Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: 2k/h5thUcUNu+XfdriTnVFBe8kzP0ePYZpB95mgQd3k=
Subject key identifier: 02:A5:9B:47:DF:46:96:D9:D0:43:E6:9F:CE:BC:B4:1D:F7:4C:0D:F8
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 01984B53A95770CDD9341A2ABD96F756DB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:00:30 +0000
Manifest this update: Sun 27 Jul 2025 10:00:30 +0000
Manifest next update: Mon 28 Jul 2025 10:00:30 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: Irm+LZ8lhjOVBDqTs1xQBjlrwD511fJjpPJolj605hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:a9:57:70:cd:d9:34:1a:2a:bd:96:f7:56:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Jul 27 10:00:30 2025 GMT
Not After : Jul 28 10:00:30 2025 GMT
Subject: CN=02a59b47df4696d9d043e69fcebcb41df74c0df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:c6:5d:d9:11:f5:5b:c5:9c:75:80:ba:73:
a9:53:24:d4:51:1f:08:78:98:42:88:33:6e:07:6a:
89:ce:68:ca:e1:a0:2b:be:19:1a:cc:f9:bf:2b:5c:
b0:bf:ac:ce:31:e9:16:34:2c:03:b7:aa:ab:76:d1:
64:e4:b8:88:8a:f4:bf:30:c0:37:aa:37:a7:1c:cb:
37:36:63:dc:a4:f8:4b:c2:a1:21:a6:11:cc:f2:cd:
29:8a:3d:17:be:ca:a1:bd:4e:02:29:93:c0:41:f3:
6c:d2:d9:00:36:24:2b:98:00:19:ed:dc:32:6b:da:
b5:ce:b8:94:10:02:b2:1e:9f:b5:66:79:cc:dc:ba:
06:6b:af:66:37:b4:cc:18:61:47:6f:c7:10:4d:e2:
27:41:af:24:02:6d:42:c3:c2:dd:08:9f:8c:24:19:
21:a7:e2:9c:27:55:cd:b6:d2:28:b4:d6:60:4b:d4:
c8:b1:51:c1:02:7b:24:f9:f1:3c:b5:1a:88:e2:80:
51:10:64:86:3e:b4:be:e6:b5:e9:58:31:63:5f:65:
4e:33:bc:ed:df:20:4d:64:5e:db:87:b5:7e:a1:1e:
1f:18:fd:42:ee:2a:cd:5d:a7:1d:9d:e0:55:27:14:
eb:51:52:41:ad:4a:10:bb:37:1e:db:2e:ab:94:8f:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:9B:47:DF:46:96:D9:D0:43:E6:9F:CE:BC:B4:1D:F7:4C:0D:F8
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4b:37:43:fc:b1:53:9e:e5:db:d3:f8:7c:5e:63:f0:b9:f5:
23:b6:e8:f0:5b:46:7d:38:73:28:d8:1a:64:0e:ab:fa:cd:f1:
5e:b6:8b:74:d0:33:be:c8:94:0b:04:03:df:de:37:4c:65:79:
91:36:32:ca:d9:93:56:46:77:33:e6:7c:5d:d8:3c:af:d5:3e:
fe:10:62:8a:86:7f:9f:5c:0a:2e:55:6f:bf:06:53:99:97:d3:
a9:ac:ef:eb:f4:a3:ff:23:f8:30:05:97:6b:19:39:31:4b:30:
52:10:c6:50:dc:d1:ac:41:0f:fa:c7:78:a7:5c:d1:bd:14:02:
c8:a3:e7:c6:f4:93:33:7f:b8:a0:4d:f7:7d:80:15:b0:d6:d4:
9c:de:8e:bb:53:f4:06:7e:11:90:28:e5:af:df:c5:8b:92:6c:
14:a4:64:16:cc:6e:77:98:7e:57:3e:02:3f:0d:5f:f5:bb:93:
45:48:83:43:0f:ff:15:99:2f:1a:fd:f3:f1:f6:60:c2:37:52:
4c:44:30:d4:86:31:9d:a5:71:80:a0:68:0b:fa:a6:c0:00:ab:
4c:91:23:05:18:74:eb:4d:ed:77:5a:06:f6:46:ca:02:4a:e2:
80:4d:2c:3b:bc:d1:b9:f5:f3:f8:82:a5:76:a3:fc:e8:c8:8d:
f0:10:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:20 2025 by rpki-client