Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: F2AwxZP0cwIiAghIWocVWYZ/ytaEZQAMBhty1N/D1uo=
Subject key identifier: 22:18:9F:74:10:6C:D9:D7:C6:EE:F3:6C:30:2E:40:FE:B8:C6:51:AC
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 0198D6CD10C091069398E40EAD7B36867C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 12:00:19 +0000
Manifest this update: Sat 23 Aug 2025 12:00:19 +0000
Manifest next update: Sun 24 Aug 2025 12:00:19 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: 2JbQC/4Qzx4xPeD/JaNfRPyYViWJ34XrAVo16o2tcUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:10:c0:91:06:93:98:e4:0e:ad:7b:36:86:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Aug 23 12:00:19 2025 GMT
Not After : Aug 24 12:00:19 2025 GMT
Subject: CN=22189f74106cd9d7c6eef36c302e40feb8c651ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:e9:e6:1c:7f:71:39:92:1e:5e:ff:ac:ad:
a9:fc:d0:84:4a:52:ba:a7:0d:08:6f:4d:1c:c0:5a:
97:ec:a6:f4:58:59:f5:77:67:45:88:3c:79:3c:01:
f1:89:6f:95:05:12:2c:c5:04:47:f0:5a:fa:8d:3e:
f0:39:e9:97:df:f5:72:4b:d0:c6:de:e5:38:f8:b0:
c8:7e:2c:39:9f:ec:40:46:83:70:b2:00:dc:19:8b:
f2:18:c0:8b:e8:c1:01:bc:77:e1:94:9d:7e:bd:7d:
5a:b0:bd:83:31:e8:63:fb:44:1b:bd:e6:af:88:e2:
07:cb:70:1f:5c:91:cc:93:6d:c1:8f:59:8d:a0:ad:
f5:6d:6c:c4:33:3b:91:77:41:2d:1f:b9:df:af:50:
c5:73:45:36:db:8f:3d:53:ab:78:60:a4:d7:7d:3b:
30:aa:7e:4a:17:33:fd:09:80:4b:af:d0:32:e4:8f:
10:5a:5c:79:9a:d1:e4:be:dc:06:ff:1d:fd:5a:9d:
10:01:7b:60:f5:1f:d0:ee:a8:a8:27:a1:06:8a:7c:
90:23:b4:d7:75:3a:ee:ce:bb:b1:66:3b:8e:55:d4:
a6:44:bb:76:98:0a:a1:67:fe:6d:ff:b3:43:92:e4:
a1:60:5f:fb:7f:e6:f9:09:2e:02:1c:dd:9c:1d:78:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:9F:74:10:6C:D9:D7:C6:EE:F3:6C:30:2E:40:FE:B8:C6:51:AC
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6b:88:97:4e:c9:bc:f1:46:6e:11:8d:cd:b5:d9:ff:f7:bd:
c0:4e:77:39:e5:14:ea:f7:4a:2c:b6:15:bd:8c:9c:5f:5e:14:
b7:38:81:44:47:e0:2f:ab:d9:2c:5f:6e:ce:b5:c1:d0:f4:f3:
9a:ac:71:0e:53:0a:50:37:16:e6:9e:e5:87:65:a7:41:73:69:
b6:76:4c:7c:a0:9d:72:19:56:36:9a:0b:0e:73:05:25:89:ab:
aa:a8:2c:67:a7:a9:86:71:02:e9:3d:90:ab:1b:ce:fa:c0:6b:
95:52:84:c1:2f:49:73:7d:05:11:d1:d7:b5:35:be:51:86:a3:
4e:71:99:29:7d:9f:07:a4:b9:bd:a6:9d:e5:f4:a4:48:2e:08:
72:3b:7a:e8:53:20:f3:2d:7a:6c:c6:d5:50:df:f5:d3:11:be:
f9:4c:e5:53:c3:2c:c1:fd:8b:fc:2a:99:b3:5c:15:3e:d9:ae:
28:38:d7:84:5f:37:52:d9:2d:e6:d7:5c:82:1b:34:2e:ed:81:
7a:ff:29:d1:9f:06:8b:9b:75:47:63:c7:39:f7:53:32:96:8f:
41:20:15:ca:d7:52:11:f4:43:89:25:b4:98:03:80:62:16:ae:
11:bb:e7:36:76:9a:56:c6:dd:df:d5:f7:4d:85:c2:45:02:7b:
b3:2b:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:33 2025 by rpki-client