Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: aku8Y01tbyYcl2iSJ/SpMMRyFhhU06UyBcj7lIY77/o=
Subject key identifier: 61:BF:B1:51:CD:52:EE:F4:E3:59:84:6F:D7:0A:2D:3F:C5:CD:B4:36
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019681D997CE12EB2427BF42D694F51C4BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 028E
Signing time: Tue 29 Apr 2025 14:00:43 +0000
Manifest this update: Tue 29 Apr 2025 14:00:43 +0000
Manifest next update: Wed 30 Apr 2025 14:00:43 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: 0tMKBlRv70d6pmoL4iL+q2dYM5u8xilzSb6Dbv8VxE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:97:ce:12:eb:24:27:bf:42:d6:94:f5:1c:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Apr 29 14:00:43 2025 GMT
Not After : Apr 30 14:00:43 2025 GMT
Subject: CN=61bfb151cd52eef4e359846fd70a2d3fc5cdb436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6c:85:51:5b:fb:a0:8b:44:29:72:bf:ed:a4:
46:30:f5:83:48:3c:6f:09:b1:73:1b:72:3b:66:40:
7d:db:e2:ec:c0:af:cf:8a:b0:51:94:f3:a4:9a:59:
66:bd:bd:f5:5e:5b:f0:de:68:73:ea:6a:dc:22:3b:
16:f1:7d:4f:09:3c:9c:0c:75:82:50:d5:08:9e:e8:
2e:02:41:09:26:2a:51:9c:17:7f:d3:31:10:1e:e1:
fc:e1:8f:a9:87:f5:b1:db:d2:7d:a0:c8:8b:9e:d8:
f0:27:b0:f7:34:61:dc:88:63:de:2e:ba:f9:6d:79:
af:6d:bb:bc:36:da:bd:1a:76:6e:ac:50:33:a4:b1:
be:97:8f:a7:78:8b:d5:ba:8a:42:93:f1:c9:1b:cc:
65:42:23:34:06:01:11:25:cf:b1:c9:74:b3:f3:86:
6e:cd:23:4c:b2:c8:81:08:d9:09:01:f0:0c:5d:40:
76:89:58:15:21:97:21:99:aa:1d:15:61:a8:58:a5:
98:27:44:1c:80:86:b5:6b:a8:52:67:7a:e6:af:6d:
66:d4:ac:38:88:8b:43:7e:95:6b:ed:c5:40:6e:66:
d7:16:79:9b:16:9e:d2:0c:f1:9b:40:76:05:19:07:
b2:5c:bf:4c:a3:8b:e6:3e:80:71:92:29:2e:bf:e0:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:B1:51:CD:52:EE:F4:E3:59:84:6F:D7:0A:2D:3F:C5:CD:B4:36
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:d7:34:bf:68:ac:e5:09:ef:cd:fe:c0:49:46:3d:fe:1b:
64:e2:d6:c7:ff:1b:2b:bb:86:a3:10:dc:eb:f2:99:f0:d2:81:
99:75:93:85:46:0b:72:1a:c2:63:60:b0:80:34:2b:db:79:55:
09:ac:c0:d8:e0:6e:42:41:ba:d3:31:c8:f9:96:f9:62:1f:86:
45:e1:e3:64:28:0f:d5:89:25:0c:02:25:a9:d4:a3:6e:cf:c7:
40:78:04:ea:cd:2a:c9:dc:85:c5:bd:2c:4e:1c:e1:26:fd:9e:
92:17:df:c0:69:52:2b:88:55:f7:fb:38:54:af:d6:20:69:69:
1c:1e:d5:c0:5d:14:59:8b:ee:54:87:80:b2:df:4a:6d:37:93:
cd:a7:28:c0:2e:9b:40:fb:0f:49:01:d3:d8:68:68:e2:f5:34:
ab:d0:cf:5f:02:c1:ce:ff:37:a3:0e:ca:17:54:d3:c0:ad:1c:
5c:aa:59:cc:ae:63:c8:f8:22:67:71:5b:f9:0b:a9:98:19:b1:
7c:97:a3:16:57:82:98:68:ac:04:45:1c:cb:4b:cf:dd:25:64:
78:d8:6f:9b:8e:eb:a3:8d:96:df:0d:01:ba:d8:be:2c:20:32:
a2:2e:20:62:d6:4e:36:cb:05:af:ac:95:da:1e:b2:11:3b:40:
97:7b:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:42 2025 by rpki-client