Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: DfTdEC/EcQLlgszOdCdg0ExVzIjZETZdJmuBk4cMedM=
Subject key identifier: 9D:F0:BA:73:55:83:F2:D3:29:CF:00:58:C6:A8:7F:2A:2C:34:0F:52
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 01976FD0B5B7AEB0685B5A80A2BE5E1B2F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0EBE
Signing time: Sat 14 Jun 2025 19:00:38 +0000
Manifest this update: Sat 14 Jun 2025 19:00:38 +0000
Manifest next update: Sun 15 Jun 2025 19:00:38 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: p5quP+qzjofcQVnWoRwHi62HTinRZ/59b05Nf1H8V+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b5:b7:ae:b0:68:5b:5a:80:a2:be:5e:1b:2f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Jun 14 19:00:38 2025 GMT
Not After : Jun 15 19:00:38 2025 GMT
Subject: CN=9df0ba735583f2d329cf0058c6a87f2a2c340f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:04:7e:fb:e0:81:37:b4:4c:54:e2:9f:97:
ec:80:8b:ce:c8:7e:de:40:a6:b1:2d:7d:b7:0c:bc:
21:f1:3c:cc:2b:89:d2:a7:c9:e3:1b:b8:fa:cf:bb:
07:0e:7b:8e:e9:09:1e:a5:3c:32:33:38:84:64:6b:
f6:1d:91:e1:83:f1:55:b1:13:f6:24:5e:aa:bc:b5:
86:f2:de:ac:00:6a:55:6a:3e:00:0b:2f:b8:17:8b:
1d:ec:d7:c3:03:73:c2:54:d0:9d:b1:b0:c4:2b:82:
7a:aa:c6:cc:47:28:1b:bf:81:d8:c4:4a:25:58:54:
61:6e:3f:4d:39:a7:d2:e0:82:de:49:e4:2d:47:50:
5c:aa:7c:67:3b:2f:fb:c5:55:a8:18:52:33:ef:41:
59:e0:f4:a5:82:91:14:ff:fd:35:cc:60:cc:9a:56:
0f:b2:bb:84:0a:7b:86:6f:72:45:ba:5e:e0:5b:57:
f6:9c:20:9d:e5:e0:65:b3:6e:7c:32:e4:d3:01:77:
a1:5b:48:06:de:21:18:e4:85:d1:ea:a4:45:78:c1:
8c:c1:2c:c4:89:66:4e:57:ab:54:ee:d4:da:09:67:
ca:be:2f:ec:7a:3a:70:9d:06:c1:be:8b:bc:e9:fc:
b6:20:76:17:87:f8:ec:e3:89:25:f5:23:e0:66:7a:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:BA:73:55:83:F2:D3:29:CF:00:58:C6:A8:7F:2A:2C:34:0F:52
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:1e:6c:29:1b:9b:8c:35:ef:9e:cd:6f:f5:2a:3d:fe:30:
28:b4:a2:26:7a:88:8e:53:ea:fa:a5:93:dc:15:3a:da:97:2a:
6f:77:2a:f8:67:ad:66:1d:cc:22:cf:51:56:3e:be:cb:d5:db:
d4:f4:7b:cf:ef:53:32:d4:07:9f:aa:b7:dc:a5:aa:89:4a:b6:
61:d6:a5:f8:d4:73:86:72:60:68:0d:9d:54:94:82:f8:85:f7:
8f:20:b2:02:0f:d9:52:f2:0e:99:c2:b9:b9:0d:4a:69:55:6a:
2f:4b:ef:e6:15:3b:10:fc:ea:4f:b3:50:44:b5:bd:08:5f:82:
c0:f1:90:32:7b:06:ce:66:6c:8f:34:5b:ee:1a:11:26:20:82:
79:d5:a4:89:2e:da:1c:bf:0f:42:a2:68:8f:66:e6:6c:8a:10:
83:f5:b2:92:05:fd:2e:69:2e:17:50:b6:ec:8d:9c:41:5a:cb:
12:52:88:18:5c:12:d3:5f:dd:eb:ad:94:18:6c:c5:b3:70:02:
22:54:78:0a:f7:bd:df:9b:cd:08:5a:ab:44:95:7e:8b:f5:61:
1b:3c:04:25:d1:5d:6b:e1:0c:f8:46:5e:8b:38:75:6b:2d:13:
7b:8f:ff:c1:9f:1b:40:cf:f4:11:6f:01:43:d1:e7:51:f2:38:
29:22:43:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0LW3rrBoW1qAor5eGy8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWI4OWU2ZWFjNjExZmQ1MzMyZDcwZWJhZjUzMTFmYWQ2
NTEyYjgwHhcNMjUwNjE0MTkwMDM4WhcNMjUwNjE1MTkwMDM4WjAzMTEwLwYDVQQD
Eyg5ZGYwYmE3MzU1ODNmMmQzMjljZjAwNThjNmE4N2YyYTJjMzQwZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcYEfvvggTe0TFTin5fsgIvOyH7e
QKaxLX23DLwh8TzMK4nSp8njG7j6z7sHDnuO6QkepTwyMziEZGv2HZHhg/FVsRP2
JF6qvLWG8t6sAGpVaj4ACy+4F4sd7NfDA3PCVNCdsbDEK4J6qsbMRygbv4HYxEol
WFRhbj9NOafS4ILeSeQtR1BcqnxnOy/7xVWoGFIz70FZ4PSlgpEU//01zGDMmlYP
sruECnuGb3JFul7gW1f2nCCd5eBls258MuTTAXehW0gG3iEY5IXR6qRFeMGMwSzE
iWZOV6tU7tTaCWfKvi/sejpwnQbBvou86fy2IHYXh/js44kl9SPgZnogZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3wunNVg/LTKc8AWMaofyosNA9SMB8GA1UdIwQY
MBaAFJ8biebqxhH9UzLXDrr1MR+tZRK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2It
NzQ0ZmIyMWI1NTk4LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2ItNzQ0ZmIyMWI1NTk4
LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy4ebCkb
m4w1757Nb/UqPf4wKLSiJnqIjlPq+qWT3BU62pcqb3cq+GetZh3MIs9RVj6+y9Xb
1PR7z+9TMtQHn6q33KWqiUq2Ydal+NRzhnJgaA2dVJSC+IX3jyCyAg/ZUvIOmcK5
uQ1KaVVqL0vv5hU7EPzqT7NQRLW9CF+CwPGQMnsGzmZsjzRb7hoRJiCCedWkiS7a
HL8PQqJoj2bmbIoQg/WykgX9LmkuF1C27I2cQVrLElKIGFwS01/d662UGGzFs3AC
IlR4Cve935vNCFqrRJV+i/VhGzwEJdFda+EM+EZeizh1ay0Te4//wZ8bQM/0EW8B
Q9HnUfI4KSJDZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:39:16 2025 by rpki-client