Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: bvtiZWrwH322le8Zj1qyJHDVyDnnH289s4ZjLmoN1vA=
Subject key identifier: 9B:3E:DF:7E:B3:24:36:67:71:7C:46:6A:45:50:40:3F:90:C5:F4:0E
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 01974930F9C8B86A9313951982CE5E00846E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0EAA
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: Q9ZplERBGFpcFbX9FwiHpk9jQeqntTfJmQNKB0FlEe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f9:c8:b8:6a:93:13:95:19:82:ce:5e:00:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=9b3edf7eb3243667717c466a4550403f90c5f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d4:53:f2:9d:39:3c:64:1a:aa:3b:a5:5b:e8:
4d:b5:cf:86:50:a8:84:4d:fe:76:cf:d9:d9:4e:c1:
4e:a8:4c:54:53:7a:41:85:ce:1a:d4:67:56:b2:98:
45:94:75:62:0a:67:96:ed:7c:97:5f:9e:e7:81:c3:
07:0e:e0:3d:cf:39:26:df:d0:98:58:fb:ea:ed:00:
5b:fc:06:0d:69:dd:c4:22:40:f5:e2:19:85:f1:43:
4d:65:fd:16:2e:a1:28:3a:b3:05:57:2a:af:16:20:
32:85:d3:2d:2f:f6:7f:92:bf:13:e6:82:13:b6:b8:
dd:e5:93:c0:f3:0d:20:72:89:2e:9e:cd:1d:dc:65:
71:e7:e6:b8:9e:fc:1c:6a:dc:7c:75:00:56:4c:67:
71:57:1c:df:d0:3b:78:eb:b8:38:6d:90:99:10:2e:
36:38:c8:9d:fa:40:c8:ce:53:c6:b6:2c:4d:66:f8:
05:c4:aa:10:aa:71:f5:11:33:b3:18:be:0b:c3:8e:
3b:c7:e3:ab:20:0c:c7:1e:f1:02:b8:68:36:d4:2f:
19:b6:a8:88:f6:84:5e:83:d6:3a:9e:8a:92:28:35:
7c:41:fc:07:21:ec:aa:e5:94:63:c8:f5:a5:53:9a:
54:61:03:34:3b:31:11:e3:4f:a0:b8:d1:78:96:2e:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:DF:7E:B3:24:36:67:71:7C:46:6A:45:50:40:3F:90:C5:F4:0E
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:ef:94:f2:82:c4:97:10:2d:ba:81:d8:ed:3f:1b:7e:ed:
4b:0d:3d:b9:e7:ba:f8:4e:13:67:eb:ad:70:a4:ec:23:42:ac:
ec:24:19:83:5d:f1:d7:6b:34:3e:e0:e0:96:45:60:ac:e0:0f:
7d:71:da:12:8c:04:a2:23:cb:6d:a9:2a:ca:87:df:83:2f:6e:
b2:30:73:77:05:fb:4d:54:f2:a0:e9:98:c8:c7:4f:a2:06:30:
2a:ab:5b:f9:dd:2f:dc:a2:57:e3:83:50:f1:6e:85:9a:14:e6:
a9:51:37:f6:3f:51:d9:0e:69:f3:8f:cf:73:2f:df:67:be:b1:
d8:f6:fb:37:9e:75:c6:b5:4f:7c:24:1d:e9:89:1a:fe:e4:2e:
e5:10:86:4f:d3:ca:00:6e:26:1b:8f:da:5f:92:16:f0:e3:10:
3c:28:fb:9a:2a:b8:74:14:2f:89:d0:90:b1:d9:af:c6:c5:fb:
60:bf:04:e0:64:c8:2c:ab:68:7c:9c:f1:cd:dc:41:5d:c9:8d:
d0:79:56:0c:7e:87:9f:27:53:3e:97:78:1e:ed:79:f4:91:7b:
7b:68:33:42:af:3d:43:63:19:7c:1c:80:b1:58:73:5a:35:15:
13:a2:59:6e:54:f1:f3:45:5a:86:06:7c:4b:95:ea:41:7d:14:
f4:f6:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:35:32 2025 by rpki-client