Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: kfBxfD8gY/dI22qWJ0cnRakxrdJFh7k1J6lvDXMm3t4=
Subject key identifier: F1:DE:CE:87:D3:4E:AF:35:93:A9:4E:80:23:1C:D6:BB:15:8B:BA:8B
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 01987AC00BC883CC57A0D99939E385ED6151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 15:01:02 +0000
Manifest this update: Tue 05 Aug 2025 15:01:02 +0000
Manifest next update: Wed 06 Aug 2025 15:01:02 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: 5a/Tc2l0vjWYpmeb8icAhgzBe1TzTh1cbDmgqlOwIv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:0b:c8:83:cc:57:a0:d9:99:39:e3:85:ed:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Aug 5 15:01:02 2025 GMT
Not After : Aug 6 15:01:02 2025 GMT
Subject: CN=f1dece87d34eaf3593a94e80231cd6bb158bba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:97:05:9e:8f:63:e2:64:68:29:31:88:86:
1f:4a:9f:67:80:f8:fa:b0:45:56:4d:55:9c:69:90:
8b:5b:1c:e3:e6:e1:ab:dd:73:e0:83:95:b4:41:01:
8a:71:a9:a5:35:33:54:a1:d2:03:63:d8:c9:9e:37:
16:aa:21:e7:16:1b:a2:06:cb:50:97:cc:69:52:cf:
0c:6f:78:e4:25:1b:3c:2c:ba:b0:b6:d9:55:57:e2:
cd:90:9b:08:57:9e:2b:90:e2:e0:66:68:13:d3:96:
e8:5d:41:52:6f:44:73:be:ab:86:b5:ce:dd:1d:68:
2a:bc:28:e5:95:90:a3:f3:70:62:8a:1d:9b:fe:f3:
c7:8f:b1:27:5d:e4:69:a5:9d:74:35:a4:b7:a1:15:
b4:ac:19:8f:7d:c5:45:b5:6b:a5:79:2b:a7:dc:d6:
50:18:57:30:fa:00:99:5b:61:84:e6:92:7a:d7:c8:
af:ee:b8:85:09:34:8b:27:82:f6:b4:6e:61:c5:72:
4e:31:ad:95:ca:46:90:a4:7c:a1:a5:29:0b:e0:d2:
e4:3a:e6:f9:39:82:1c:3b:66:db:a7:d7:e6:3b:ea:
87:11:81:5e:f7:69:98:91:1a:ca:f6:3e:9f:e2:9b:
1c:13:a6:62:ff:b5:e0:c2:67:5d:23:31:7e:91:e3:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:CE:87:D3:4E:AF:35:93:A9:4E:80:23:1C:D6:BB:15:8B:BA:8B
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f6:08:70:ad:63:71:a0:d5:06:b7:82:65:ec:a5:51:9b:12:
a2:5d:db:ae:00:6d:7a:0d:b8:ea:7d:71:b9:84:77:6b:80:70:
1b:64:1c:fb:76:27:52:a9:9c:ac:42:53:01:95:fd:05:74:e0:
f2:64:14:e6:12:b8:bb:5f:67:72:f4:24:cb:83:d7:eb:07:ab:
1f:1a:dd:45:d5:31:bc:c8:d2:2e:f9:b1:31:11:dc:b6:29:89:
fb:bb:d8:15:24:21:94:05:07:11:b6:e3:2f:cb:17:87:7e:6c:
73:61:68:d0:ba:f3:3f:90:1b:fc:5c:05:fd:b6:f8:2b:7e:b0:
ec:bc:ba:fb:e0:2a:69:e8:1b:1e:ed:5a:77:23:0c:07:3c:39:
68:4d:a1:fb:5e:5b:bd:29:d1:49:35:9b:6d:82:ff:21:60:2a:
d3:7c:3b:77:bb:46:35:6f:c0:8e:15:9a:93:90:31:06:5b:82:
28:58:44:17:17:a6:00:eb:36:c5:c3:9e:8f:4b:59:0d:28:a9:
64:91:48:3b:37:41:2f:33:67:14:dd:b4:a5:c1:78:bc:54:11:
d8:3e:9c:c7:93:b7:b5:19:df:a4:a5:74:d0:1c:0b:bf:37:30:
54:a6:39:d0:f6:4c:1a:4a:d7:08:b3:e8:e2:35:65:f2:47:c4:
93:7b:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:27 2025 by rpki-client