Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: sEeu4CFiNC3rl2pMazOd/teH7Tk0AaqLHJhOIXnAMSY=
Subject key identifier: BA:DE:08:0B:6F:FE:9D:E9:4F:F8:1C:8F:1F:EA:10:75:E9:2E:16:49
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 01977188CE43358F68FD873D158A5F0484A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 158C
Signing time: Sun 15 Jun 2025 03:01:20 +0000
Manifest this update: Sun 15 Jun 2025 03:01:20 +0000
Manifest next update: Mon 16 Jun 2025 03:01:20 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: pDBpu+ZR0btoqE1yk3cd70U5yNwt+HTiwP7Bv7OQev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:ce:43:35:8f:68:fd:87:3d:15:8a:5f:04:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Jun 15 03:01:20 2025 GMT
Not After : Jun 16 03:01:20 2025 GMT
Subject: CN=bade080b6ffe9de94ff81c8f1fea1075e92e1649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:d8:e7:ec:91:6f:ac:5d:5d:28:69:50:69:
15:a2:9e:40:a5:0e:37:43:c0:46:18:e7:18:84:2b:
dc:10:b5:39:8b:0f:a3:0f:3f:e2:c9:57:fb:b2:3f:
a6:00:88:9b:49:7f:50:de:1d:17:33:83:1d:57:8d:
df:74:44:a7:77:d8:21:1c:f0:c6:33:5a:f3:53:2f:
ab:e4:f5:f5:8c:d1:3b:9e:e2:c4:7e:d4:0d:da:61:
1d:ae:b2:b1:93:a1:fb:15:d5:ae:f9:b7:50:e9:86:
28:41:3b:0f:9a:f8:43:c0:a1:09:30:5c:71:b7:49:
bc:a8:1c:9f:fb:d9:79:cd:ba:da:99:ba:6c:d2:0e:
97:b8:2c:70:58:50:94:2c:9c:b9:33:f2:45:6c:80:
07:a2:f1:8f:cb:e2:aa:0c:bf:4f:54:cd:34:f4:ff:
ce:7e:e6:95:ee:50:10:54:e8:7d:26:11:2b:81:32:
fb:09:9a:2c:34:df:34:72:ef:34:bc:56:8e:b9:fb:
ce:d7:c9:87:09:18:e7:f5:f4:0a:21:2a:d2:a7:5f:
dc:e8:f3:cf:18:a6:cb:61:71:07:85:34:25:62:54:
0d:11:c8:11:8d:2a:e2:af:0d:35:b0:b4:cf:3d:c5:
b0:eb:5f:4f:4b:b7:9d:15:3f:33:aa:0c:cc:10:86:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:08:0B:6F:FE:9D:E9:4F:F8:1C:8F:1F:EA:10:75:E9:2E:16:49
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:68:e0:19:32:2c:99:66:db:4e:e5:56:e0:c5:81:91:68:
5b:e8:85:54:e6:1f:4b:2c:c6:f4:79:ff:55:28:5b:33:b5:15:
76:bb:e1:28:6f:36:d6:56:69:b0:d2:bd:3a:08:82:73:13:51:
25:5a:0a:d2:ad:54:45:ec:ba:30:a2:2f:af:97:2c:48:3f:48:
6c:a2:b2:fa:2b:73:52:4e:ea:0d:91:eb:88:83:18:af:d0:8b:
02:64:d2:03:0b:9b:55:50:7a:56:fe:46:2d:46:31:28:ba:55:
5d:30:f6:22:26:87:39:82:5c:df:1a:5e:73:e3:69:b6:41:aa:
c2:45:ce:e5:f5:09:09:a3:28:82:8d:4f:8b:f6:9a:c3:3f:a6:
bf:69:39:e1:df:30:c5:b1:cd:1b:d8:ee:f9:b4:0c:7d:e2:d7:
76:c5:b4:e0:3d:52:11:78:33:9f:6e:bb:99:29:1d:5e:db:ae:
54:a4:1c:28:8e:e8:ef:70:ce:b6:52:29:30:82:77:9f:a0:f7:
36:b1:07:dd:8d:08:18:a4:7b:c6:95:bf:1d:11:16:4d:9c:bf:
64:20:a0:09:cf:8f:8e:f6:6f:a2:c4:5c:32:48:33:02:a1:83:
6e:4e:cb:87:e8:05:1a:1d:15:e2:5e:65:86:86:bc:bb:41:9d:
96:bd:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:52 2025 by rpki-client