Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: 8xSRf2ThoNcAT8weYzbFlRRY4/NitrorASWSlBfZWAM=
Subject key identifier: C8:AF:4C:01:A4:D3:9E:26:4C:30:CF:CC:7E:B9:D7:BF:A3:BD:F5:38
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019A4D3D0631F98AF89FED3A0E2C4E8AC384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 0485
Signing time: Tue 04 Nov 2025 05:00:36 +0000
Manifest this update: Tue 04 Nov 2025 05:00:36 +0000
Manifest next update: Wed 05 Nov 2025 05:00:36 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: WaYkYJ4HgMH/iRiXu4Dnx208loeEeo40vxL7yy4E0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:06:31:f9:8a:f8:9f:ed:3a:0e:2c:4e:8a:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Nov 4 05:00:36 2025 GMT
Not After : Nov 5 05:00:36 2025 GMT
Subject: CN=c8af4c01a4d39e264c30cfcc7eb9d7bfa3bdf538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:d7:a8:6d:ea:b6:c2:9a:c5:73:a0:be:21:
e3:3a:2b:4d:55:49:d5:5f:19:81:5d:51:61:a9:ff:
86:e0:c4:c4:da:a6:4f:fb:5a:71:7e:e6:5b:fd:0d:
68:b0:41:2f:42:34:6d:d6:91:36:34:c5:38:69:6e:
88:51:26:0d:82:b0:2e:27:4b:53:4f:3b:04:f6:d0:
63:b4:6e:89:d9:8b:86:f9:6a:76:1b:f6:63:ae:bc:
6e:4f:56:6c:ce:d7:31:c1:8f:ea:01:30:79:62:8b:
37:dd:5b:ac:04:96:fa:cd:30:2c:d9:15:db:82:1b:
e8:01:c4:74:6a:ca:b8:64:d6:b6:2d:27:5b:93:17:
4e:33:fe:3d:83:54:c2:cf:37:d7:a9:50:b4:6e:0c:
1d:2a:ca:81:02:1b:94:04:73:cc:1d:fb:c9:f1:3b:
9c:23:cc:7c:0b:49:56:51:3f:c9:37:3b:30:cf:5b:
ff:01:d1:85:d9:68:bb:6b:c5:9f:98:39:d3:1c:29:
b1:f7:9b:c5:c7:f6:24:f7:16:f5:31:f7:44:80:63:
44:4f:b0:6d:db:d7:9a:74:d2:af:8b:89:b8:e8:d6:
7a:32:57:31:37:b8:8d:26:4f:db:64:70:4e:ac:d5:
82:4f:92:1d:45:fa:00:05:a2:5b:51:bb:f4:63:bd:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:4C:01:A4:D3:9E:26:4C:30:CF:CC:7E:B9:D7:BF:A3:BD:F5:38
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:86:7b:65:0a:bd:47:4d:47:90:d6:d1:14:9f:9c:fe:db:19:
ec:f3:41:87:d8:ec:62:34:dd:ae:f9:26:e1:54:d8:f3:31:51:
c0:27:60:60:ac:57:af:5d:cb:79:aa:3b:02:50:35:9c:ad:c8:
34:f1:fb:4a:91:7e:26:7b:5e:2c:a4:b2:ec:45:53:13:a2:99:
25:a4:29:8b:db:5e:e7:15:00:a3:2c:0b:ba:5c:d3:39:8c:d5:
a7:37:99:b6:84:d1:7f:19:48:e5:b0:35:c6:2b:7f:73:4c:e3:
c9:71:7f:f9:09:01:99:1c:d5:d6:44:c9:fd:12:3a:a9:f9:0f:
4f:cb:bf:2b:24:21:28:49:4c:f1:d5:4f:ca:e9:6c:29:aa:5e:
1a:69:ba:3d:4c:7d:68:da:b1:41:f8:bd:fe:e5:d3:07:13:8c:
4b:a4:d5:6a:ee:d9:97:1b:6d:05:d5:83:33:24:3c:89:6c:e7:
5b:28:ad:e0:03:aa:38:c6:f2:99:65:8d:ce:fb:51:6e:77:a0:
12:d1:78:58:6d:78:54:88:05:9e:65:b0:0b:09:cf:29:4e:a8:
3a:e1:38:5d:7f:46:dd:25:f3:ba:ce:49:9a:28:a0:82:93:fd:
e4:3f:47:7d:72:62:30:55:f2:bf:8f:be:a2:f6:6d:56:90:ce:
fb:5a:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:01 2025 by rpki-client