Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: pKLtTLUH2hGsnKJTEVyBk+TQkyfsUmVACLCTXt/12jc=
Subject key identifier: 06:A8:3B:99:36:4D:DF:0D:F1:91:02:39:26:4B:5C:9F:C5:A0:7C:27
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 01987C77373CE6CA7422E5E80D7BBA80A6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 23:00:44 +0000
Manifest this update: Tue 05 Aug 2025 23:00:44 +0000
Manifest next update: Wed 06 Aug 2025 23:00:44 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: ej4fEkZ8NIQ7wXicd+7PZSb33WCRrnu7OI7suwcgRQg=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:37:3c:e6:ca:74:22:e5:e8:0d:7b:ba:80:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Aug 5 23:00:44 2025 GMT
Not After : Aug 6 23:00:44 2025 GMT
Subject: CN=06a83b99364ddf0df1910239264b5c9fc5a07c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:52:4d:31:71:54:7e:de:f4:8a:b7:4a:be:
b8:79:aa:43:3b:02:5b:be:de:df:b9:90:ed:eb:bf:
1b:dd:4e:f0:62:cc:02:6d:7f:e1:90:1e:ef:e8:bb:
76:d6:43:65:b9:63:73:ab:73:b2:ac:d7:e5:d6:22:
b2:73:19:64:6b:e2:56:86:b5:48:a1:a4:1a:91:6f:
3e:e4:7b:ac:c0:35:3f:69:73:a4:24:6e:a0:66:d9:
5d:e0:85:35:8d:75:0f:ae:ed:e1:19:b6:ff:bb:fe:
8e:6e:be:8e:e5:05:86:a7:d3:b8:ad:f1:ce:ea:df:
03:74:27:f3:a0:c6:1d:df:77:a7:9a:21:fd:bc:24:
c4:e1:6d:04:0e:9b:c1:dc:05:89:f0:2e:1f:d1:31:
40:cb:21:fd:52:83:87:8b:8b:e7:c7:7a:a2:48:fa:
02:26:bc:37:96:4d:d0:f7:e5:01:aa:a6:0e:90:e3:
94:28:db:e8:0a:20:77:9a:b9:06:fe:60:83:c4:5d:
ec:31:17:7c:b9:3a:ad:37:b3:20:49:8a:99:80:1c:
93:eb:f2:49:e4:14:df:4b:c7:d4:7f:b6:8e:1a:0d:
5c:79:e1:9f:7d:43:99:1a:bf:f5:4a:44:c0:81:86:
cc:0f:f2:4d:52:e2:0d:d3:a9:00:e0:32:6c:7e:f3:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:3B:99:36:4D:DF:0D:F1:91:02:39:26:4B:5C:9F:C5:A0:7C:27
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:6d:4e:ca:5f:f2:69:b1:3c:92:eb:0b:7a:16:28:fd:c5:
e6:2a:7f:8d:d0:55:06:a6:29:1e:d7:f1:85:4b:57:13:7b:eb:
44:c7:34:80:f3:97:c4:73:44:61:9c:dd:6b:fc:ee:35:08:c4:
de:45:d3:46:e5:ae:d7:07:54:1d:f1:79:45:fd:1c:89:54:7d:
6b:b6:91:38:55:0c:d4:6f:2f:6f:f9:e1:9c:06:0c:57:62:57:
8d:24:9c:7d:63:32:e4:5b:d6:4a:b0:0d:8b:e1:57:48:49:79:
8c:a9:2e:12:9e:1a:42:1c:c4:8e:72:48:e8:47:95:b6:19:32:
fd:6b:06:c7:2d:cb:0d:47:81:76:5e:81:da:8a:7a:6a:79:83:
42:e4:55:17:39:b3:1f:4b:ff:38:3b:9a:a2:19:e6:29:73:55:
db:a4:74:6e:77:7e:8d:27:9e:90:a8:be:51:b2:cd:25:4d:c0:
f2:2e:2c:c9:69:c0:d3:a6:16:d2:c0:a3:cb:1d:ee:67:81:41:
38:0b:94:79:8b:09:60:23:2c:d2:c7:b5:b8:67:7e:18:cb:b2:
24:65:4e:3c:04:ff:b5:1e:a9:a9:83:f5:8a:6e:c4:42:db:9a:
2d:76:40:9b:98:f2:63:62:8c:dd:78:00:dd:8f:0e:ba:f2:d9:
47:58:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:47 2025 by rpki-client