Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: d99b1dlUyKgHpf3cp+6WGU9ROdoV2qTgsjsfCsjl+b8=
Subject key identifier: 0C:59:36:66:EA:66:87:4E:31:8A:59:C3:6A:58:AE:00:58:29:A8:C5
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 019653B6DD39D2D9964EFD4C40966B9DE8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 15:00:15 +0000
Manifest this update: Sun 20 Apr 2025 15:00:15 +0000
Manifest next update: Mon 21 Apr 2025 15:00:15 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: ByQdf1fB1VvmtyC03UxHXPiZ1B0q9W5bcYZsPVcz32U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:dd:39:d2:d9:96:4e:fd:4c:40:96:6b:9d:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Apr 20 15:00:15 2025 GMT
Not After : Apr 21 15:00:15 2025 GMT
Subject: CN=0c593666ea66874e318a59c36a58ae005829a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:43:40:45:0c:74:8b:fa:65:1e:be:5e:48:
68:f8:9d:4d:67:17:45:e7:c0:67:8e:f1:f6:30:88:
20:f7:79:25:48:56:44:16:dd:11:c8:61:bf:27:0e:
12:27:4f:f6:be:5f:f1:88:6d:86:0d:df:8d:02:19:
48:24:9e:76:6e:f0:dc:ea:bb:09:5e:94:b0:04:ef:
85:a4:e9:70:b4:c8:1c:59:bc:b3:c2:c1:96:53:16:
1e:90:1a:31:74:37:ed:1c:ef:aa:42:cd:73:85:27:
54:11:f1:00:01:f3:6a:3f:22:8b:41:56:46:31:ce:
45:d1:8a:c8:70:f9:f5:1f:60:d6:b3:1e:87:f4:02:
ce:62:2d:f4:ae:d2:0f:d9:80:24:d5:fb:c6:a5:5c:
8b:a1:d0:e1:aa:55:06:9a:bf:80:03:e5:d7:1e:f5:
65:96:c6:b4:58:f6:c9:df:c9:00:92:72:ef:e3:9c:
f8:d5:91:43:69:34:2a:50:1a:6f:35:41:29:2b:5b:
d0:9b:30:ae:9a:e2:b0:99:34:ca:72:34:0a:2f:fe:
52:ed:f0:4f:c5:d6:96:50:e4:74:2c:4a:bd:84:6f:
a4:b3:ea:85:a2:b1:de:15:05:01:cb:21:ad:76:1e:
15:b4:04:b2:82:82:89:57:48:a3:a4:1b:80:c0:3b:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:36:66:EA:66:87:4E:31:8A:59:C3:6A:58:AE:00:58:29:A8:C5
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:36:a5:53:a7:cf:ff:89:16:6f:70:90:f6:17:1e:14:f5:70:
59:4d:7a:e0:6d:b6:25:c4:78:65:84:63:00:f0:26:6c:ec:8e:
a7:5f:3b:08:53:46:f3:f8:e0:b0:cc:d8:7a:61:6c:5a:9f:a5:
f5:dd:f5:94:42:cb:3f:a0:6c:c9:e4:1a:1c:de:70:b2:23:fc:
3e:b7:c8:a4:00:ca:9a:0d:b6:30:c4:f4:42:64:39:2f:9a:f6:
90:87:3c:ad:31:a7:c9:8c:81:17:00:48:29:75:ad:a4:85:79:
ee:a5:d0:f8:4d:b9:db:d6:65:f0:df:d3:86:ec:70:a9:8b:46:
6d:2f:4a:72:0f:68:36:af:94:98:f0:25:55:71:c4:e4:66:c2:
29:46:89:b0:71:c1:2d:82:65:9c:86:86:16:fd:a9:99:c0:9e:
c2:b3:c4:5e:4f:1f:ba:40:8e:ce:a6:23:b5:f6:4e:12:9e:ef:
a9:35:af:af:d1:6a:22:d9:6d:92:a1:09:06:4b:fe:b6:1f:dc:
c2:59:9c:47:54:41:f1:48:a2:ba:1f:d6:18:3e:4a:f6:a2:ea:
19:19:42:ba:95:c4:a1:67:1a:f1:b7:f0:43:48:c4:33:6c:08:
6f:d4:2a:6a:d6:7a:03:aa:53:3d:a2:be:36:bc:d3:20:b1:d5:
02:15:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:10 2025 by rpki-client