Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier: s+TCz5HtDXiYc/nG4VZ1gOmSDLCOJhc57uRnfAL8PSM=
Subject key identifier: A0:17:F9:7B:38:3D:7D:8D:12:C8:D6:7D:A1:3F:98:0E:F6:E8:D0:A2
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial: 0197B6A142E7F19D8AA400B81B94A1E2ECFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: 9KGldbcNfonCwCeFzkYZPLmo2k29z5LkdTQHzIOO2cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:42:e7:f1:9d:8a:a4:00:b8:1b:94:a1:e2:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=a017f97b383d7d8d12c8d67da13f980ef6e8d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:3e:b2:c9:73:42:ff:9e:3f:6f:eb:2f:76:
54:a2:d2:b5:7e:f5:37:94:56:73:b0:9f:91:78:0e:
16:09:60:32:9b:28:17:b6:19:e1:ad:5e:9b:70:8a:
f4:c9:0e:67:f5:1c:fb:4c:18:1a:c1:14:24:22:74:
b4:1f:79:4e:f9:ff:b6:99:f8:2e:5a:c9:21:05:00:
10:55:e4:a5:bc:4c:c6:ec:0d:85:38:50:09:70:97:
36:e9:53:de:4d:e1:71:37:89:61:23:72:6a:b5:2d:
03:0e:c2:77:42:2b:7d:61:d3:17:17:e9:2c:63:d4:
1f:f4:a3:2d:cc:34:3e:7c:8c:fb:8b:48:22:b3:d1:
2e:ec:d7:85:7b:59:6d:4e:a1:47:79:8c:2a:f0:13:
d1:26:ac:37:18:a1:b1:1f:bc:3b:cf:48:2c:d8:23:
c8:5a:9f:a8:5f:2f:cf:87:10:3d:94:ae:05:a2:13:
f2:40:1e:25:72:e3:a7:09:32:13:92:2d:8a:84:de:
c8:d6:bb:95:aa:3f:55:9f:66:f9:e0:b8:d5:a5:dd:
98:8b:9b:58:82:1f:96:cb:eb:63:d4:8b:03:72:39:
1e:63:be:c4:1d:41:b1:04:85:77:52:0d:ac:84:b7:
b6:19:e9:df:6e:49:29:9a:f2:dd:59:ec:59:8e:4f:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:17:F9:7B:38:3D:7D:8D:12:C8:D6:7D:A1:3F:98:0E:F6:E8:D0:A2
X509v3 Authority Key Identifier:
keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d7:11:66:b9:4e:f8:10:30:66:e0:0a:b5:3c:ea:23:86:61:
b6:9d:e5:b2:38:18:72:d8:30:1e:3a:87:6c:ef:91:d9:f3:41:
f9:bd:03:d2:c9:e0:51:72:40:3c:7a:9d:ad:07:43:6c:86:97:
a1:e2:22:31:f3:aa:25:5f:6e:ec:45:22:13:72:95:33:28:51:
18:11:8c:af:2d:26:2d:92:6b:2e:20:13:45:60:d7:49:e1:6a:
57:c4:0d:4d:e2:7b:24:62:af:71:a9:65:78:66:52:38:a7:08:
1c:22:fe:b9:38:ea:36:33:4c:bf:0d:a8:c3:4c:8b:72:0e:fb:
de:56:20:3b:6f:fc:18:29:01:ae:41:58:47:d3:da:73:97:53:
02:bd:6f:1d:df:aa:19:23:ad:d6:e9:cf:82:37:11:57:26:e6:
0f:31:b6:62:81:f6:a1:f1:1b:5c:4b:71:53:7f:4e:f2:28:14:
fa:35:40:e8:3c:8e:eb:bc:73:88:ea:24:9d:a0:b1:22:95:05:
61:0f:fc:22:f5:2c:04:72:4d:b0:e5:74:dd:1f:5c:1b:f7:a9:
2b:73:d3:52:a3:09:0a:80:ff:91:02:10:94:24:04:18:77:b8:
0b:57:59:f2:74:92:19:8b:81:14:38:07:5f:8d:35:7a:18:72:
b3:f0:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:25 2025 by rpki-client