Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: QcPomfx+EGKfgUXxXuQAJQFLlP9/OrCeH0vtk98l6+g=
Subject key identifier: E1:BB:3F:BE:32:1E:89:7A:B0:B1:C9:9A:68:3F:EB:32:EF:39:B5:56
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 01974AE892C19F2B5F03E4D0CD9226000399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 15:00:45 +0000
Manifest this update: Sat 07 Jun 2025 15:00:45 +0000
Manifest next update: Sun 08 Jun 2025 15:00:45 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: 61fr58jfm0A9kIah0dI5UYZkByd2NrUAxXcGYdczTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:92:c1:9f:2b:5f:03:e4:d0:cd:92:26:00:03:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Jun 7 15:00:45 2025 GMT
Not After : Jun 8 15:00:45 2025 GMT
Subject: CN=e1bb3fbe321e897ab0b1c99a683feb32ef39b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9f:db:22:bc:d5:4e:c5:d0:77:f1:4c:61:74:
e5:2a:6b:8c:83:d7:92:42:3e:b3:e4:71:4c:93:2d:
49:42:ce:27:92:b4:8f:9d:90:3e:2c:a0:dd:62:f9:
fd:24:f0:01:79:98:77:6f:05:17:38:b5:f9:d0:5c:
6e:42:78:a2:df:fb:7a:eb:a9:e4:40:bd:65:f7:5f:
65:31:3c:dc:bb:7a:5d:95:c2:de:97:4c:6c:3e:e4:
23:5d:32:2c:ec:60:22:e8:eb:df:99:85:00:01:88:
73:20:24:f2:92:c2:2d:ea:e9:16:16:39:1f:e3:3f:
59:60:da:70:d1:bf:e6:cd:a6:63:57:99:01:7b:fc:
26:b5:27:d0:6e:0e:e0:d4:8f:ea:d3:41:22:f2:a3:
6e:48:c6:9c:6f:d6:59:0e:9f:6c:33:41:57:cc:b5:
35:4c:ce:dc:8a:2d:70:8b:d0:1e:bd:69:a6:da:9a:
9c:f8:93:e4:fd:1f:a3:38:97:d6:4b:2d:2a:a6:0d:
38:18:63:aa:11:bf:8b:ea:2e:76:c3:f0:ae:1f:79:
5e:c7:7a:18:0a:ff:a0:9c:f1:df:7a:7d:b6:de:8f:
61:ca:15:33:90:0a:e8:c1:86:a4:07:24:ad:26:99:
26:4a:cc:b6:76:60:9b:c3:8a:c9:e7:12:26:c4:ef:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:3F:BE:32:1E:89:7A:B0:B1:C9:9A:68:3F:EB:32:EF:39:B5:56
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:85:6f:d4:e5:44:a2:b2:92:c4:86:9a:9f:dc:a9:27:ee:
45:1e:6e:57:41:f0:13:dc:98:f5:32:37:08:de:19:97:7c:7f:
23:19:b8:8d:3b:91:0f:5c:63:e0:5b:52:9c:50:b0:25:8b:32:
9a:57:ff:1b:9c:67:58:8c:f9:71:b5:ae:ee:46:e7:f8:bc:cc:
b6:62:df:41:48:bf:88:75:ad:a1:94:05:34:2d:c8:0b:60:59:
51:d2:ec:4d:13:c3:0b:91:6d:fa:db:e4:be:2e:63:0d:6c:96:
77:7b:da:e4:85:5c:1d:3e:45:fa:71:cf:fc:2f:6d:00:ea:15:
05:57:3a:ac:66:2a:00:94:4d:e6:da:89:2f:b8:51:40:50:b6:
85:ed:a9:c1:99:33:89:30:24:64:10:a6:b8:56:55:8b:9a:b8:
02:09:51:24:df:2f:34:62:ea:a7:b6:91:5f:db:cb:70:f0:45:
88:e8:e7:ef:d1:21:41:96:49:7d:d0:42:d3:78:d5:19:b6:9d:
55:45:0c:15:d6:75:66:d0:1b:e2:c2:05:78:00:a2:c7:e2:8f:
88:0b:e2:ef:1f:85:82:62:0a:84:d3:7f:38:31:15:75:8e:81:
6e:b9:f1:8a:bb:08:cd:6e:3a:05:3f:2b:f6:32:5b:92:58:e8:
e0:5d:90:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6JLBnytfA+TQzZImAAOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmM1M2FiNjEyZGQ4M2NkMTE2YmIxM2M3NTBkN2UyYjBk
Njg5MDQwHhcNMjUwNjA3MTUwMDQ1WhcNMjUwNjA4MTUwMDQ1WjAzMTEwLwYDVQQD
EyhlMWJiM2ZiZTMyMWU4OTdhYjBiMWM5OWE2ODNmZWIzMmVmMzliNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J/bIrzVTsXQd/FMYXTlKmuMg9eS
Qj6z5HFMky1JQs4nkrSPnZA+LKDdYvn9JPABeZh3bwUXOLX50FxuQnii3/t666nk
QL1l919lMTzcu3pdlcLel0xsPuQjXTIs7GAi6OvfmYUAAYhzICTyksIt6ukWFjkf
4z9ZYNpw0b/mzaZjV5kBe/wmtSfQbg7g1I/q00Ei8qNuSMacb9ZZDp9sM0FXzLU1
TM7cii1wi9AevWmm2pqc+JPk/R+jOJfWSy0qpg04GGOqEb+L6i52w/CuH3lex3oY
Cv+gnPHfen223o9hyhUzkArowYakByStJpkmSsy2dmCbw4rJ5xImxO9OXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG7P74yHol6sLHJmmg/6zLvObVWMB8GA1UdIwQY
MBaAFJ4sU6thLdg80Ra7E8dQ1+Kw1okEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2Yt
OWE4MDI5NTlhMjQ4LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2YtOWE4MDI5NTlhMjQ4
LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+GFb9Tl
RKKyksSGmp/cqSfuRR5uV0HwE9yY9TI3CN4Zl3x/Ixm4jTuRD1xj4FtSnFCwJYsy
mlf/G5xnWIz5cbWu7kbn+LzMtmLfQUi/iHWtoZQFNC3IC2BZUdLsTRPDC5Ft+tvk
vi5jDWyWd3va5IVcHT5F+nHP/C9tAOoVBVc6rGYqAJRN5tqJL7hRQFC2he2pwZkz
iTAkZBCmuFZVi5q4AglRJN8vNGLqp7aRX9vLcPBFiOjn79EhQZZJfdBC03jVGbad
VUUMFdZ1ZtAb4sIFeACix+KPiAvi7x+FgmIKhNN/ODEVdY6BbrnxirsIzW46BT8r
9jJbkljo4F2QlA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:48:49 2025 by rpki-client