Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: UtQ6g6P2C0IW3J4F5K6APA+RITNTsTtGUqt7wyEnI4o=
Subject key identifier: E1:6E:51:9B:DD:4B:61:13:C1:51:B8:B6:02:ED:2E:88:45:3B:DD:DE
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 0196D7775A2B9FE9A59CB94BC0787A757D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 153F
Signing time: Fri 16 May 2025 05:00:45 +0000
Manifest this update: Fri 16 May 2025 05:00:45 +0000
Manifest next update: Sat 17 May 2025 05:00:45 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: T3b2gCeovZsEA/CrlkmKEeVvSNYlL2imTSx5nI08iPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:77:5a:2b:9f:e9:a5:9c:b9:4b:c0:78:7a:75:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: May 16 05:00:45 2025 GMT
Not After : May 17 05:00:45 2025 GMT
Subject: CN=e16e519bdd4b6113c151b8b602ed2e88453bddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:55:3f:f4:ad:62:69:9e:ef:07:fd:23:6a:
e5:1a:d6:69:2b:ed:91:30:fd:b5:dd:64:47:43:4b:
aa:f6:f8:ed:91:e6:8e:90:80:7b:54:1b:7d:c3:ec:
f4:6b:c3:fa:87:c3:f5:12:13:3c:a0:8c:be:03:13:
e6:01:a9:b5:6a:90:fb:fe:32:b4:46:7d:14:44:6c:
dc:b8:2b:02:56:b4:63:e6:5e:1d:c4:f0:2b:7c:0e:
7e:bb:1e:ce:22:ff:2a:8e:a4:6c:ff:bc:00:39:3e:
e3:3a:79:f9:0c:b0:bb:1f:9e:d5:b3:63:fd:12:36:
28:d8:34:9b:2a:72:2b:3a:b1:7a:c0:31:0a:62:4e:
ff:21:6b:1d:40:ff:e7:61:2e:d4:c4:e5:6b:a9:e6:
f8:1f:bd:6b:c3:e3:2b:0a:4c:f8:0c:76:4a:54:fc:
9d:0e:0a:21:40:f3:9d:6e:2a:f4:99:23:17:ee:33:
28:d1:c6:87:41:4d:bf:b0:23:5e:46:2f:4b:46:b3:
f8:49:63:ed:d5:e1:56:10:12:a7:db:de:ff:c4:fa:
b0:da:f2:10:44:79:1c:54:db:76:71:f9:22:5c:c7:
b5:5d:52:d9:e0:07:05:11:9e:ff:8c:8d:c4:89:44:
38:7a:a4:92:7f:a5:de:a9:a5:76:a2:58:3f:08:9a:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:51:9B:DD:4B:61:13:C1:51:B8:B6:02:ED:2E:88:45:3B:DD:DE
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b4:0d:85:61:28:bc:78:70:46:20:27:16:28:53:0e:34:37:
61:98:af:c9:19:50:48:96:3f:0b:81:29:84:a4:0f:9f:dc:83:
45:f4:d7:83:de:48:fe:2b:54:4f:f8:14:d7:c7:0c:a6:23:8f:
e4:56:42:cc:98:60:8d:ce:70:2b:dd:fe:71:8d:38:62:c7:4e:
32:8b:de:6a:5f:54:b6:ca:72:32:44:4b:e7:fb:8c:c9:30:af:
70:38:0d:d5:b4:c8:a3:04:5a:b4:ca:ff:5d:04:1a:e8:72:20:
da:d2:c4:e9:72:61:e4:52:10:db:d3:a2:c3:1b:6b:06:e6:1d:
f8:ec:b5:04:23:3a:1a:26:de:23:5c:3c:ec:71:2b:91:2d:4c:
f3:3a:1a:5e:fb:a3:99:21:4e:41:23:54:65:24:cd:85:f3:2a:
e5:0f:3a:4b:e3:2c:49:0a:89:53:1e:6c:23:44:ad:bf:cc:a7:
38:65:7a:1c:f3:d2:50:cd:25:e5:fc:16:f2:dd:02:3b:0f:4d:
0b:a4:64:7d:9a:f6:79:4a:e2:80:58:5a:60:db:7b:83:d5:99:
8e:b6:e4:5e:51:06:1e:99:4c:3d:45:5e:f3:4f:ef:89:a1:49:
c1:aa:33:db:d1:84:d2:e4:d6:8d:24:a2:0d:25:9d:7d:49:74:
47:4d:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:00:07 2025 by rpki-client