Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: liGsw1dUowsO/uAqVVUtgL3ZptCBRn0Kg9gr15b0XFE=
Subject key identifier: 04:CA:F8:17:04:4B:34:86:3C:34:99:EB:B8:63:EC:B0:ED:0B:DC:FF
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 0199FE10204FF6FE977DA32516FCB392421E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 045C
Signing time: Sun 19 Oct 2025 20:01:33 +0000
Manifest this update: Sun 19 Oct 2025 20:01:33 +0000
Manifest next update: Mon 20 Oct 2025 20:01:33 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: UK3997VHUjwWoHpwKC3qZ3DzON3S3JG2v9jBuE3yVQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:20:4f:f6:fe:97:7d:a3:25:16:fc:b3:92:42:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Oct 19 20:01:33 2025 GMT
Not After : Oct 20 20:01:33 2025 GMT
Subject: CN=04caf817044b34863c3499ebb863ecb0ed0bdcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:f3:d7:2f:0b:b5:c7:49:d1:76:b3:cd:c9:
06:c9:47:f0:9d:87:a7:cd:66:45:c8:34:b9:36:90:
18:63:71:a6:a9:50:fb:e9:df:c7:94:52:62:71:18:
c0:76:e5:84:b4:2a:19:71:b0:56:eb:32:87:49:73:
05:07:d4:ff:02:42:ea:ee:13:ae:49:b1:81:41:92:
11:fe:87:6e:fc:8d:06:0f:41:e3:da:ff:26:03:21:
d2:aa:3c:6e:8a:00:82:e2:c7:c6:53:59:fc:cf:b3:
ae:3a:16:b3:70:07:f7:e9:13:61:2d:f8:3f:e6:b4:
63:8c:cd:b8:60:7c:84:5d:d6:b4:97:cb:49:00:39:
46:89:54:2b:08:4a:e1:32:c7:83:e4:16:6e:0c:10:
0d:da:9a:a5:c6:ce:2b:f7:b2:a4:df:30:2d:e1:d9:
9a:44:f1:5d:51:f4:6c:ca:ff:84:23:52:c9:42:48:
c1:61:fb:3e:0d:b8:d0:ff:ad:56:e7:6d:e8:c9:87:
76:51:4e:03:b3:71:9c:0a:ec:00:77:df:98:58:88:
c5:68:52:66:ee:2b:b5:ed:42:6a:88:dc:96:6c:91:
44:5d:61:d9:4d:56:dc:cf:cb:ab:84:70:f8:ac:0b:
c1:c8:34:38:6b:37:d3:07:dd:e9:86:f4:99:a2:96:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:F8:17:04:4B:34:86:3C:34:99:EB:B8:63:EC:B0:ED:0B:DC:FF
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:e5:93:e2:58:94:02:84:3f:5a:12:98:64:e8:82:31:f4:
e9:9c:7a:f9:2a:cb:be:ec:da:ff:7f:a6:b7:da:d2:6e:b7:c1:
9f:af:97:ba:79:e0:42:7e:b1:93:a4:69:90:80:d3:fb:c7:c8:
45:0b:f5:66:ac:72:86:69:27:a2:1b:f4:9c:f6:27:96:9b:17:
d9:89:3d:80:6c:ab:67:38:77:d1:55:35:20:0d:84:61:9a:0c:
4f:2d:73:4f:5a:f1:3d:98:21:02:28:05:da:02:6a:34:96:e8:
c8:ec:8f:38:4d:5a:02:f8:9e:73:51:de:cb:76:a5:f3:9f:ea:
20:2c:7b:19:3b:ba:a6:ea:da:1c:98:ab:e6:76:4a:4d:25:42:
78:26:06:92:d0:11:36:b1:a3:b5:06:21:46:5c:73:37:0a:e0:
cd:6c:80:0f:85:cd:0a:03:fd:43:06:de:13:02:a1:c0:78:e2:
fb:34:40:de:22:a0:c0:01:47:9c:c2:50:37:a4:88:65:de:19:
36:0b:ff:aa:66:0a:42:4e:a3:d1:85:ef:d5:ce:c4:6b:b4:6f:
2b:b2:44:ff:3f:ec:74:ec:87:89:84:4c:be:37:dd:e1:90:33:
89:0b:03:14:82:b0:a7:8d:29:62:32:8d:78:19:65:1a:bf:0f:
a2:3c:b9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:18 2025 by rpki-client