Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: aA6GXYk89XC/ZWxpuczoKzcENfYZIZQ0iCBoy7ECmuo=
Subject key identifier: 09:0B:C2:8F:5E:C4:73:B6:60:6E:F1:AB:18:04:42:56:15:87:0A:C1
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 019790DC2F995B359989A4A514C1DA628EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 159F
Signing time: Sat 21 Jun 2025 05:00:38 +0000
Manifest this update: Sat 21 Jun 2025 05:00:38 +0000
Manifest next update: Sun 22 Jun 2025 05:00:38 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: h7Ze1iZP4PTakYN6GaiY9GeCmTAQYiEd2Z0mEaOnAbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:dc:2f:99:5b:35:99:89:a4:a5:14:c1:da:62:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Jun 21 05:00:38 2025 GMT
Not After : Jun 22 05:00:38 2025 GMT
Subject: CN=090bc28f5ec473b6606ef1ab1804425615870ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:66:1a:79:9e:85:96:35:d5:f3:6d:a7:f9:
ea:e2:bf:2d:b3:b5:aa:de:77:aa:f8:4a:d5:38:72:
2f:b5:7a:e6:9e:fe:b0:dd:3d:6e:ef:47:b0:0e:66:
3e:76:6c:68:fb:57:26:93:f9:82:e0:c9:c5:4d:98:
7f:1a:78:1f:e7:b3:d5:67:64:33:b7:cb:07:0a:0f:
dc:e7:56:67:5f:3f:75:26:2f:2c:99:09:19:1d:20:
0a:90:5c:bf:20:46:ce:e5:c6:fb:9a:ad:e2:4a:2e:
e2:8e:3c:2e:7c:72:66:7f:23:15:26:e1:49:99:89:
c5:3d:73:0e:99:32:35:0a:9d:ef:f8:ca:26:2d:41:
51:c0:56:37:29:38:61:a6:49:c8:b3:0d:b9:08:7a:
14:da:78:d9:6b:98:9b:26:1b:ab:66:53:92:65:30:
f4:f7:aa:17:d9:84:01:ff:05:0a:5a:02:d1:13:0c:
a2:c3:3f:dc:dd:61:a6:c3:53:60:65:11:4a:0f:4a:
1c:a2:89:54:89:2b:0e:7e:e1:52:d5:b4:67:17:06:
7f:db:a4:2e:40:dd:7a:e0:43:3c:f8:0c:a5:07:ef:
92:10:44:55:7c:02:ae:c6:fa:88:cb:a8:06:0b:08:
c7:a4:53:88:bd:cb:5c:c0:03:80:df:cf:68:87:86:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:C2:8F:5E:C4:73:B6:60:6E:F1:AB:18:04:42:56:15:87:0A:C1
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:aa:44:69:d9:2d:47:c0:62:30:66:86:90:8f:8f:3a:b9:
67:81:4b:64:30:1c:4e:c2:a7:e3:38:82:fd:2b:b3:64:06:d0:
2a:0d:ff:19:38:d3:62:57:c9:dc:a2:e6:98:77:11:2f:91:74:
c8:1b:76:9a:c1:3a:ca:e7:d4:ca:0b:80:84:5c:9e:c7:ef:f0:
95:d7:ac:35:11:e7:ec:4a:87:0c:f5:da:c7:75:dc:45:22:d4:
df:76:e9:d5:8c:7b:01:10:e7:96:eb:5e:43:e4:93:bf:4f:f2:
6b:61:ce:33:0f:63:4f:a7:fa:b8:fb:b9:a3:c9:38:9e:c1:1e:
a2:b3:f7:63:1b:a0:51:17:27:f7:42:5b:3f:bc:4c:a1:3a:a3:
df:a4:b4:15:ab:1e:ed:07:66:cf:a7:06:f0:57:9d:cc:ba:ec:
f3:44:9c:4b:7a:d1:ea:bb:8e:83:25:80:50:1a:60:7a:ca:c0:
2c:1f:ab:d7:0d:de:85:64:25:95:a7:1f:ad:30:5c:39:fb:45:
24:04:48:9e:8c:88:1a:36:07:f1:8c:45:18:0d:cc:04:55:57:
cb:c7:a9:46:56:c3:72:7d:0c:34:53:26:83:63:0e:ef:d9:f0:
b8:d7:d9:21:da:6c:50:99:fa:12:c1:7c:8a:d0:8b:54:2b:50:
70:2f:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:40:17 2025 by rpki-client