Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: BT5gm36eqh6F2Y6VT6TTul7Al6HWDlWH+WWHmHEgR/I=
Subject key identifier: 6F:B2:A8:10:8E:B8:4F:A5:97:DB:9C:95:A2:88:ED:85:80:DD:3D:7C
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 0197BB21D8C0F1BF297CFB567435270D7158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0EE5
Signing time: Sun 29 Jun 2025 10:00:46 +0000
Manifest this update: Sun 29 Jun 2025 10:00:46 +0000
Manifest next update: Mon 30 Jun 2025 10:00:46 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: rmEpUPsBKHHUdGMSQPwbSgEZ82Xakigsr2lg/WWgobw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:d8:c0:f1:bf:29:7c:fb:56:74:35:27:0d:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Jun 29 10:00:46 2025 GMT
Not After : Jun 30 10:00:46 2025 GMT
Subject: CN=6fb2a8108eb84fa597db9c95a288ed8580dd3d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:94:90:05:0e:62:09:08:ff:58:05:36:b3:
55:79:05:81:61:7a:90:17:b5:ce:3d:23:f6:65:69:
31:f4:99:4c:fd:e4:45:20:be:ab:e3:73:df:0e:f8:
1d:9f:5b:f4:e4:5d:b1:61:09:b6:ba:45:44:1f:d5:
be:0e:df:5a:a0:87:31:68:81:7e:b7:da:d4:2d:2c:
7b:74:2f:6f:07:19:0a:ea:87:05:86:5b:cb:a5:0d:
fa:8c:bd:d8:c0:bd:a1:39:dc:9f:e5:cf:89:3d:1f:
1d:85:dd:75:34:10:82:9b:d6:92:3d:fe:ac:01:76:
e0:de:58:cd:96:ab:36:5f:3f:5f:48:30:9b:00:a3:
29:ca:cf:39:f9:62:07:f9:88:40:ac:b8:66:ca:d2:
f1:81:0a:36:56:25:d6:db:14:27:25:04:09:a1:a2:
f6:79:44:2e:ff:37:74:d6:db:54:ef:d8:3b:20:42:
af:10:a2:9d:65:15:f4:f3:bb:96:5f:d0:52:0c:06:
90:5f:ad:7d:60:ad:3d:ae:6c:b8:ee:e9:c2:37:07:
3f:44:2a:ca:39:5c:9e:7c:5c:d6:87:1d:eb:7c:b4:
8d:61:3f:e1:b8:2a:eb:b4:39:b7:dc:ac:6d:0f:f4:
e4:12:e9:82:d7:66:a0:a3:92:27:7c:e6:d8:a0:89:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:A8:10:8E:B8:4F:A5:97:DB:9C:95:A2:88:ED:85:80:DD:3D:7C
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f1:5b:5d:45:1c:84:4d:09:0c:b4:bc:1a:e8:64:3e:0a:77:
6a:85:c5:cb:df:7c:69:03:86:9a:e2:94:17:76:55:45:d0:77:
e5:ba:55:29:ae:48:14:a8:b5:1b:0e:b4:ea:40:96:a3:4d:33:
c6:25:16:2b:03:15:88:0c:b7:c3:72:ff:3f:34:cd:2d:a2:29:
39:05:ce:6e:f8:84:39:a6:75:c1:7b:42:32:24:9d:cd:41:76:
8c:6d:1f:a7:30:f7:30:9d:eb:06:e5:3d:79:35:78:52:1d:9b:
a6:c0:d3:83:e1:1d:90:5a:40:0b:24:12:7e:0b:d5:35:4d:d5:
40:69:b8:f3:93:6c:0f:37:ba:fb:0b:4f:cd:c4:0d:6e:6c:e1:
f9:d9:2a:2e:e2:ab:d1:60:80:c3:01:97:10:50:bb:30:b6:5a:
eb:d8:65:37:2a:e5:34:46:94:d8:41:09:f7:82:d7:90:4c:a5:
2f:d2:26:31:54:14:97:77:dd:28:34:c1:ab:58:93:4d:dc:69:
77:22:b4:ab:a4:82:9f:0d:ab:81:04:c9:31:15:95:2e:08:8c:
24:b3:a4:5f:b1:7c:dd:c8:2a:3f:e5:0e:39:67:a2:76:c5:60:
93:1b:b4:eb:72:b4:ec:00:01:20:be:47:72:44:8c:f9:85:de:
4f:44:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:40 2025 by rpki-client