Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: +kzGKLQtRi05SivYu37rHlulO38Sj5PwLU/CIH7MAlc=
Subject key identifier: 52:95:2D:0F:0F:83:EB:14:D4:FF:C5:B6:97:24:7F:47:C5:70:FB:F2
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 0198D5156880D67B71A8B26C5BA698157188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0F77
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: mPKg7cgNKY80e+ZHcrozH/cEvuvmYrSU2cog0HX3g1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:68:80:d6:7b:71:a8:b2:6c:5b:a6:98:15:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=52952d0f0f83eb14d4ffc5b697247f47c570fbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:77:9f:48:b7:09:29:87:46:38:6d:1b:56:e1:
41:f1:8e:2f:63:d3:84:1b:50:30:53:20:6c:4e:bc:
e2:f1:61:d0:ca:ec:a0:cc:c6:a5:4e:2a:b8:33:9b:
7d:67:7a:de:5a:bc:cc:f5:8e:51:41:b1:51:e5:f8:
63:99:7d:30:21:2d:d6:fb:99:e7:9b:19:9d:3d:1b:
4a:b7:96:86:10:ce:21:0e:6b:56:e5:de:ca:5d:c0:
05:48:65:5b:89:05:5b:2e:e7:c4:70:10:ed:cc:62:
6b:68:a0:28:b4:71:5a:f8:56:52:18:c4:7a:76:34:
4d:c1:26:f1:54:a5:e4:44:c9:25:84:fa:e1:50:1e:
ec:0f:65:51:62:63:36:cc:09:1e:75:32:f1:b3:9e:
3e:85:7e:64:b5:b9:71:e4:3a:bc:1b:5e:ca:5f:c3:
b9:52:c8:b7:bd:7e:76:09:63:f7:9a:52:52:18:b6:
9b:4d:c9:bf:ac:db:97:49:63:58:63:f8:9d:21:d4:
d0:3d:bb:17:12:ca:81:d1:b3:4b:e0:7e:4f:5a:31:
fb:a7:56:0e:b3:f8:89:45:92:15:46:ae:ba:81:04:
43:f8:3e:56:49:46:0d:6d:ee:c7:47:48:3b:9a:d3:
ca:76:85:f8:cf:b8:42:45:f3:fa:5d:c7:74:f1:32:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:2D:0F:0F:83:EB:14:D4:FF:C5:B6:97:24:7F:47:C5:70:FB:F2
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:99:bf:84:11:82:23:0b:5b:65:c4:7a:42:ec:b6:cc:c7:9e:
98:63:97:6b:1a:b4:83:9a:58:55:bf:95:66:98:16:32:68:b8:
81:68:6a:76:ca:1a:d9:4b:e4:10:7a:9b:1d:05:02:31:39:27:
4c:06:87:6d:ef:7a:0f:1d:59:0a:70:fb:fa:44:60:37:00:c1:
1e:24:7d:09:af:f7:06:27:1f:5f:f0:70:2e:5f:88:5f:a0:96:
2c:ce:8f:f7:56:c3:2e:f1:6b:0d:df:87:6e:fc:8d:67:0c:01:
a7:8b:cd:47:77:ce:99:93:6b:ae:78:44:03:e0:14:e4:79:57:
a4:31:64:b1:01:7e:0f:a0:c5:76:27:70:3f:bf:b4:da:8a:e5:
46:7b:0e:57:25:8e:c8:f8:25:3b:ce:8b:ca:9b:1d:f1:60:50:
9c:49:78:96:65:10:45:1d:29:14:2d:6a:db:40:45:bf:98:0d:
e8:2b:c4:63:50:49:c3:58:83:88:dd:86:cc:39:eb:b4:13:16:
cb:1b:ce:c9:12:93:bd:44:a9:61:f8:7a:44:ba:d3:c3:11:77:
82:97:51:a6:c0:12:a9:0e:2b:d1:82:ca:64:cc:f4:06:af:57:
8d:52:c7:a1:02:b1:c4:ec:1c:07:27:87:de:a3:32:3c:d6:1d:
b9:2c:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:22 2025 by rpki-client