Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: js/acVGSXZxUe/aY7hcsZG/zrqOH8wwOgiyxM3DxdiI=
Subject key identifier: 43:B1:76:45:A5:8A:30:9D:7E:3A:CF:7F:E8:9B:90:F4:9E:3F:73:23
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 01967DC66678FF96BCC1CC8BBC30A8860BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 19:01:16 +0000
Manifest this update: Mon 28 Apr 2025 19:01:16 +0000
Manifest next update: Tue 29 Apr 2025 19:01:16 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: VxjDcYm+TFCGe57xxEIznDe6TfumzIJqSG+bU/i4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:66:78:ff:96:bc:c1:cc:8b:bc:30:a8:86:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Apr 28 19:01:16 2025 GMT
Not After : Apr 29 19:01:16 2025 GMT
Subject: CN=43b17645a58a309d7e3acf7fe89b90f49e3f7323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:6f:50:55:58:8b:0a:14:2b:09:19:b1:8c:
3a:77:44:db:99:bd:ea:c6:ce:5f:23:ea:4f:38:89:
a5:c0:59:59:90:4a:eb:8c:d4:8e:e0:b5:90:cb:4f:
73:13:cb:81:87:08:a3:4d:dc:73:2c:c2:38:37:0f:
33:a1:67:69:b7:3d:a5:11:75:ad:f3:c9:5e:a1:d8:
d7:69:4d:a6:f2:33:cc:09:0f:eb:e9:e6:0d:06:7c:
9e:5f:b0:1f:c1:04:c3:38:44:64:74:aa:fb:63:fc:
46:d9:6d:98:70:18:a1:e8:35:13:d0:d4:cf:bf:38:
e6:08:b9:71:f5:32:a5:8c:06:54:80:f6:c8:08:91:
a4:da:00:4c:0e:1c:02:72:35:77:24:16:40:0b:4a:
57:5a:b3:59:e7:c7:2e:69:3c:f6:f4:2c:47:04:c5:
7f:e1:a6:de:28:ba:f4:d6:01:9e:c3:9a:8e:6b:a6:
53:29:83:d6:ad:20:1f:7d:65:5e:06:4e:46:2b:3c:
81:fd:3f:38:32:cb:df:1c:f3:b5:11:a7:31:f4:86:
86:1e:fe:87:c7:29:54:a3:f9:e8:46:da:1b:50:23:
99:6b:e1:86:7f:1f:7f:dd:1e:5f:8e:f9:8f:34:23:
6d:8d:03:8e:8e:08:39:2a:a7:0e:62:c0:8d:b3:09:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:76:45:A5:8A:30:9D:7E:3A:CF:7F:E8:9B:90:F4:9E:3F:73:23
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9c:cc:a8:61:5a:76:bd:ab:20:8d:aa:38:0d:8d:04:78:10:
93:0e:b1:28:2b:93:3a:ba:9e:7e:2b:fc:80:e5:c6:27:d0:3b:
87:ac:13:40:33:0e:97:84:97:a9:0b:82:88:78:ec:f2:4f:f8:
d9:91:56:a9:0e:1d:df:a8:e4:4a:56:2f:31:53:29:a1:7d:a7:
cb:9b:cf:20:95:f9:e6:51:ac:22:c2:b9:8f:75:31:d9:1e:94:
9c:67:6f:04:d8:ed:66:7a:ea:51:6c:8d:f8:98:95:37:93:9d:
e2:bd:22:8f:c9:d5:4d:9c:8f:14:39:ff:98:32:ed:c1:bc:22:
5f:3b:ea:49:2c:bb:86:b9:46:6c:d4:6d:3d:24:ac:81:e3:38:
85:d8:f3:90:2b:c3:0c:bf:9e:cc:74:61:84:87:c2:09:c1:cd:
f9:98:03:3f:8a:fb:36:7c:f3:48:0c:f1:01:2d:13:81:ae:89:
af:29:12:aa:d9:a3:ea:00:8e:8e:28:0f:af:5a:a4:24:0a:57:
ba:f4:fd:c8:9d:75:6b:52:4b:62:d6:a9:6a:5e:9a:7d:90:49:
8f:4f:1f:b2:98:17:ac:06:68:31:0f:c7:d6:50:87:4a:c6:b7:
e0:ce:c9:de:8e:e1:cf:46:e7:16:7b:ba:9a:4b:36:50:5a:7e:
f9:48:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:18:27 2025 by rpki-client