Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: LKgo7MBz15IugGJ8CXCfODdmKnK/AQnZvuIU6NGHcUY=
Subject key identifier: 7A:4D:A6:B6:89:05:FE:9F:64:CD:8C:FE:5D:40:EF:F2:26:35:6F:7C
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 0199FE468F317DBF452EB7FE36E9737AE46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: hsSh53YkaehcK8SU9P0Dzsv7Jwr1Z2c/AoPdk5Dj2BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8f:31:7d:bf:45:2e:b7:fe:36:e9:73:7a:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=7a4da6b68905fe9f64cd8cfe5d40eff226356f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:e0:92:a9:fa:f5:06:11:4e:50:38:5c:f1:
6f:fe:bf:73:cf:8f:ba:50:96:b8:96:17:fa:6d:d4:
85:5d:ae:31:b4:bf:4e:35:75:a0:9a:69:e9:74:f5:
11:11:b0:59:91:41:9e:e5:c0:e2:56:71:e9:a1:1c:
4b:20:b5:c5:5f:eb:22:15:65:a0:82:fc:4b:63:b1:
99:8d:4f:73:b6:a9:42:41:7d:fc:19:ef:bd:25:8c:
5b:0f:2c:90:70:96:20:de:87:05:de:04:e4:28:9b:
73:de:f5:f8:78:7d:0c:b6:3a:17:96:81:97:a1:80:
3f:7a:22:d9:68:cb:f8:df:70:04:5f:7a:67:ea:28:
fb:c7:73:14:e5:57:4f:95:aa:55:59:44:0d:0f:f3:
e5:cb:ce:fa:c5:2c:02:fb:45:d5:8e:bf:cc:70:54:
d9:f1:21:cd:44:e5:ec:53:3d:13:23:93:15:0b:b4:
4c:6f:4c:d4:a3:52:70:cd:5d:a3:b1:9d:f1:51:f3:
18:12:3f:9e:86:b0:11:82:9d:a4:ed:2f:d4:b5:10:
83:ae:be:6f:9d:33:70:12:22:d9:78:ac:fc:15:20:
3f:99:be:96:bd:4e:45:f6:f7:e6:36:fc:0d:3c:2f:
fd:9c:df:8d:8b:ab:f5:95:8d:e7:39:20:e2:cf:e7:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:A6:B6:89:05:FE:9F:64:CD:8C:FE:5D:40:EF:F2:26:35:6F:7C
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6d:a7:94:be:35:04:c7:05:fe:b1:a3:1d:71:0d:07:6e:da:
cb:47:fc:07:70:0d:47:f7:08:cd:ec:be:94:85:e5:49:bd:7a:
b3:2b:a7:ff:50:06:fd:17:1d:ef:00:b5:16:db:a3:3f:93:2f:
22:36:7c:34:f1:9a:83:f9:9f:37:8d:24:93:eb:34:92:75:e5:
62:71:57:1e:ea:b7:1b:87:69:6c:e7:47:44:a6:94:0c:e4:d9:
02:62:c3:c9:3d:f9:0b:7c:f5:58:e4:d9:c3:01:14:aa:2b:20:
e3:3d:8b:fe:eb:ae:9d:9d:5e:c3:81:5b:28:03:3a:00:6d:15:
81:72:82:df:42:ab:4a:ff:a1:61:a0:00:27:36:b0:ba:37:1d:
3a:9a:80:f5:66:83:e8:7f:77:04:fb:95:1f:a2:df:27:10:a2:
05:ff:f8:95:62:f2:b3:ad:b8:78:07:70:99:73:ea:f2:b5:f3:
1f:79:64:5e:8f:30:88:6b:91:2b:4a:cb:34:23:57:72:34:9a:
dc:a7:b2:c6:2c:19:e5:46:07:08:e9:14:18:56:ae:7f:35:19:
1b:bc:bf:f0:10:35:7e:8d:23:fb:ed:1c:04:8d:29:f5:23:14:
0a:26:35:f5:4d:f8:46:80:d0:72:34:14:d1:a4:46:71:06:ab:
ce:2d:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:18 2025 by rpki-client