Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
File: NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json)
Hash identifier: ZUAN6Qo/J+D63nnK7jDmP7eQiikBSb/+FjF+f3Y2BmA=
Subject key identifier: FF:99:DB:A3:4D:84:4C:FB:0B:09:01:A3:95:05:56:78:CD:E7:67:4F
Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
Certificate issuer: /CN=36e054287dbe76062d1770d83c6a160000db0d7d
Certificate serial: 0197B6A201BA46C6E2FAB68E410166DD56AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
Manifest number: 0561
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: N0ROt4V6b5cQQ/NU2eID2+XEIOvDyFZoNOYkxI7P5oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:01:ba:46:c6:e2:fa:b6:8e:41:01:66:dd:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=ff99dba34d844cfb0b0901a395055678cde7674f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:c6:4e:82:64:0e:83:4e:81:8e:46:87:9b:
5d:ff:96:76:21:88:18:0b:51:fd:89:3a:cd:3b:a6:
b3:8c:d9:d8:b3:d4:a7:a7:67:98:d0:01:8e:42:6b:
7a:0c:ef:81:86:db:ac:86:ac:2f:f1:af:20:c5:86:
4f:70:5e:c4:90:3a:f2:3d:67:cf:55:15:44:6a:82:
d1:e6:2e:c6:a0:e4:bc:56:dc:f4:44:d7:49:b0:46:
82:36:15:a9:8a:19:79:08:95:77:14:eb:ae:0b:8e:
de:d6:82:85:1b:2d:2d:45:67:18:23:f8:9b:20:22:
ea:17:11:7a:da:bb:6b:dd:fb:fa:b2:0b:a8:2a:70:
ec:0c:02:43:6c:7b:37:f5:aa:cb:7c:2c:cf:8f:6a:
90:b7:90:6e:21:df:5c:d9:e7:fc:b3:8f:f4:f5:93:
32:cc:8d:6b:60:dc:18:d2:b9:35:60:7d:51:0f:cd:
c3:62:a6:5a:5b:5d:d9:93:d7:93:d8:f8:f1:b7:f7:
86:14:2e:c1:14:cd:b0:91:93:88:60:86:8b:e8:83:
11:03:90:74:d7:60:3c:2b:92:69:5a:a9:db:ed:3e:
85:5f:cc:f0:f3:95:17:6f:4b:f2:f7:56:36:33:fb:
46:f7:f1:3d:5d:66:82:e5:42:85:a0:2b:ac:86:7a:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:DB:A3:4D:84:4C:FB:0B:09:01:A3:95:05:56:78:CD:E7:67:4F
X509v3 Authority Key Identifier:
keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:74:d8:dd:45:b9:4b:5f:6d:23:eb:35:fc:5d:57:93:e9:
eb:29:54:a1:cd:ea:ac:ef:0a:9f:82:9a:6f:ef:36:ec:da:70:
e2:e9:8e:c9:33:eb:7c:d7:37:2b:58:d1:d2:d0:3d:f4:a4:0b:
f4:79:7c:5e:0f:0e:e0:26:fc:0a:f3:0e:46:64:f7:55:30:49:
dc:78:af:25:80:93:05:3c:ce:50:f5:ff:4b:ea:99:75:cc:2f:
f6:cf:29:f8:15:08:5f:f7:22:f9:4f:1a:49:d4:5c:0d:3a:57:
31:fc:7e:11:60:98:74:ee:0a:aa:03:f3:17:78:82:bd:2c:cc:
b2:b4:fa:d1:ef:9d:5a:18:35:bf:3a:0a:77:13:bd:27:c1:31:
f1:66:f6:b2:58:ca:c5:b7:c1:3b:16:41:47:29:0c:69:86:7e:
2a:81:50:c6:e9:97:ad:67:7e:93:4e:ff:cd:b0:37:9e:4b:b6:
a4:a9:e0:af:e5:fe:45:7c:8a:64:d8:d5:e3:21:50:3f:f6:e3:
4a:f5:2f:ce:47:97:0b:97:16:d4:94:0a:81:59:e5:79:e1:cf:
63:cc:75:24:19:49:99:b0:d5:77:b5:25:5e:1e:5e:a0:28:f8:
82:73:95:36:85:95:59:40:f4:a9:5b:a1:a7:70:dc:37:2f:94:
5e:8e:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:54 2025 by rpki-client