Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: jYBCQpshmeRn1GJrS1lCzp6qNaflMbbWQQHuR9ZqKXI=
Subject key identifier: BC:05:23:19:3F:BB:01:60:5B:59:2B:E5:0D:DE:DC:B7:0D:0C:20:0F
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 01967567D98F7DED2AA6B7F53EC471480D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 3D
Signing time: Sun 27 Apr 2025 04:01:02 +0000
Manifest this update: Sun 27 Apr 2025 04:01:02 +0000
Manifest next update: Mon 28 Apr 2025 04:01:02 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: H5vnjoPcTGyuinVu1G/Ul+r9g1k9XSgXUHmxp54ggec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:d9:8f:7d:ed:2a:a6:b7:f5:3e:c4:71:48:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Apr 27 04:01:02 2025 GMT
Not After : Apr 28 04:01:02 2025 GMT
Subject: CN=bc0523193fbb01605b592be50ddedcb70d0c200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:36:d5:17:51:52:62:49:3f:af:e0:34:e4:
65:47:4c:3d:14:ec:fd:d5:e5:42:98:76:5a:a8:e2:
6a:32:c0:56:76:ad:4f:3e:46:14:10:62:0b:63:cc:
e4:8b:af:d6:3a:9a:ef:d3:38:1a:47:a7:71:93:52:
bf:cf:9a:44:d6:65:05:e7:7d:d7:3d:2c:22:6e:b0:
28:02:0b:6e:ba:1c:d7:8f:3c:27:f8:12:98:40:b5:
a7:47:b0:ad:8d:65:f7:84:37:99:37:6f:41:ab:0d:
00:e3:5e:d1:f0:84:1a:17:fd:5b:78:c3:f0:41:48:
13:3d:d4:81:e3:32:aa:e1:12:d9:85:5d:09:5b:6b:
68:1a:bf:05:b4:e2:8b:91:59:ff:d4:51:f7:86:38:
aa:ed:53:ff:8f:f1:b9:7c:12:93:43:8d:28:b1:f8:
a8:2d:de:59:c9:e6:fa:c7:97:5e:33:f0:96:08:aa:
c1:96:3f:bb:a0:6d:75:a8:61:73:f0:d9:97:f5:dd:
a0:c5:5a:ee:38:bb:70:d9:13:11:a4:92:e1:95:44:
31:60:44:f4:ea:77:32:77:dd:41:dd:9e:9f:5e:fb:
9c:33:e6:cc:a0:2b:93:44:0c:77:23:ae:2e:96:33:
7d:3e:35:b9:33:11:0e:55:63:4e:ab:be:ee:8d:73:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:23:19:3F:BB:01:60:5B:59:2B:E5:0D:DE:DC:B7:0D:0C:20:0F
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a8:ec:e9:ca:08:c7:05:96:c2:17:2f:8f:b6:2b:24:11:c4:
7b:3a:1d:78:6c:23:52:a5:42:38:64:51:40:aa:cd:30:19:94:
ff:38:7d:b2:96:4d:f6:27:bd:74:67:86:bb:a7:d4:c4:e8:a9:
32:c8:3d:af:1b:12:ad:a8:62:a6:47:15:c0:b7:6e:fe:67:4e:
07:89:cd:2a:64:6f:ba:60:11:d0:ef:69:12:cb:37:01:d0:54:
41:c1:88:6f:73:23:ce:fa:8f:a0:78:0a:55:8d:da:0f:b8:95:
f1:a2:f5:9a:98:03:1c:5a:45:d1:4d:ea:97:43:dc:76:42:d7:
76:5c:06:9e:1f:8c:16:07:30:c8:63:4e:25:11:51:e0:1c:11:
ed:5c:20:40:94:29:9b:d2:09:01:8b:d5:91:c0:1b:ea:91:32:
17:e9:30:04:04:74:17:0f:86:ab:8a:2e:62:f5:af:ee:72:b2:
f6:cc:82:e5:2e:e9:0d:0e:2c:53:63:cd:4f:fa:a3:42:57:a1:
ab:75:51:46:a0:78:66:d6:b0:a2:70:b7:ac:40:4c:69:99:b1:
e7:7b:89:fe:da:53:0b:f4:1b:e2:0d:66:5f:d5:1a:8b:0d:0b:
de:39:aa:44:cf:12:bd:bd:05:34:a9:d1:a8:8d:fc:f7:77:fc:
4a:65:0b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z9mPfe0qprf1PsRxSA1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjA0MmUzODBkNjQ3NjUxM2FjYzA4ZmI1NGZiY2M3MzYy
NmVjM2QwHhcNMjUwNDI3MDQwMTAyWhcNMjUwNDI4MDQwMTAyWjAzMTEwLwYDVQQD
EyhiYzA1MjMxOTNmYmIwMTYwNWI1OTJiZTUwZGRlZGNiNzBkMGMyMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI021RdRUmJJP6/gNORlR0w9FOz9
1eVCmHZaqOJqMsBWdq1PPkYUEGILY8zki6/WOprv0zgaR6dxk1K/z5pE1mUF533X
PSwibrAoAgtuuhzXjzwn+BKYQLWnR7CtjWX3hDeZN29Bqw0A417R8IQaF/1beMPw
QUgTPdSB4zKq4RLZhV0JW2toGr8FtOKLkVn/1FH3hjiq7VP/j/G5fBKTQ40osfio
Ld5Zyeb6x5deM/CWCKrBlj+7oG11qGFz8NmX9d2gxVruOLtw2RMRpJLhlUQxYET0
6ncyd91B3Z6fXvucM+bMoCuTRAx3I64uljN9PjW5MxEOVWNOq77ujXNg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwFIxk/uwFgW1kr5Q3e3LcNDCAPMB8GA1UdIwQY
MBaAFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDct
ZGVkMzg2MmI3NjMxLzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDctZGVkMzg2MmI3NjMx
LzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqjs6coI
xwWWwhcvj7YrJBHEezodeGwjUqVCOGRRQKrNMBmU/zh9spZN9ie9dGeGu6fUxOip
Msg9rxsSrahipkcVwLdu/mdOB4nNKmRvumAR0O9pEss3AdBUQcGIb3MjzvqPoHgK
VY3aD7iV8aL1mpgDHFpF0U3ql0PcdkLXdlwGnh+MFgcwyGNOJRFR4BwR7VwgQJQp
m9IJAYvVkcAb6pEyF+kwBAR0Fw+Gq4ouYvWv7nKy9syC5S7pDQ4sU2PNT/qjQleh
q3VRRqB4ZtawonC3rEBMaZmx53uJ/tpTC/Qb4g1mX9Uaiw0L3jmqRM8Svb0FNKnR
qI3893f8SmUL8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:23 2025 by rpki-client