Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier: RTbRWzzAbfa5jNr+j0RTpfRS7+w7+ZUddmYEylgsdus=
Subject key identifier: D2:17:52:B3:81:8A:A4:50:68:21:0E:3A:2C:8A:9A:6C:F6:40:C5:77
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial: 0198D65F036F18CFBA093072DD98E28DFFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: eqG0Wsry9rzlXxbNnohjJjQdZrwjJ4qcuYYQAOXEcdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:03:6f:18:cf:ba:09:30:72:dd:98:e2:8d:ff:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=d21752b3818aa45068210e3a2c8a9a6cf640c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:75:2e:35:ff:64:9d:2c:43:93:49:8a:44:
f7:db:06:db:a2:54:55:cb:aa:da:3e:ff:88:6c:d1:
3d:3e:b3:5f:81:09:d2:07:f6:d0:10:34:fe:96:5e:
fa:96:54:fa:85:f9:47:ab:6a:a1:28:31:98:ff:de:
fa:79:b0:7a:4f:23:48:d6:38:7a:e1:72:d6:d7:50:
1b:9e:ae:36:bd:54:5b:11:33:d2:33:30:ed:49:fb:
f8:5d:db:5f:49:d9:dd:9b:9f:7c:7a:40:32:b8:a9:
01:3c:7e:09:21:c5:d3:38:91:b0:22:2a:f6:ca:5f:
9c:37:88:eb:a4:cc:c8:78:f0:04:e8:9c:a6:8b:a7:
ca:77:7b:91:14:78:dd:d2:6d:f7:c0:fc:ea:60:89:
0b:e7:e8:66:31:71:77:de:82:32:98:09:a7:1a:c0:
3b:b8:59:a8:5b:ce:a3:02:2c:1b:e1:23:26:ee:77:
5a:5b:00:de:6b:2e:0f:2d:7f:7b:09:f6:4b:5f:48:
45:9a:b2:ba:9c:3e:24:e5:16:c1:de:1c:6f:35:f8:
2f:88:17:04:0c:f1:a5:1f:0b:ba:5b:cc:6b:85:65:
45:0c:50:b4:c7:ad:98:90:30:e8:82:85:3a:7d:fb:
79:c3:0c:ac:93:10:80:b1:f5:b9:6a:d1:f1:92:8b:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:17:52:B3:81:8A:A4:50:68:21:0E:3A:2C:8A:9A:6C:F6:40:C5:77
X509v3 Authority Key Identifier:
keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:41:53:3e:39:f5:a8:57:32:fe:a0:78:53:bc:3c:31:a1:
b9:70:48:00:f4:c4:6b:29:2e:2c:54:15:25:84:8f:01:be:a6:
af:03:5f:69:24:b1:24:42:43:63:2f:73:e2:65:fc:10:23:da:
7b:aa:d1:8c:2d:ec:04:35:54:10:5e:bc:f5:ed:d8:a1:79:cc:
f2:03:4e:e4:aa:8d:f5:f8:32:90:de:d5:1d:35:46:2d:0a:8c:
4b:af:0e:a5:65:cd:89:35:81:f7:5c:c1:41:51:eb:a6:06:e3:
65:cf:b5:77:44:5d:fc:ac:09:a4:59:69:e9:fc:e3:a9:ad:b5:
ae:94:03:0a:0a:9c:39:e0:0d:ea:4e:ab:18:f4:72:9a:eb:b0:
10:3a:f8:0d:13:b6:ba:19:8b:5f:78:99:38:99:ef:6e:15:c5:
9f:56:61:9c:f6:b5:52:12:b4:1a:ad:21:f7:82:3c:28:e8:31:
a4:88:8a:5b:80:6b:4d:cc:4d:0d:4f:98:d4:b8:e2:85:67:c0:
ad:81:ad:79:ef:1e:d7:ee:07:98:fd:bc:80:1d:df:3d:37:fe:
9c:8c:20:a1:07:94:7d:b3:0c:63:a0:3e:ea:a0:ab:7c:2b:dd:
94:d7:62:11:fb:2b:5c:b2:7f:76:95:1e:f0:a7:82:6c:47:4e:
de:de:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:43 2025 by rpki-client