Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: efFwVjrt7bNgxbM7xDHc/QNhmlJftDkQvoJM8K9zSYE=
Subject key identifier: F2:53:4E:A9:2A:38:AF:78:63:35:01:89:EF:42:72:4E:EB:A4:69:34
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 01976C98898034851A4FF54BA7F50557955A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: BD
Signing time: Sat 14 Jun 2025 04:00:25 +0000
Manifest this update: Sat 14 Jun 2025 04:00:25 +0000
Manifest next update: Sun 15 Jun 2025 04:00:25 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: NXlkkIDMJ6UQz47Rtl6Qpm68V601/SLIdtEDl9wCIq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:89:80:34:85:1a:4f:f5:4b:a7:f5:05:57:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Jun 14 04:00:25 2025 GMT
Not After : Jun 15 04:00:25 2025 GMT
Subject: CN=f2534ea92a38af7863350189ef42724eeba46934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:5b:ac:5c:10:1e:6b:de:ad:f2:70:8c:ab:
03:d7:00:1c:d6:0e:85:aa:d7:0d:31:35:e6:13:a6:
e0:18:6e:1c:9a:4f:29:d0:c2:5d:7f:94:fb:49:c9:
e2:4b:3c:3f:44:9e:5a:ce:05:53:9e:27:63:9b:0e:
a0:c4:20:87:21:f9:78:e5:3e:c6:78:2d:a2:b2:97:
1a:00:0b:7c:e3:d1:f7:a6:22:8b:e2:86:64:bb:b8:
08:43:5c:d6:f5:00:0e:94:29:8e:90:aa:d6:68:8b:
0d:2c:dc:ff:b6:ea:10:e6:31:94:82:28:3b:fb:9a:
29:30:f9:af:37:94:c1:2e:1a:ae:37:84:a4:e6:83:
e4:1d:9b:62:d2:f6:fc:7f:6a:7a:30:f5:f7:00:63:
2a:6a:64:8b:90:37:c3:1b:d8:89:d7:b5:9c:81:73:
14:3f:53:97:6a:6d:fa:99:95:63:f8:55:be:fb:08:
4d:05:eb:e3:df:09:7e:d5:92:ed:69:b5:0f:39:b1:
65:bf:0d:e0:8c:d7:86:6f:be:95:71:7c:1d:0d:df:
15:cd:46:0c:d3:d1:c7:03:ed:0c:65:cd:53:40:52:
51:d6:57:66:ea:4c:8f:93:d2:82:ab:cd:ad:9d:b0:
7e:a7:85:e8:d8:6a:42:c4:cf:40:42:09:71:d4:8a:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:4E:A9:2A:38:AF:78:63:35:01:89:EF:42:72:4E:EB:A4:69:34
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b9:26:d8:67:44:ad:b4:30:15:38:5c:1b:94:bf:1e:eb:77:
7d:29:aa:0e:a2:7a:15:ec:37:e4:a5:18:fa:ef:31:ea:3b:16:
cb:54:ce:ee:ae:e6:f7:7b:bc:34:8c:ce:c3:37:ce:55:1a:75:
54:17:dc:a8:9d:45:28:e1:fe:05:1a:6a:4c:6b:82:2a:55:9a:
67:50:18:a6:90:61:a8:21:22:c9:aa:99:98:1c:34:7f:d9:82:
5b:80:24:df:b9:e3:af:cd:b5:9b:a8:8f:48:3d:5a:81:a4:e0:
56:33:04:1f:6b:ab:d0:d5:6e:fb:f3:d9:cc:94:ef:88:31:91:
74:ff:79:c9:04:87:cb:be:5f:91:f4:1b:4d:fe:2f:ce:3b:b1:
37:b9:05:44:2b:cd:e7:8f:64:2b:f2:72:c2:ad:01:d7:6c:be:
3d:4d:6c:e8:f0:f8:0f:68:14:b8:8b:40:1e:cd:e8:47:37:51:
e6:22:26:16:bf:ff:fe:ac:4b:ad:f3:d1:75:52:9e:ef:c6:2a:
74:27:ee:eb:ff:c9:62:40:15:35:38:b6:62:9e:63:24:ad:23:
ee:52:b1:8a:0f:0e:88:3b:46:c3:9d:be:6c:ab:5c:d3:4b:6c:
55:04:4a:c7:9f:b4:39:36:6a:e5:22:df:84:16:8e:7d:6c:52:
f3:e9:15:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmImANIUaT/VLp/UFV5VaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjA0MmUzODBkNjQ3NjUxM2FjYzA4ZmI1NGZiY2M3MzYy
NmVjM2QwHhcNMjUwNjE0MDQwMDI1WhcNMjUwNjE1MDQwMDI1WjAzMTEwLwYDVQQD
EyhmMjUzNGVhOTJhMzhhZjc4NjMzNTAxODllZjQyNzI0ZWViYTQ2OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm21brFwQHmverfJwjKsD1wAc1g6F
qtcNMTXmE6bgGG4cmk8p0MJdf5T7ScniSzw/RJ5azgVTnidjmw6gxCCHIfl45T7G
eC2ispcaAAt849H3piKL4oZku7gIQ1zW9QAOlCmOkKrWaIsNLNz/tuoQ5jGUgig7
+5opMPmvN5TBLhquN4Sk5oPkHZti0vb8f2p6MPX3AGMqamSLkDfDG9iJ17WcgXMU
P1OXam36mZVj+FW++whNBevj3wl+1ZLtabUPObFlvw3gjNeGb76VcXwdDd8VzUYM
09HHA+0MZc1TQFJR1ldm6kyPk9KCq82tnbB+p4Xo2GpCxM9AQglx1Ip1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJTTqkqOK94YzUBie9Cck7rpGk0MB8GA1UdIwQY
MBaAFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDct
ZGVkMzg2MmI3NjMxLzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDctZGVkMzg2MmI3NjMx
LzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLkm2GdE
rbQwFThcG5S/Hut3fSmqDqJ6Few35KUY+u8x6jsWy1TO7q7m93u8NIzOwzfOVRp1
VBfcqJ1FKOH+BRpqTGuCKlWaZ1AYppBhqCEiyaqZmBw0f9mCW4Ak37njr821m6iP
SD1agaTgVjMEH2ur0NVu+/PZzJTviDGRdP95yQSHy75fkfQbTf4vzjuxN7kFRCvN
549kK/Jywq0B12y+PU1s6PD4D2gUuItAHs3oRzdR5iImFr///qxLrfPRdVKe78Yq
dCfu6//JYkAVNTi2Yp5jJK0j7lKxig8OiDtGw52+bKtc00tsVQRKx5+0OTZq5SLf
hBaOfWxS8+kVRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:00 2025 by rpki-client