Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: xBOJzdMsnBe7zbZm0sb2ugXgHtfZ51UA9XYEmO+ac8E=
Subject key identifier: B2:79:68:CE:DF:EF:9E:AC:2D:E2:BB:58:83:C7:28:44:E9:66:1E:68
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 0198748706990411759D2984DAAA394B39DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0F45
Signing time: Mon 04 Aug 2025 10:01:02 +0000
Manifest this update: Mon 04 Aug 2025 10:01:02 +0000
Manifest next update: Tue 05 Aug 2025 10:01:02 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: dFHr7t6EhFrsfaErxKMkerFC06wNBYUT2yyCRu8ymbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:06:99:04:11:75:9d:29:84:da:aa:39:4b:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Aug 4 10:01:02 2025 GMT
Not After : Aug 5 10:01:02 2025 GMT
Subject: CN=b27968cedfef9eac2de2bb5883c72844e9661e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:4f:9b:e7:e1:d7:0a:f6:e8:fe:29:22:8c:
b2:77:3d:34:39:fe:80:47:af:96:3b:3a:82:01:a0:
e7:8c:8d:42:44:8e:eb:10:75:1b:ba:21:d6:74:97:
d6:0e:ec:63:65:17:c7:1e:4d:1f:cc:33:ff:65:38:
be:d6:58:38:96:e3:5e:76:29:59:8d:e0:45:fa:01:
2e:9e:40:88:e7:1b:db:b8:91:11:6a:0d:a0:2a:ec:
8f:2a:e7:4d:ff:f6:6b:ba:fc:9b:6e:36:a5:ce:c9:
4b:4c:3d:dc:f6:8e:61:49:16:63:21:e8:c1:55:c3:
50:66:c6:e3:ee:0f:1f:2a:9c:41:29:a3:d5:26:5a:
db:de:77:f9:ee:cb:12:b7:0c:4e:4f:69:a1:29:97:
28:a9:0b:7d:be:2f:b0:df:55:3a:2a:3f:d1:d0:75:
d1:2b:01:9a:0b:e5:0a:5b:08:54:e4:27:0f:b0:e1:
c4:e0:b6:be:a9:71:8b:ca:99:d9:c8:5d:9c:db:cc:
c3:72:7e:36:f9:3e:7a:d1:9a:67:cd:69:cf:83:31:
a2:6c:e1:1b:97:2d:1d:c2:33:c0:30:7e:44:87:0a:
f5:e5:84:d9:34:5d:a9:1a:38:36:9a:92:a8:85:e0:
de:b7:9e:93:3b:32:a4:ae:3f:43:10:d9:1b:24:c6:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:68:CE:DF:EF:9E:AC:2D:E2:BB:58:83:C7:28:44:E9:66:1E:68
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:98:54:30:8e:e4:38:e4:10:3f:95:34:46:ed:c4:6e:b5:
6b:11:b6:03:df:ff:ba:da:15:e0:22:84:5e:40:cd:c2:88:5c:
54:93:55:05:ab:31:53:54:f6:c2:cf:5f:ac:05:e5:2c:90:d9:
15:78:d7:27:da:d4:c4:57:96:af:2c:2c:f5:d9:3d:53:55:0e:
22:ed:7e:b9:a7:ce:96:96:27:34:4d:96:d7:26:72:ae:84:b9:
c3:2f:72:01:9f:c0:07:39:69:97:c5:63:db:c0:7d:f5:ca:db:
3a:08:65:bb:dc:97:c9:f1:5a:e7:37:9f:4a:39:2f:9b:58:c8:
3d:09:17:f8:5e:53:9a:d1:ca:38:12:aa:8d:11:47:bc:6e:dd:
49:e1:ae:bf:b3:94:34:b0:a7:ab:57:71:43:01:26:9e:21:0b:
e0:50:0d:b0:75:0d:8c:03:04:07:05:0b:3b:31:25:a5:7c:dc:
0d:d8:b5:ac:14:85:89:be:a0:7c:d0:92:cd:1e:c7:61:2b:af:
9d:6c:30:93:e2:4f:2f:ca:8c:bd:60:05:67:fe:6f:57:12:e9:
f7:a9:7a:e6:df:ec:bc:1f:a1:ea:ef:92:c5:90:60:c1:25:01:
39:85:ef:09:6c:d4:ee:31:67:f9:75:ac:93:e5:3c:b0:96:53:
f8:3d:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:22 2025 by rpki-client