Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft (raw, json)
Hash identifier: 59/1vbsgqBbVdDgzTrXm/uZ273XQbHNLpJ6inQDf4/c=
Subject key identifier: 1A:7E:00:0D:69:06:BC:6E:7B:23:27:D7:3F:77:67:B4:3A:7D:8C:79
Authority key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
Certificate issuer: /CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Certificate serial: 019751FD0866F2CBE350DE0A15472DF7747E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
Manifest number: 52
Signing time: Mon 09 Jun 2025 00:00:26 +0000
Manifest this update: Mon 09 Jun 2025 00:00:26 +0000
Manifest next update: Tue 10 Jun 2025 00:00:26 +0000
Files and hashes: 1: nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl (hash: a3e/1zzdOj/26sxbXgdaDA9pDg88vaH21mivMN1K8VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:08:66:f2:cb:e3:50:de:0a:15:47:2d:f7:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Validity
Not Before: Jun 9 00:00:26 2025 GMT
Not After : Jun 10 00:00:26 2025 GMT
Subject: CN=1a7e000d6906bc6e7b2327d73f7767b43a7d8c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:d0:59:5b:1c:f0:63:4b:e8:fe:53:2d:1c:
39:04:bd:ca:35:71:bb:18:3f:fb:f5:03:59:a3:e8:
ec:e8:d6:4a:c5:61:00:71:48:04:f1:a5:38:99:2b:
c2:33:c6:84:b4:b9:7c:0b:75:22:38:4b:da:53:4c:
75:05:7c:2f:c7:f1:48:91:d6:20:f8:11:ac:d6:fd:
73:23:31:8d:93:ad:e1:0a:fa:7a:11:1a:00:f4:50:
ac:07:48:17:8f:31:24:38:a9:4a:81:ff:95:7f:97:
7b:36:e3:bc:92:0e:a3:bb:82:8f:0c:ee:d7:69:4f:
e5:a9:1b:74:31:69:ce:03:45:69:cf:68:78:7b:cd:
6f:55:7f:ef:ed:2a:0e:71:1c:71:17:89:d7:fc:3e:
79:f3:52:99:18:fb:b9:4c:b5:ab:84:0b:a5:75:72:
39:ad:73:d4:34:5a:f1:90:a3:78:41:ce:67:d1:5e:
98:8d:4d:fa:27:18:23:fb:80:53:46:15:3f:96:b3:
db:5d:16:58:63:6a:9f:6d:32:d8:70:79:b6:2d:ff:
a5:e5:7f:ab:f0:c0:8a:27:17:79:f6:f5:af:62:40:
ff:11:20:8e:87:a3:90:d0:e8:cb:5d:eb:da:f2:47:
12:56:aa:12:a6:53:fc:e0:99:85:64:ed:1b:59:99:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7E:00:0D:69:06:BC:6E:7B:23:27:D7:3F:77:67:B4:3A:7D:8C:79
X509v3 Authority Key Identifier:
keyid:9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:48:aa:51:35:b0:4e:0c:26:25:41:c1:f1:ad:f3:96:ed:eb:
b8:53:93:5e:01:4c:61:bd:2b:2d:3f:1e:73:43:7d:1a:a2:a9:
0f:1e:ac:6f:f1:83:c5:0b:70:b3:82:db:03:41:17:c8:9e:4f:
88:51:89:5e:49:1e:ce:9f:d0:81:52:14:89:88:ef:20:c8:c0:
32:02:f1:75:e1:13:ce:d3:28:a0:f4:c8:80:90:70:ad:90:79:
49:5c:b1:16:21:48:2c:2f:e0:cb:fe:6e:76:0f:9d:79:7f:d5:
22:9c:5d:0b:52:36:9b:ab:da:13:02:e8:b7:a4:5b:a5:0f:6a:
73:0c:01:94:28:30:99:67:99:fa:ed:79:6f:a0:bb:12:0c:57:
55:4c:01:2a:0f:db:db:ae:8d:05:e3:26:6d:50:16:5a:fe:0d:
e8:7a:24:09:f7:64:50:8c:b8:38:59:ee:f0:05:de:13:f2:06:
92:9a:6b:2e:a4:dc:2f:cc:16:fe:0c:ce:d9:e7:39:47:1d:91:
fc:d9:d9:68:18:7b:cd:6d:e6:2f:8e:3f:23:c7:fe:ac:0b:d5:
d0:d5:f0:c0:de:aa:69:5e:76:24:9d:de:77:f8:fc:c7:01:be:
13:64:16:b0:86:db:0a:c4:da:c8:38:b2:71:73:b6:63:dc:b3:
a4:99:95:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/Qhm8svjUN4KFUct93R+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNzY1MGU0NTNiOThmNmY0ZGQzMzM2MzNhZmZhYmJhMmMw
YzhmOGEwHhcNMjUwNjA5MDAwMDI2WhcNMjUwNjEwMDAwMDI2WjAzMTEwLwYDVQQD
EygxYTdlMDAwZDY5MDZiYzZlN2IyMzI3ZDczZjc3NjdiNDNhN2Q4Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApILQWVsc8GNL6P5TLRw5BL3KNXG7
GD/79QNZo+js6NZKxWEAcUgE8aU4mSvCM8aEtLl8C3UiOEvaU0x1BXwvx/FIkdYg
+BGs1v1zIzGNk63hCvp6ERoA9FCsB0gXjzEkOKlKgf+Vf5d7NuO8kg6ju4KPDO7X
aU/lqRt0MWnOA0Vpz2h4e81vVX/v7SoOcRxxF4nX/D5581KZGPu5TLWrhAuldXI5
rXPUNFrxkKN4Qc5n0V6YjU36Jxgj+4BTRhU/lrPbXRZYY2qfbTLYcHm2Lf+l5X+r
8MCKJxd59vWvYkD/ESCOh6OQ0OjLXeva8kcSVqoSplP84JmFZO0bWZnmkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp+AA1pBrxueyMn1z93Z7Q6fYx5MB8GA1UdIwQY
MBaAFJ12UORTuY9vTdMzYzr/q7osDI+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2It
ZDI0MWY5ZWM1MDQxLzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2ItZDI0MWY5ZWM1MDQx
LzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekiqUTWw
TgwmJUHB8a3zlu3ruFOTXgFMYb0rLT8ec0N9GqKpDx6sb/GDxQtws4LbA0EXyJ5P
iFGJXkkezp/QgVIUiYjvIMjAMgLxdeETztMooPTIgJBwrZB5SVyxFiFILC/gy/5u
dg+deX/VIpxdC1I2m6vaEwLot6RbpQ9qcwwBlCgwmWeZ+u15b6C7EgxXVUwBKg/b
266NBeMmbVAWWv4N6HokCfdkUIy4OFnu8AXeE/IGkpprLqTcL8wW/gzO2ec5Rx2R
/NnZaBh7zW3mL44/I8f+rAvV0NXwwN6qaV52JJ3ed/j8xwG+E2QWsIbbCsTayDiy
cXO2Y9yzpJmVHw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:55:15 2025 by rpki-client