Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: TKXbnoJBwc5db/K83qHKefaOyLdp3tKIH6Jx9eWlxTo=
Subject key identifier: E5:E8:45:22:1A:EE:8C:B3:31:CA:FF:38:AD:3D:EE:A4:A9:AB:E5:3A
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 01975045FD4EB50430CE0B70D5AD6C2C06C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 16:00:53 +0000
Manifest this update: Sun 08 Jun 2025 16:00:53 +0000
Manifest next update: Mon 09 Jun 2025 16:00:53 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: DAg/t/MlaPmeCLOKeH0GI8hH2eJcL/x8Ram4cz2af7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:fd:4e:b5:04:30:ce:0b:70:d5:ad:6c:2c:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Jun 8 16:00:53 2025 GMT
Not After : Jun 9 16:00:53 2025 GMT
Subject: CN=e5e845221aee8cb331caff38ad3deea4a9abe53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:11:21:b4:fe:c1:ce:89:e6:70:06:63:e6:
df:83:d4:59:41:f7:93:07:24:db:28:13:ad:69:9d:
71:29:0d:4f:76:57:a7:a3:2f:8c:83:9b:fd:11:47:
c3:ee:3b:7f:a6:a4:32:80:85:46:65:52:70:9f:35:
83:1c:03:b3:5a:74:34:62:d0:87:a1:e8:83:29:50:
5f:da:05:1e:81:42:d7:0d:ce:0f:44:a6:27:66:44:
8c:36:6b:46:b1:14:76:6f:f8:f4:d8:e8:b2:cd:8e:
99:5a:ad:73:52:b1:4e:22:dd:a2:78:b0:e9:e3:2f:
4d:f6:ae:d8:bc:7e:44:ab:1d:b2:f2:5a:7a:fd:b8:
f8:c4:21:33:3a:0e:98:b8:59:87:83:5a:b1:da:44:
66:28:92:5c:17:a8:73:93:40:18:f6:7a:58:d7:b8:
44:31:cc:1d:2f:b4:76:f9:0b:0e:0e:e7:72:63:87:
d3:02:a6:a7:59:f1:b8:79:20:3d:11:88:db:b5:19:
4b:ec:9c:c3:b6:ed:6a:0c:72:e9:0a:d2:3f:d4:2a:
ef:28:40:61:81:3e:1b:c2:38:a1:e9:f3:47:f3:b8:
70:df:ec:bf:48:ba:b8:d7:9b:66:90:3b:b7:c3:af:
38:f1:5d:8f:0a:81:22:ce:61:0e:9a:12:33:a2:fb:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:45:22:1A:EE:8C:B3:31:CA:FF:38:AD:3D:EE:A4:A9:AB:E5:3A
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8b:6a:a1:48:28:7d:51:05:e8:20:63:46:ff:7e:8d:e8:c9:
e4:95:1f:7f:03:37:7e:35:9b:05:0a:d3:0d:7b:c6:84:28:63:
fe:85:87:a8:8e:50:24:d5:21:9f:c9:5c:f7:6b:60:27:05:32:
67:30:6f:43:4c:31:a6:a6:18:ee:3a:9d:db:a6:7d:25:07:f7:
d5:d8:79:ae:2a:36:8b:3a:b7:fa:8e:49:ff:04:e9:5b:26:e5:
73:91:64:5f:0d:b0:3d:15:59:39:03:74:c1:bd:2f:35:c7:01:
31:7f:a3:d4:94:92:f6:9c:6b:f1:97:8c:00:45:60:e6:dd:e2:
0a:2a:f6:58:98:78:c3:85:ee:11:57:34:1a:66:e2:9b:16:d7:
bd:8f:b4:26:9a:60:31:d4:42:fc:5f:6a:e0:86:87:43:9c:c6:
11:7f:79:d9:84:4e:52:69:61:bc:b5:75:b8:6b:93:96:89:e7:
0c:8b:b7:22:80:7e:13:6d:88:7c:bc:1d:e5:37:14:6c:70:9c:
b8:7c:8a:0e:5d:49:1e:31:09:c0:e9:52:e4:d7:39:05:9c:b1:
ff:40:63:7d:53:e2:7a:a4:76:f2:36:bd:f2:ae:96:42:0a:8d:
9e:25:ee:2c:af:50:68:5e:5f:26:f6:30:d3:e1:cb:15:1b:49:
fe:c4:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:50 2025 by rpki-client