Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: AKxGEmZUb2902+8BEmakcixRekcD86FUj1QcHjxGnd8=
Subject key identifier: EC:6D:BD:D6:3D:35:9B:83:02:E3:AF:C7:B2:C1:E5:DF:68:72:8F:FB
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 01977264809DC9DFB83E3358ADA5151D6491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 05BB
Signing time: Sun 15 Jun 2025 07:01:18 +0000
Manifest this update: Sun 15 Jun 2025 07:01:18 +0000
Manifest next update: Mon 16 Jun 2025 07:01:18 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: 4wDJFG5yzUwevEd+TflY7gpnZGnx+svASiiKvm1bGVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:80:9d:c9:df:b8:3e:33:58:ad:a5:15:1d:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jun 15 07:01:18 2025 GMT
Not After : Jun 16 07:01:18 2025 GMT
Subject: CN=ec6dbdd63d359b8302e3afc7b2c1e5df68728ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:b8:da:c1:f0:b6:53:f0:59:05:96:c6:cb:
86:38:22:02:90:73:b0:c8:87:dc:a9:87:12:90:dc:
73:4c:6d:69:04:10:97:7a:09:b2:c3:d1:da:a3:ad:
6d:9d:d6:b5:32:39:28:1d:7b:33:4b:54:b8:b3:2b:
9e:e0:81:7e:69:4c:2d:20:d1:17:97:d1:ca:37:ed:
7b:38:27:dd:a5:fa:f1:0d:c0:48:c1:42:ac:c6:1e:
27:81:c9:9b:9f:9a:eb:f2:97:16:e7:0a:5a:fd:00:
6e:52:8c:31:8e:42:89:6b:58:09:4e:1a:ea:74:b4:
4a:6c:aa:1d:ef:be:fc:6f:98:fd:86:35:1e:28:04:
31:72:ea:52:9c:6b:fb:ba:14:c0:2a:ba:e2:73:1c:
95:22:8d:36:68:c0:8a:9d:4f:d0:50:a9:f6:d6:36:
bd:be:1a:03:e9:0e:c9:07:af:1f:86:43:35:b0:73:
af:e3:ef:53:d0:94:19:7b:06:cd:d4:bc:18:70:40:
38:a2:7d:aa:14:ab:80:f1:7b:c0:ad:a9:5e:94:6f:
67:95:ea:6c:1f:33:02:34:85:fc:6e:48:33:8d:26:
59:c7:3f:28:fe:db:da:80:a3:87:84:05:b4:00:30:
46:68:0c:d7:7d:21:71:b0:1f:b9:0b:cc:95:8a:1e:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:BD:D6:3D:35:9B:83:02:E3:AF:C7:B2:C1:E5:DF:68:72:8F:FB
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ea:a6:c3:bb:20:40:fc:fd:ca:9c:6a:27:83:b4:8f:03:83:
a5:a3:9e:ee:a0:5b:eb:34:14:16:80:92:57:e6:34:86:92:4f:
4e:53:66:e2:49:40:56:c4:b8:5a:65:02:5b:97:2c:14:30:e8:
ee:06:00:4b:b2:95:06:7a:51:75:33:4a:47:2b:bf:1c:13:1e:
7e:c0:4e:22:b1:e1:76:c5:51:39:f4:70:4e:4a:d8:2d:0a:6f:
3d:f5:84:93:92:16:f1:1c:6f:7a:e7:81:0f:e3:c8:b2:dc:a1:
3d:bd:4e:85:86:66:e5:f3:8e:9a:77:4c:34:96:58:08:2b:7a:
73:87:69:47:e6:4e:66:8e:ea:21:b5:f7:5e:a6:ac:33:9b:81:
ae:51:cb:34:83:62:f6:d4:ff:d4:80:89:c7:5c:7e:93:90:18:
9a:a0:a7:b8:b0:af:30:36:b2:1a:83:6c:c5:58:89:53:ad:43:
9e:a2:cc:43:a8:be:83:e5:36:c2:a5:2d:9f:c5:72:ce:e7:48:
d6:21:50:2c:3c:74:67:cf:a2:33:b3:4d:02:73:3a:22:84:97:
e3:5e:32:45:7a:41:d3:43:43:60:04:7c:ca:2d:aa:99:ba:6a:
d9:e9:f3:cf:fb:e5:21:a8:af:dc:92:08:5c:bf:59:5d:57:3f:
6a:aa:b2:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyZICdyd+4PjNYraUVHWSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNlOTFkNWIwNWI0NWYwN2QzODUyNGY0ZjFlMmUzOTJi
OGE4M2EwHhcNMjUwNjE1MDcwMTE4WhcNMjUwNjE2MDcwMTE4WjAzMTEwLwYDVQQD
EyhlYzZkYmRkNjNkMzU5YjgzMDJlM2FmYzdiMmMxZTVkZjY4NzI4ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYW42sHwtlPwWQWWxsuGOCICkHOw
yIfcqYcSkNxzTG1pBBCXegmyw9Hao61tnda1MjkoHXszS1S4syue4IF+aUwtINEX
l9HKN+17OCfdpfrxDcBIwUKsxh4ngcmbn5rr8pcW5wpa/QBuUowxjkKJa1gJThrq
dLRKbKod7778b5j9hjUeKAQxcupSnGv7uhTAKrricxyVIo02aMCKnU/QUKn21ja9
vhoD6Q7JB68fhkM1sHOv4+9T0JQZewbN1LwYcEA4on2qFKuA8XvAralelG9nleps
HzMCNIX8bkgzjSZZxz8o/tvagKOHhAW0ADBGaAzXfSFxsB+5C8yVih6WYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxtvdY9NZuDAuOvx7LB5d9oco/7MB8GA1UdIwQY
MBaAFJ0j6R1bBbRfB9OFJPTx4uOSuKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAt
MzdhOWRkMDJiMmM0LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAtMzdhOWRkMDJiMmM0
LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuqmw7sg
QPz9ypxqJ4O0jwODpaOe7qBb6zQUFoCSV+Y0hpJPTlNm4klAVsS4WmUCW5csFDDo
7gYAS7KVBnpRdTNKRyu/HBMefsBOIrHhdsVROfRwTkrYLQpvPfWEk5IW8RxveueB
D+PIstyhPb1OhYZm5fOOmndMNJZYCCt6c4dpR+ZOZo7qIbX3XqasM5uBrlHLNINi
9tT/1ICJx1x+k5AYmqCnuLCvMDayGoNsxViJU61DnqLMQ6i+g+U2wqUtn8VyzudI
1iFQLDx0Z8+iM7NNAnM6IoSX414yRXpB00NDYAR8yi2qmbpq2enzz/vlIaiv3JII
XL9ZXVc/aqqyWA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:14 2025 by rpki-client