Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: Ng13xh+uMh7jwa4PfB8BHsF+SyK3AGZwQ1JQXXtR/JA=
Subject key identifier: 50:85:86:99:DC:FE:CC:98:88:84:15:59:A4:9F:42:9A:EF:C5:A9:37
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 0198D65FAD711A3D7FDCA02C275A1400C1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: GxwVLE5yyNhtwHmWypz5IKCy46jDKwxsU8ozLVcWUEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ad:71:1a:3d:7f:dc:a0:2c:27:5a:14:00:c1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=50858699dcfecc9888841559a49f429aefc5a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:4a:3e:7c:2b:76:1c:c9:48:d0:60:88:b7:
c7:2d:0c:b9:53:4d:39:d5:73:5e:7d:a5:00:16:d2:
76:ae:92:75:2d:8b:e6:c3:5f:c6:06:74:b2:70:4c:
2f:f4:96:99:d9:a7:d5:bd:0a:2e:0f:e5:58:8e:28:
5b:ef:3b:54:76:c4:d6:a2:d2:8f:45:ab:f6:dd:47:
73:8a:1e:68:f7:f3:a0:d3:fc:a1:6b:6a:e5:c6:63:
80:a8:5e:68:08:30:97:eb:a8:eb:83:43:b8:61:12:
ad:15:60:db:00:20:30:8b:8c:2d:dd:f7:af:48:5f:
b5:2d:18:eb:31:c7:0c:7d:4a:ee:50:ec:92:fc:77:
39:72:8a:88:e5:83:1c:11:d4:94:8a:5e:17:68:49:
82:8b:f8:45:2a:a7:51:71:36:4e:d2:11:35:fc:b8:
1a:be:92:73:f9:bb:d9:06:78:71:f7:64:a9:3b:19:
86:c8:80:4d:89:e0:9d:ea:c0:68:cb:5d:1a:1e:16:
7c:43:4e:7b:80:e4:45:04:1e:16:0a:80:b4:d6:21:
cd:0c:84:5e:94:09:39:69:f1:46:99:c3:b9:93:71:
10:01:a5:2b:dc:73:6d:7e:b2:7e:5f:1d:71:70:32:
c5:fa:59:b3:06:fb:73:42:5d:ec:f4:bd:0b:38:28:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:86:99:DC:FE:CC:98:88:84:15:59:A4:9F:42:9A:EF:C5:A9:37
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:43:6d:c1:b8:c0:0a:dc:39:bf:e2:66:db:97:36:3a:13:
82:3f:9b:b9:11:c2:cc:bf:30:26:2c:40:21:1c:e3:6e:ea:15:
61:4f:f7:9b:b1:74:43:48:53:1a:24:47:3e:12:ef:af:a7:41:
de:83:51:12:bd:5b:29:70:7c:e5:8a:42:f7:16:4d:fd:75:8b:
54:51:ee:65:39:42:96:f0:f3:fc:82:9d:d7:4f:da:4e:3c:ac:
99:fa:8a:98:2f:3c:b4:e3:bc:24:82:fc:63:60:de:f2:06:76:
78:d2:53:97:a9:4c:80:85:af:0e:28:e2:42:f5:d9:ef:99:e4:
c8:41:b3:0c:00:75:0b:30:cc:5c:2d:77:d8:db:51:9c:e5:66:
e9:9d:6d:1c:ef:0d:9e:b1:73:14:75:07:cd:7d:0d:6e:b9:ae:
94:54:d7:9f:46:b0:91:a8:61:d0:a6:15:c2:f2:4f:a5:40:04:
f1:ae:47:bb:62:8e:38:14:a6:4b:bd:d4:4c:96:3a:80:a8:9b:
e1:c6:f7:25:2b:22:93:79:f9:07:c1:b0:a3:42:75:ca:fb:31:
4a:b6:fb:41:49:c5:7f:54:e7:3c:e5:5d:ac:37:ff:0d:58:cf:
68:0c:a6:be:6a:3a:e6:51:9d:fa:dd:c9:78:e1:75:28:5f:23:
55:ff:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:02 2025 by rpki-client