Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: NsKIuh9mpLnARJAivr61iwPfGlmuXwDOFp0YoZ/hFmQ=
Subject key identifier: 8B:BE:68:63:A8:68:0A:79:A6:3F:30:D9:6A:57:8D:49:33:3B:E5:7F
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 01991688F299552063CA50C53CCB34AE5056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1666
Signing time: Thu 04 Sep 2025 21:01:37 +0000
Manifest this update: Thu 04 Sep 2025 21:01:37 +0000
Manifest next update: Fri 05 Sep 2025 21:01:37 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: WIXyf1D3Lk94nvIkFRiBa5yTxgO0gKjO/8JJnJlJiT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:f2:99:55:20:63:ca:50:c5:3c:cb:34:ae:50:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Sep 4 21:01:37 2025 GMT
Not After : Sep 5 21:01:37 2025 GMT
Subject: CN=8bbe6863a8680a79a63f30d96a578d49333be57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:be:a4:57:34:a2:7f:9d:c8:9f:65:26:d4:
de:e6:e1:a3:5a:2d:54:34:16:07:99:d1:2d:f7:3e:
3c:40:77:aa:59:82:ba:6c:0d:91:5a:dd:67:96:1b:
57:0c:f3:70:91:70:62:f7:31:6d:e3:bc:f7:c0:60:
04:a3:82:60:6c:ef:51:45:ca:79:b5:3b:cf:60:12:
c6:6b:53:6d:f3:9e:fa:c6:50:95:b2:22:8c:74:1a:
6f:6d:96:9f:76:8a:d2:44:c8:a4:03:f3:6a:a0:c0:
fd:2a:5e:6e:96:74:0d:4d:1a:b7:a6:05:da:b5:d7:
ba:7a:07:33:d9:3b:04:9e:a8:de:b3:12:9e:0e:cb:
a8:e6:6a:44:c3:c4:40:7f:8d:28:35:c5:ed:13:2f:
25:6b:f6:a0:ea:97:39:60:85:bb:2d:16:bb:6d:81:
99:fb:78:f7:61:05:4d:2a:90:a1:ab:ec:06:a6:39:
9d:d6:fb:9c:44:21:07:d1:7a:b6:66:32:1a:82:b7:
89:90:bc:4f:ab:98:d7:bb:68:7f:c5:de:ad:a8:0e:
47:b5:2b:a3:54:9a:4d:4f:b7:fb:55:c2:cd:93:33:
2a:76:62:08:54:6c:b0:0b:4d:36:07:23:30:90:e6:
9c:b3:0a:e7:02:84:2a:0b:5e:49:8f:6c:6c:59:f9:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:68:63:A8:68:0A:79:A6:3F:30:D9:6A:57:8D:49:33:3B:E5:7F
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:36:30:2b:9f:a0:0f:74:66:92:a8:c9:0d:f7:83:c0:70:
08:ad:54:ff:62:0f:83:2e:88:ef:bc:c8:8d:f5:9e:5d:af:5a:
a6:4a:25:99:b5:46:d7:fa:ff:d2:6a:a0:e8:7b:bb:47:2c:54:
e6:a0:5b:d1:d3:48:f4:3c:a0:0f:30:9e:6a:e2:4c:21:d2:7f:
de:27:c6:9e:e6:a3:47:29:24:f5:ef:0d:26:9a:57:90:a7:ca:
71:66:13:82:f6:09:6a:7e:e3:d4:3a:ed:3f:24:95:43:40:11:
a4:28:79:f3:c6:34:fb:71:8a:9e:bf:7b:be:06:98:92:45:b1:
28:73:99:9a:20:c4:6d:e4:1d:fd:b1:47:64:46:2c:0e:98:e1:
71:f6:ff:89:89:89:ed:44:b2:3d:e0:2e:3b:95:8b:fb:e8:b1:
07:6f:a3:2a:22:4d:31:ae:ba:b7:f5:86:06:86:9e:5a:1a:0a:
ce:23:bb:5e:20:f4:19:da:d0:0d:ad:d3:da:87:5d:cc:df:59:
ad:dd:04:72:0c:d3:40:97:b6:94:60:c7:10:97:eb:4f:b0:29:
eb:dd:bd:3f:46:1a:e5:ef:71:44:03:74:b2:73:6d:ce:67:69:
90:a9:a0:bc:28:7b:19:ba:88:19:a8:26:42:55:04:76:79:69:
ee:a9:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client