Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: WQXaUghi33wAHoHbvwjWrMRvcJNoUk9Qydfgf2ulss8=
Subject key identifier: B3:52:73:7A:7F:EE:12:72:75:66:F9:1F:7F:71:AF:E3:2A:CF:D2:2D
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019676B0B4A42F86B8AC548AEF613C6CCE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0E3D
Signing time: Sun 27 Apr 2025 10:00:14 +0000
Manifest this update: Sun 27 Apr 2025 10:00:14 +0000
Manifest next update: Mon 28 Apr 2025 10:00:14 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: 12dkPbSVF3fXS6K1WvprFFBKkKExahecLmy+lB/n4b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b4:a4:2f:86:b8:ac:54:8a:ef:61:3c:6c:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Apr 27 10:00:14 2025 GMT
Not After : Apr 28 10:00:14 2025 GMT
Subject: CN=b352737a7fee12727566f91f7f71afe32acfd22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:9d:e8:af:bf:4b:c4:e5:b5:51:08:b8:e0:
9d:60:44:34:d9:bb:3f:6f:dc:28:e5:45:e7:6d:5b:
0c:b0:cf:f7:3e:02:68:86:d7:2c:2e:6c:05:37:4a:
50:2f:3e:ca:94:ee:a0:f2:5d:48:9b:5e:09:9d:01:
d1:7b:ff:bc:a6:29:9a:01:c9:dc:73:8f:df:d3:4a:
a5:b2:54:02:a4:1c:08:ec:b4:bd:aa:b4:69:33:2a:
be:93:c6:ac:1f:e6:79:0c:f4:2c:72:07:78:bb:da:
6c:63:08:7e:79:51:3f:49:fb:b3:61:3f:b2:be:3b:
a1:0d:2b:c8:50:ab:8b:f9:6b:db:59:de:e7:5c:06:
b0:e6:51:c5:c8:89:d6:0a:d5:07:f4:59:3f:36:4c:
0b:33:b1:58:23:5e:99:26:d8:f8:b0:d7:ec:74:b3:
a7:07:a0:77:8a:14:1d:bc:54:9e:13:8d:db:0c:08:
01:bd:96:fc:00:29:cc:ef:39:3e:2c:aa:6e:fd:f5:
5b:1c:f1:ce:bb:5f:e3:b4:ef:d4:86:f3:ce:a0:63:
6f:ef:cc:91:d5:9b:2e:22:84:64:2d:c1:1e:43:d9:
f1:e0:4e:2c:66:76:1f:eb:e0:41:7a:94:8a:ab:bd:
88:11:f9:75:a6:67:a4:0a:87:42:41:47:a6:7c:6c:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:73:7A:7F:EE:12:72:75:66:F9:1F:7F:71:AF:E3:2A:CF:D2:2D
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:38:4e:8e:a1:8d:92:08:cd:a5:7a:a5:60:71:51:22:76:
69:99:d3:4b:17:a6:6b:c0:61:b6:a0:4c:1f:03:e6:19:05:24:
73:ca:18:fc:50:55:67:12:ec:46:86:a0:57:53:86:04:ef:16:
36:62:bf:fa:d1:c4:21:3e:b3:77:00:4c:fc:19:8e:38:3b:1f:
69:f5:13:01:25:7f:cd:a6:90:3a:6e:e7:84:7c:da:42:fc:c1:
18:e6:ee:4f:d7:a5:c7:0c:87:4f:0a:f1:84:3c:52:19:cf:0b:
02:55:bf:56:0f:49:64:0f:86:2c:4f:77:34:a8:8e:ff:76:c9:
74:58:a8:80:32:91:38:5f:c3:a9:f3:f4:21:62:a2:81:eb:db:
7f:86:ea:c9:f7:66:91:12:ef:f8:40:4a:ea:60:fd:03:d2:bb:
2c:74:ae:2a:16:7c:f6:c5:a2:cf:b5:ae:35:c3:d3:b9:f5:cc:
a8:84:0b:f7:16:b9:ac:b8:34:da:5c:a7:19:21:28:a1:ee:ac:
33:82:a1:ef:2f:39:d5:f4:be:e0:12:43:bd:9e:24:75:0d:da:
02:f1:f8:38:2e:f5:00:e9:6e:e3:1d:d3:2e:0b:47:06:12:a3:
c3:4f:80:4e:34:8a:28:f0:28:8d:92:4f:50:30:1f:40:7f:de:
04:50:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:48:56 2025 by rpki-client