0e:f3:08:8b:fa:00:53:35:
f9:d9:2e:4e:96:8a:c1:1f:86:34:b2:7c:3e:1e:25:0d:45:d8:
d6:3c:43:0f:77:b1:03:e6:b8:c7:03:7b:79:6e:76:d6:5e:b5:
08:b2:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:34:29 2025 by rpki-client