Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: xznsUDZRkE2ybRd2kLv25HvbXR9HAbJBHmJk+rYFS5E=
Subject key identifier: A8:1B:B6:B4:49:CB:F2:C0:4E:3C:8F:9E:FB:F2:AC:93:23:4F:F7:47
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 0196BF6F36BD6E32C0AA869860E9D1C06EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:00:58 +0000
Manifest this update: Sun 11 May 2025 13:00:58 +0000
Manifest next update: Mon 12 May 2025 13:00:58 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: l2WtWnThSf5jW6FWywaKDpZDPFiuGW/fg2KaNWEUKns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:36:bd:6e:32:c0:aa:86:98:60:e9:d1:c0:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: May 11 13:00:58 2025 GMT
Not After : May 12 13:00:58 2025 GMT
Subject: CN=a81bb6b449cbf2c04e3c8f9efbf2ac93234ff747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:3c:98:fe:2e:08:25:d8:cd:05:39:a7:83:
da:2e:e5:84:c7:94:7d:01:db:44:cf:e4:3c:76:69:
b5:71:06:25:b6:31:10:2d:bb:9b:9c:79:e2:60:bc:
94:53:1c:65:76:14:09:3e:e9:e5:39:8e:8c:32:15:
ac:66:26:69:75:bd:b7:1f:f3:c8:fc:5f:e8:e7:c9:
60:d7:de:1f:47:20:54:e6:80:65:e3:e3:4f:cc:72:
46:e5:1b:2e:f6:bc:bd:d5:c8:4b:64:47:c0:e0:76:
90:10:5a:44:23:92:2f:14:a6:08:1d:c0:6f:11:c6:
23:c1:e2:27:1b:09:24:06:28:8e:29:ac:c7:6b:61:
80:8b:ba:a2:e5:35:3a:4b:3b:15:f5:33:f1:0b:0b:
e0:6d:5b:8a:7a:45:26:49:7b:db:c4:65:4c:2c:30:
38:3f:6d:8c:4e:7a:b7:24:0a:14:63:58:d5:48:d5:
e3:89:cb:5b:8d:9a:bb:c3:0e:08:06:9b:5b:e1:82:
36:71:ab:8c:dc:d4:6a:a3:1c:f6:96:94:d6:ff:fd:
23:81:b5:81:45:50:4e:8f:d8:be:78:01:41:fa:10:
5f:92:b0:fb:6d:91:d2:33:cb:8d:eb:d6:f0:10:95:
f6:8a:70:f8:39:8b:3a:cd:6d:b6:0c:82:4f:6f:5a:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:B6:B4:49:CB:F2:C0:4E:3C:8F:9E:FB:F2:AC:93:23:4F:F7:47
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:95:6a:96:c8:67:b2:fe:c4:33:08:33:ec:0e:e2:5c:1a:6e:
0a:23:b0:fa:7d:80:77:8b:4a:5b:08:52:cf:2a:70:cb:9d:c1:
04:85:a9:83:26:00:8f:e4:ef:71:88:79:8a:77:5e:03:6b:6b:
82:c4:6d:fe:5f:0d:73:1c:b5:68:87:fe:c2:fe:74:0a:c5:66:
27:ca:f0:93:6b:e8:d2:5e:e6:f9:a8:ec:78:94:14:80:3f:64:
d6:69:c8:7f:49:bf:05:76:a6:8a:72:69:56:44:8c:5c:bb:62:
05:4d:5b:2f:11:da:62:75:80:d9:4c:72:27:6d:6e:2c:58:77:
41:68:8d:fe:f1:cd:41:2c:81:2e:e4:92:eb:79:d3:62:14:64:
18:3f:12:54:53:94:3b:14:90:6c:07:72:da:a9:74:dd:04:07:
58:3b:b0:ab:a0:1c:c7:69:16:5f:91:58:4e:6b:5a:b9:e0:34:
37:d8:ae:00:dd:6e:5b:d8:f5:8c:40:97:2c:c1:30:2a:a4:54:
b4:f1:a6:c8:21:ea:10:88:d4:d4:57:2e:5f:20:de:8a:10:09:
a1:de:fb:93:40:51:75:80:57:85:4e:53:77:7a:63:ce:d7:3a:
82:e7:69:da:27:fe:f8:c1:d8:e2:dd:84:94:44:c0:7d:44:a5:
fe:86:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:41 2025 by rpki-client