Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: lAucTnhugeh5MjkSBIC66OH7Z/YGd5rnMkEXlg6vzgY=
Subject key identifier: F1:5B:F3:D9:2E:54:46:97:F3:EA:CE:74:6B:DF:1F:DD:56:C6:A9:B4
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019A4FCFF21AA549EAEFAC92E41125A4F5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:19 +0000
Manifest this update: Tue 04 Nov 2025 17:00:19 +0000
Manifest next update: Wed 05 Nov 2025 17:00:19 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: 9DivL5whoTZO1GcyyKtYnagxf3uu9tRzYiUXQ4mF9Ow=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f2:1a:a5:49:ea:ef:ac:92:e4:11:25:a4:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Nov 4 17:00:19 2025 GMT
Not After : Nov 5 17:00:19 2025 GMT
Subject: CN=f15bf3d92e544697f3eace746bdf1fdd56c6a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:db:70:72:97:ea:a0:34:2e:1c:e1:19:49:
49:a9:6a:49:9d:5c:dd:60:cc:4a:29:b7:a2:b7:13:
2b:ba:49:0b:a8:71:9f:ff:a9:c8:4b:a3:97:91:01:
46:ac:dc:2c:0b:f6:e8:6c:b9:8c:76:00:34:f4:49:
ed:e7:ba:d4:30:28:d6:f3:71:fc:7e:73:11:e9:40:
04:6c:b3:e4:d4:09:ae:f7:c4:8e:4b:23:48:d5:6f:
c2:a5:c1:38:ca:16:5a:b1:ca:71:07:2d:6c:b5:85:
b9:fb:1d:38:ed:10:f6:ec:bc:3c:fd:c5:67:59:d5:
7d:f8:2e:3d:60:87:b6:20:4e:72:53:fd:8e:e2:90:
b0:96:6d:99:55:2b:4e:c2:8f:f6:7a:be:fb:e0:9e:
4c:a2:38:a1:95:55:77:5c:d5:a1:76:c3:39:32:29:
45:6d:2d:e0:b5:d4:2a:df:42:d1:d0:f4:78:83:2f:
df:2c:69:f2:b5:da:91:1c:0a:78:8f:4c:72:55:e4:
22:d5:e6:cb:ea:f3:8c:57:9d:fb:aa:24:85:a9:59:
df:3f:62:90:1a:25:6b:47:e5:6e:75:dd:77:7f:5c:
6c:91:1b:d8:53:90:ad:39:7d:44:45:c0:00:56:16:
b7:04:85:c2:ed:ad:93:d1:d5:55:0e:b8:21:bd:b2:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5B:F3:D9:2E:54:46:97:F3:EA:CE:74:6B:DF:1F:DD:56:C6:A9:B4
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:13:c0:9a:75:12:f6:4a:57:09:51:44:14:01:27:12:aa:
9d:6e:59:0f:51:b7:41:b9:a7:71:0b:10:2b:0d:f2:0f:d7:24:
90:91:41:e4:e4:7d:af:41:e6:a9:76:3f:e9:c1:06:da:b4:d7:
bc:70:aa:bc:70:12:ce:74:47:40:45:9d:dc:db:6f:72:2a:a5:
fc:cc:57:3e:ec:0b:8b:d0:49:2c:e0:3c:bc:27:00:3a:7f:d7:
f6:78:50:a3:36:19:f8:fb:1f:05:f3:c3:56:d5:f6:d2:b0:ce:
aa:d5:ab:a2:90:a2:89:ef:a1:be:38:79:68:21:fd:5b:ac:90:
f6:39:07:c2:f4:56:86:fd:4b:96:06:78:63:83:36:74:12:53:
68:8e:6c:78:7d:f8:12:8c:1a:2c:57:0a:62:74:e6:b6:21:14:
35:22:30:4d:ee:c8:7a:95:3a:38:e3:88:84:be:cc:5f:01:50:
9b:39:86:3e:4f:0e:66:de:4c:33:67:de:f1:fe:8d:16:7b:a2:
f4:41:ae:45:b8:75:62:19:6a:60:94:ec:66:3e:ba:cf:45:c9:
ce:54:74:47:06:cd:4a:aa:07:12:10:45:32:04:b3:e3:51:fa:
28:ea:c3:71:db:27:a2:a9:0a:07:f6:25:be:9c:b8:a9:0a:d8:
c8:3b:a4:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz/IapUnq76yS5BElpPXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh
ZDM4MTAwHhcNMjUxMTA0MTcwMDE5WhcNMjUxMTA1MTcwMDE5WjAzMTEwLwYDVQQD
EyhmMTViZjNkOTJlNTQ0Njk3ZjNlYWNlNzQ2YmRmMWZkZDU2YzZhOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY3bcHKX6qA0LhzhGUlJqWpJnVzd
YMxKKbeitxMrukkLqHGf/6nIS6OXkQFGrNwsC/bobLmMdgA09Ent57rUMCjW83H8
fnMR6UAEbLPk1Amu98SOSyNI1W/CpcE4yhZascpxBy1stYW5+x047RD27Lw8/cVn
WdV9+C49YIe2IE5yU/2O4pCwlm2ZVStOwo/2er774J5MojihlVV3XNWhdsM5MilF
bS3gtdQq30LR0PR4gy/fLGnytdqRHAp4j0xyVeQi1ebL6vOMV537qiSFqVnfP2KQ
GiVrR+Vudd13f1xskRvYU5CtOX1ERcAAVha3BIXC7a2T0dVVDrghvbIg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFb89kuVEaX8+rOdGvfH91Wxqm0MB8GA1UdIwQY
MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt
ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz
LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz8TwJp1
EvZKVwlRRBQBJxKqnW5ZD1G3QbmncQsQKw3yD9ckkJFB5OR9r0HmqXY/6cEG2rTX
vHCqvHASznRHQEWd3Ntvciql/MxXPuwLi9BJLOA8vCcAOn/X9nhQozYZ+PsfBfPD
VtX20rDOqtWropCiie+hvjh5aCH9W6yQ9jkHwvRWhv1LlgZ4Y4M2dBJTaI5seH34
EowaLFcKYnTmtiEUNSIwTe7IepU6OOOIhL7MXwFQmzmGPk8OZt5MM2fe8f6NFnui
9EGuRbh1YhlqYJTsZj66z0XJzlR0RwbNSqoHEhBFMgSz41H6KOrDcdsnoqkKB/Yl
vpy4qQrYyDukeg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:06 2025 by rpki-client