Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: QtIOkJFdi/Y7iFOETXUFBcQ0lv9gvij2uFC+D+FoGyc=
Subject key identifier: DC:6C:91:1A:86:94:91:86:28:00:4B:FA:E4:13:C9:31:31:0C:1D:B4
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 0197B70E82934EDE41D0FFCEE901648DFAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: iOc4ecEekB2u/p6V9Zqtfypi/lzovhGdb7Cus51A3bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:82:93:4e:de:41:d0:ff:ce:e9:01:64:8d:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=dc6c911a8694918628004bfae413c931310c1db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:e0:9b:a0:83:eb:98:98:c8:b2:92:e0:91:
f5:17:80:50:2d:f0:ed:c0:b4:83:4e:99:51:20:71:
e6:c9:b3:72:5c:68:5b:e7:41:94:68:e5:ef:b6:6d:
5b:de:e0:59:13:f4:b4:61:e2:26:7c:0a:21:0a:0d:
8f:42:3b:5f:2f:74:1a:b4:b1:f3:43:76:fa:14:4a:
6e:f0:4c:29:47:34:c9:ec:fc:a8:9a:55:68:30:8a:
bc:e8:77:fd:0f:16:94:5c:d9:05:25:22:43:d9:78:
6e:70:9a:8e:11:5c:d2:15:22:30:60:5f:16:f0:b7:
7a:e5:cb:b9:dc:4a:68:0a:2c:ec:a3:28:4e:79:0a:
0c:4e:35:56:d4:07:d8:18:6b:87:ee:06:02:c0:f0:
fc:57:f9:94:d0:df:42:89:06:74:c4:fe:1d:c3:6d:
3a:71:4c:07:61:3f:af:01:92:cc:d7:48:ee:c2:6f:
c6:2d:fd:ea:71:98:32:59:b3:ee:8f:16:05:18:9d:
8a:60:2e:4a:50:2d:ca:24:7a:3e:44:e4:91:70:66:
db:f7:3f:3c:2f:71:e5:7d:7f:c2:47:b6:92:8e:68:
a7:84:4c:f2:5f:56:e9:64:a7:4d:47:bb:e4:10:2b:
77:ee:bf:89:56:4e:22:e2:c6:f7:c5:5d:9f:d7:9b:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:91:1A:86:94:91:86:28:00:4B:FA:E4:13:C9:31:31:0C:1D:B4
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0c:7e:86:e7:a2:84:c2:af:3a:06:43:bb:f7:ff:e8:90:04:
56:9b:12:a0:90:08:54:8a:fc:17:49:1c:16:2d:52:26:e6:30:
e7:d7:19:2c:28:9a:1b:57:0b:70:c9:39:0a:8f:c5:1e:cb:86:
2a:d9:d0:d6:fe:05:10:eb:8a:54:48:f3:1e:cd:bd:1f:45:98:
f0:20:e4:88:77:13:78:7d:70:8f:74:1a:a4:b1:d5:38:2e:58:
74:80:f7:e9:c9:6f:6f:62:ac:4a:7c:e5:6e:14:66:a3:76:cc:
d4:7c:1c:12:45:48:cc:c0:21:01:40:85:40:6c:e4:d3:4e:b4:
03:67:ba:12:a3:6c:20:74:9b:a1:3f:dc:77:ae:46:84:83:01:
db:a6:8c:d3:ef:ab:69:5c:b3:98:07:1e:02:8f:f5:7b:2f:52:
34:ac:b1:d8:13:97:36:24:78:86:66:b7:2b:c2:6b:23:1d:eb:
c2:3b:f0:e2:1f:95:58:b5:87:77:8a:b1:8b:48:8e:45:db:0c:
17:41:17:2f:75:36:41:52:88:8e:ff:51:6f:2a:4e:8b:3d:8e:
f4:d2:96:66:90:eb:ef:41:3c:9b:a6:53:ab:f7:3a:d2:1a:b6:
c2:98:c4:a4:3f:e4:8c:35:15:41:9b:ca:c9:b6:5a:d4:fa:dc:
20:8c:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:17 2025 by rpki-client