Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: KFD9BCLeGha1L0YYufVWQ0pqPaDE2gDz4A1aFgA0O40=
Subject key identifier: 5A:C2:1D:B4:03:25:7E:9C:67:7A:FA:9B:F2:94:C2:94:D8:2B:DC:31
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019873E275B83A827624BC30CED73B42BF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:01:17 +0000
Manifest this update: Mon 04 Aug 2025 07:01:17 +0000
Manifest next update: Tue 05 Aug 2025 07:01:17 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: 8z5A+B4U7TRrNQInm0zGF8vZfEa6Hl2E+9tEKr6t2Sg=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:75:b8:3a:82:76:24:bc:30:ce:d7:3b:42:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Aug 4 07:01:17 2025 GMT
Not After : Aug 5 07:01:17 2025 GMT
Subject: CN=5ac21db403257e9c677afa9bf294c294d82bdc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:82:87:16:ca:7e:7d:9c:0a:fa:5f:36:53:
5a:1e:91:0e:70:9e:54:e3:b5:89:94:9c:e1:33:da:
6b:ea:32:ff:d0:23:b6:a5:8b:fc:d9:84:b5:63:c5:
ee:80:24:b4:f3:78:32:1d:58:1b:ed:3a:c4:7a:ba:
4e:9e:1a:0f:6c:c6:68:34:2f:04:eb:40:04:1e:51:
a6:6b:d6:9a:ce:44:1a:08:6b:fb:f5:50:2c:bb:6a:
34:58:56:3a:01:df:c2:21:32:a8:e5:a6:83:6c:5c:
2e:d7:6f:12:31:9a:1c:c3:ff:c5:1b:06:10:c4:33:
4b:e4:6e:bd:11:c6:f4:1f:a5:9b:2a:38:94:fd:e2:
76:db:c5:9d:58:10:3b:e0:a5:02:25:9e:5c:de:38:
55:ae:e4:fb:5b:00:ca:96:55:32:0e:d9:26:2b:b1:
6c:61:98:fa:c1:ae:9d:2f:48:90:48:da:d0:7b:9b:
2c:fc:2a:12:d0:68:a0:93:42:0d:3a:40:67:b3:38:
b4:c2:b6:cc:a1:2b:4d:41:7d:fd:ef:ab:2b:54:43:
ba:0e:e9:93:8d:df:4e:78:fb:f1:9d:a4:9f:26:89:
87:76:34:73:ce:18:2d:23:a0:b2:24:59:5b:38:ba:
af:6c:95:41:56:85:b1:8c:85:f5:f6:7b:27:32:13:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:1D:B4:03:25:7E:9C:67:7A:FA:9B:F2:94:C2:94:D8:2B:DC:31
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:d4:7b:22:44:a4:f0:2a:29:c6:c4:c8:8e:7c:0d:f9:d8:
b0:e1:1a:21:63:63:a9:5d:13:e6:bb:0d:05:69:8e:3b:72:ae:
17:bd:86:d3:b9:98:8f:8c:dd:e6:07:bc:68:ce:d6:43:f1:69:
14:f4:c8:1e:23:9d:a2:45:47:35:32:66:32:a0:a8:cc:e6:3c:
d3:37:4c:db:d4:04:6e:43:4d:4c:3a:85:b5:44:d5:84:64:33:
a2:c3:cd:be:01:ab:03:f9:62:a4:b6:63:21:85:8a:08:e1:ee:
f7:ab:1e:e9:89:3b:7f:f9:a7:c3:b1:02:cf:f3:d7:be:98:a3:
8f:d8:9c:cb:65:4b:d6:04:24:7b:cf:f8:72:6c:c9:12:35:c8:
24:28:33:c3:10:a5:50:d2:83:c0:16:c2:59:29:3f:9e:f3:a5:
7c:bf:b5:66:84:82:79:72:6b:ea:6e:ff:69:e0:93:56:72:2f:
02:8e:d2:03:87:86:a1:6a:b5:d1:c0:91:ca:03:3c:ba:e6:9e:
85:67:e7:9c:55:af:7a:71:ae:0e:91:77:24:38:97:b0:20:11:
1e:df:d9:5e:7f:1d:fe:48:a8:0f:7b:b2:75:75:9f:9b:14:09:
dc:8f:b4:0c:09:6c:5f:4c:2e:53:20:b0:71:17:bc:8e:8d:21:
b0:83:30:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4nW4OoJ2JLwwztc7Qr9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi
ODc4ZjMwHhcNMjUwODA0MDcwMTE3WhcNMjUwODA1MDcwMTE3WjAzMTEwLwYDVQQD
Eyg1YWMyMWRiNDAzMjU3ZTljNjc3YWZhOWJmMjk0YzI5NGQ4MmJkYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0SChxbKfn2cCvpfNlNaHpEOcJ5U
47WJlJzhM9pr6jL/0CO2pYv82YS1Y8XugCS083gyHVgb7TrEerpOnhoPbMZoNC8E
60AEHlGma9aazkQaCGv79VAsu2o0WFY6Ad/CITKo5aaDbFwu128SMZocw//FGwYQ
xDNL5G69Ecb0H6WbKjiU/eJ228WdWBA74KUCJZ5c3jhVruT7WwDKllUyDtkmK7Fs
YZj6wa6dL0iQSNrQe5ss/CoS0Gigk0INOkBnszi0wrbMoStNQX3976srVEO6DumT
jd9OePvxnaSfJomHdjRzzhgtI6CyJFlbOLqvbJVBVoWxjIX19nsnMhPJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrCHbQDJX6cZ3r6m/KUwpTYK9wxMB8GA1UdIwQY
MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut
OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4
LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqnUeyJE
pPAqKcbEyI58DfnYsOEaIWNjqV0T5rsNBWmOO3KuF72G07mYj4zd5ge8aM7WQ/Fp
FPTIHiOdokVHNTJmMqCozOY80zdM29QEbkNNTDqFtUTVhGQzosPNvgGrA/lipLZj
IYWKCOHu96se6Yk7f/mnw7ECz/PXvpijj9icy2VL1gQke8/4cmzJEjXIJCgzwxCl
UNKDwBbCWSk/nvOlfL+1ZoSCeXJr6m7/aeCTVnIvAo7SA4eGoWq10cCRygM8uuae
hWfnnFWvenGuDpF3JDiXsCARHt/ZXn8d/kioD3uydXWfmxQJ3I+0DAlsX0wuUyCw
cRe8jo0hsIMwLw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:10 2025 by rpki-client