Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: jIXO3enB0FMZJdrb0VxZRgW2o0bHWAFEIhaxgtYpTYQ=
Subject key identifier: 29:86:37:09:88:4E:6C:AD:CE:42:6A:1E:27:04:33:8D:C9:44:FC:C1
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 0197CACC3BF7C23625349A8DACA7F2EE451A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 11:01:11 +0000
Manifest this update: Wed 02 Jul 2025 11:01:11 +0000
Manifest next update: Thu 03 Jul 2025 11:01:11 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: MG0HkjJ3PxhwMWSCeFhYAznUroD43e/u461I/cajlec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:3b:f7:c2:36:25:34:9a:8d:ac:a7:f2:ee:45:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Jul 2 11:01:11 2025 GMT
Not After : Jul 3 11:01:11 2025 GMT
Subject: CN=29863709884e6cadce426a1e2704338dc944fcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:60:04:e3:40:d4:51:08:13:c3:f5:23:46:
cc:be:ab:73:8a:c4:fa:0f:2d:a0:bc:0b:93:24:9a:
5c:58:e8:65:b1:ea:a3:cb:19:fb:e4:cb:95:c4:4a:
9a:6e:18:7a:54:8e:30:41:11:14:11:2f:6d:80:13:
df:26:8a:18:e4:01:71:b5:2d:23:bd:47:9a:42:98:
af:05:63:cc:89:53:22:70:8c:7b:dc:6d:98:ab:7a:
b9:26:aa:13:0f:45:22:42:53:02:15:e4:c7:95:4b:
b1:00:35:e2:68:18:26:6c:28:78:f9:69:dd:d7:ac:
fd:66:6a:59:25:59:08:93:cf:c2:1e:cc:21:56:ff:
da:aa:12:95:f0:c9:60:b1:3c:a6:30:30:38:7c:c8:
9a:f4:2a:06:9c:e7:01:46:b5:8f:d5:17:74:35:11:
da:87:97:a7:4a:9d:09:8c:fc:f5:04:2e:d1:3b:d4:
55:86:a4:01:05:0f:dc:04:0c:92:34:79:f8:60:46:
32:7a:5c:52:46:ce:c4:e5:27:11:76:44:28:fd:82:
4c:35:20:f0:97:6d:a3:cc:03:25:c8:ac:ab:73:0b:
8b:67:99:02:2b:00:df:d2:bd:dc:b8:65:5f:b3:cf:
a1:25:39:e9:00:80:3a:53:a8:10:db:9d:d7:62:63:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:37:09:88:4E:6C:AD:CE:42:6A:1E:27:04:33:8D:C9:44:FC:C1
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:f7:b2:5a:4e:33:a2:df:1a:f8:25:20:b6:58:3e:d4:09:
d7:8b:12:8b:e9:34:40:56:64:65:08:f6:51:18:ef:92:1a:77:
34:c8:0e:99:9c:af:bb:57:8a:9c:21:70:61:90:ba:1c:f6:4e:
dd:a9:33:c9:f6:e4:37:c5:3c:b3:04:7a:25:ee:ea:fa:e8:9e:
5a:20:fc:3f:f0:e7:2e:33:fe:e3:89:d5:76:ff:0a:be:8a:c9:
1c:1e:0a:48:de:05:a3:ac:cd:df:19:1f:df:a1:17:f3:c3:18:
00:e9:2e:cc:7a:99:56:df:7b:9f:b8:bd:97:ca:82:f8:b3:40:
60:1c:48:4a:82:ba:27:2a:c2:e6:ff:22:ba:67:49:c8:1a:1a:
25:fd:00:41:8c:a2:7b:d8:39:9f:47:70:ee:84:40:14:7a:18:
e2:16:db:70:8f:e0:6b:c6:84:e7:44:58:79:99:ee:8a:ac:24:
8e:ff:d0:d9:17:e9:c3:2a:de:4c:ca:de:4c:b4:88:e5:49:ac:
a0:ce:7c:96:48:87:0b:88:14:e1:f5:f3:9d:b5:ab:7b:4e:e7:
a1:bc:92:89:8e:86:ff:8f:9e:a7:31:59:15:8e:ed:12:94:43:
8a:7a:79:4a:34:ec:2a:c1:d6:6f:21:90:d2:03:48:09:2b:bc:
a0:d5:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:48 2025 by rpki-client