Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: XGPaVNBNFfV251ZabwKyp+6S8p/ZnsF3WhSNnRZlMOY=
Subject key identifier: 5A:A5:56:E4:97:0E:84:3C:B8:52:2F:F0:B2:BC:53:8F:04:AE:AE:41
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 019890DA0B61309132A454E10F609D413F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 22:01:05 +0000
Manifest this update: Sat 09 Aug 2025 22:01:05 +0000
Manifest next update: Sun 10 Aug 2025 22:01:05 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: 304dw2o7I3CGRSz7WRJ+RTRZlQd7CPLOAGRN6OKIMUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:0b:61:30:91:32:a4:54:e1:0f:60:9d:41:3f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Aug 9 22:01:05 2025 GMT
Not After : Aug 10 22:01:05 2025 GMT
Subject: CN=5aa556e4970e843cb8522ff0b2bc538f04aeae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:04:17:9e:79:91:d9:22:d8:2b:b0:51:65:
3e:80:db:2a:14:a8:e9:82:1e:ae:2f:ab:8e:b1:5a:
a4:f7:e0:b5:eb:1d:85:b9:60:09:f4:1f:86:ed:8c:
1a:49:37:45:a5:0e:e4:57:e0:5a:20:a3:76:b0:6f:
9f:68:5c:48:83:8f:c2:25:b0:86:33:d2:42:0a:b5:
d7:1d:f5:9f:70:43:cd:b2:7f:8f:4c:bf:f9:4b:38:
16:ad:77:45:9e:c7:bf:d1:d7:d3:d6:1c:37:57:a2:
2a:b2:72:4e:e6:2e:d9:b8:65:b6:c2:c3:c8:80:ef:
95:4f:3f:71:4e:b7:a4:4f:56:93:7d:44:16:87:33:
9d:72:88:bf:48:63:ef:62:e6:86:bc:98:03:6f:15:
de:4e:15:d8:14:9b:90:e6:87:cc:19:23:96:bc:27:
63:a1:f7:6b:52:c4:45:e1:6f:22:21:fe:21:f4:9a:
44:b5:13:04:5a:95:5f:71:91:98:77:eb:09:29:d8:
df:72:12:b7:0a:ea:ec:b9:72:28:f9:cf:9b:c0:c1:
89:d3:23:17:01:fd:31:76:76:95:68:5e:82:21:2e:
70:dd:d1:a2:04:b8:22:11:d4:3c:49:fe:33:b9:57:
af:09:20:d8:45:05:6e:41:ed:23:9c:1c:c0:37:16:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:56:E4:97:0E:84:3C:B8:52:2F:F0:B2:BC:53:8F:04:AE:AE:41
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:46:94:e8:22:96:01:d0:7a:30:8f:c0:e1:87:18:13:46:3d:
bb:6a:f7:a2:9b:9d:35:6a:0f:a3:7e:4e:10:5e:93:67:e8:8b:
22:cc:d8:a1:7c:0d:9f:26:6d:1c:9f:2a:dc:89:19:78:4f:07:
a6:74:2f:85:69:6d:3e:77:f4:a8:ce:c5:15:28:88:50:e9:81:
fb:a8:d9:64:68:23:1f:0d:eb:df:ac:28:3a:ce:86:d4:90:c6:
7c:29:74:9e:ef:5e:2f:17:b9:82:42:22:40:19:6f:c0:da:95:
97:61:30:eb:a6:9c:f3:36:f6:b9:2e:65:23:fc:83:f0:74:29:
64:ce:c8:88:d9:64:3e:1f:b7:88:05:b6:d8:e2:db:e8:ef:11:
bd:af:c1:9e:06:43:1b:8e:04:23:7f:02:cc:4e:09:88:18:c8:
04:63:66:0e:65:ff:47:6b:07:4b:68:d4:5d:0e:cb:74:f2:3f:
e0:f6:58:a2:44:7e:e3:1a:70:33:9e:1c:d3:c0:a1:0f:53:2a:
24:03:b4:3c:ff:40:c6:55:6b:97:2b:be:a4:54:4f:ec:f1:9f:
ea:67:ae:7a:d7:a1:7e:40:2e:f0:ca:2b:26:08:61:9c:6e:a7:
c1:d2:91:2b:3a:b9:a6:36:1c:c2:98:77:20:9a:44:5c:96:9d:
55:fd:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:16 2025 by rpki-client