Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: jnNEYv3cq1VggI3sRQI0QCh0JwAM/RtijDm+qxUcnOQ=
Subject key identifier: 47:E1:87:D0:1D:1D:BA:02:A3:B3:AF:2C:87:D8:3B:12:F3:6B:61:C0
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 0196753071C7FBAF2A9D70E766B8B85674F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 03:00:31 +0000
Manifest this update: Sun 27 Apr 2025 03:00:31 +0000
Manifest next update: Mon 28 Apr 2025 03:00:31 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: oNFPD2BTwKFAyjndEDAk9JYsibB6WN7O4GS9BljCfx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:71:c7:fb:af:2a:9d:70:e7:66:b8:b8:56:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Apr 27 03:00:31 2025 GMT
Not After : Apr 28 03:00:31 2025 GMT
Subject: CN=47e187d01d1dba02a3b3af2c87d83b12f36b61c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:e6:8e:88:40:5b:50:86:ca:ee:bb:01:d3:
ad:69:56:61:8a:d7:31:e8:4f:fc:06:e3:41:19:eb:
f1:2e:0c:6a:da:98:d9:81:30:74:b6:d2:80:e2:2a:
b6:70:b6:66:2a:af:6d:00:b2:9b:87:75:a4:10:4a:
5b:f0:0d:b3:7c:75:a8:df:73:32:94:a0:8e:3a:4d:
f4:25:7e:b2:9d:cd:8b:a3:74:03:bf:d5:9f:92:7e:
6d:9b:e2:e0:13:0f:db:e3:83:b5:26:30:9a:69:6d:
37:f5:b8:16:a4:45:de:62:7b:b0:71:4f:0f:45:ce:
cf:f0:15:84:fc:dd:31:8b:2c:da:f5:b0:15:13:aa:
3e:a3:d1:2d:7d:a9:e2:32:42:c9:af:79:c7:71:41:
5b:9a:e0:f7:d7:c8:2b:4b:6c:85:78:e0:4f:5b:a7:
92:41:39:62:b7:df:ac:8c:5c:62:b8:0a:2d:a7:5d:
ee:3a:11:9d:99:db:f3:6a:44:7a:f4:04:96:6b:18:
7e:74:9d:81:16:50:81:ec:00:88:ec:f4:0d:14:82:
f8:32:dc:69:4c:85:1d:71:95:e3:db:d7:f5:6f:b0:
01:13:28:e2:4f:7a:45:af:83:df:cb:5e:8a:4d:4f:
cd:45:38:8c:16:b9:ab:39:17:2a:33:60:c3:ed:4f:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:87:D0:1D:1D:BA:02:A3:B3:AF:2C:87:D8:3B:12:F3:6B:61:C0
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:5d:35:91:6f:df:d9:37:a8:a4:2e:b0:e5:11:6b:36:8a:
c9:e1:77:e4:f2:ee:aa:b6:ae:67:17:76:56:c0:aa:a0:70:b9:
6d:a1:6a:74:a4:68:a2:35:02:b4:1c:f7:b1:a4:44:bc:bd:14:
ec:51:32:9f:3b:bd:0d:b6:50:68:53:b9:88:73:c0:5e:be:96:
00:57:6e:7e:25:e2:03:0d:ea:49:e9:0d:ca:2b:44:45:d7:a8:
d2:48:fe:e9:7d:b2:16:57:c7:36:03:a0:2e:af:79:43:70:e2:
6a:ee:ac:1e:64:60:9e:79:ad:b9:45:53:6b:81:96:f2:e1:ad:
84:95:40:26:64:67:3d:61:bc:07:ac:82:ef:e6:fd:cd:00:c0:
62:bc:0f:4b:01:1f:46:22:23:61:e5:cf:08:5b:70:46:ac:19:
d0:66:d7:a0:46:d2:28:ef:21:b4:30:60:85:37:de:23:a2:f2:
69:cd:6a:c0:f8:7a:6b:49:a0:c5:c1:34:e1:c0:ae:71:70:82:
a8:b5:13:d6:8f:54:37:23:a2:f7:be:b2:9a:6f:10:0b:46:1a:
0f:98:23:45:4e:59:ac:36:79:77:a0:16:aa:d3:41:55:35:5e:
10:69:04:ce:8c:07:0f:26:d9:fd:01:52:db:28:08:0e:b3:9f:
3d:5f:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:51 2025 by rpki-client