Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: /e3zZ/9vnSkGKXUmYIC267y4eZ8ZpXkEZ1h8A9SYKD4=
Subject key identifier: 3D:C8:B9:A8:25:FB:14:2A:2B:F6:7F:CB:E7:75:44:25:9F:A1:A5:45
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 01977007ACA0FCEBE208E886FFE434F89C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:40 +0000
Manifest this update: Sat 14 Jun 2025 20:00:40 +0000
Manifest next update: Sun 15 Jun 2025 20:00:40 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: OQflb1piRTVl/LRO3qtqsv08gc6YGnvgpDEN7Z+5yeI=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ac:a0:fc:eb:e2:08:e8:86:ff:e4:34:f8:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jun 14 20:00:40 2025 GMT
Not After : Jun 15 20:00:40 2025 GMT
Subject: CN=3dc8b9a825fb142a2bf67fcbe77544259fa1a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:31:cb:86:3a:11:5e:d7:fa:47:d2:3d:a6:
bb:79:42:9e:88:3f:7d:67:73:01:09:3e:82:89:a6:
e3:d5:23:da:88:f8:11:55:3e:a0:6f:1d:68:aa:f2:
ec:fc:a7:5c:b8:3f:42:43:7c:59:0e:6f:16:28:26:
ff:7d:cc:46:67:a9:dd:b6:29:ef:f5:bf:09:0f:35:
5f:ba:b5:6e:82:b6:bb:5a:33:8f:00:3c:e2:5d:98:
84:d0:59:e0:5f:e8:85:56:ab:e0:d0:f7:4f:56:0d:
46:2a:b8:49:3c:c7:bf:b7:f2:c8:46:e8:01:00:a1:
fc:62:f5:24:36:3e:0e:e4:b9:eb:e5:4d:a4:64:99:
aa:9a:a5:09:17:e3:4c:31:41:56:19:bc:44:80:bc:
23:58:b7:73:60:99:f6:7b:1a:41:08:00:e0:3a:83:
52:98:6e:5a:da:52:5a:e2:a6:b9:49:f2:65:af:87:
d6:d0:6d:36:cf:f4:07:72:be:ba:60:4b:77:b9:76:
29:08:6c:bb:d0:e3:00:2e:4f:ae:50:6f:42:14:20:
26:73:b3:42:9c:25:58:ed:71:e3:ce:1b:32:ac:35:
e7:45:cf:b1:dd:c3:d7:6c:07:3d:4c:cb:33:dc:73:
9c:b4:6a:8b:4f:15:5e:dc:e7:3b:4a:c0:9e:ac:a7:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:B9:A8:25:FB:14:2A:2B:F6:7F:CB:E7:75:44:25:9F:A1:A5:45
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b8:95:99:72:60:6e:d8:20:12:dd:b7:38:dc:62:77:30:75:
a1:04:22:19:d7:7a:fc:20:ab:69:fb:4f:6e:83:3e:14:bf:d7:
56:7c:37:06:11:74:0d:97:3e:63:c8:50:04:8f:45:aa:e4:cb:
a7:03:b1:5a:d8:36:72:15:60:6d:29:ca:d3:ed:9b:11:5f:f3:
7c:12:58:52:23:46:b0:de:9a:1d:b4:cb:98:ad:aa:e4:bd:96:
55:41:02:df:5e:1b:7d:5b:0e:26:f9:8a:37:ef:44:03:a6:c8:
9b:56:56:8a:e6:78:c8:8b:09:f9:f2:99:d4:28:00:74:3b:93:
70:70:2a:85:4c:5b:26:17:0c:30:78:96:ae:c1:51:79:c9:d3:
d6:6c:0f:c4:df:e6:e2:6b:7d:28:b4:e1:a0:36:b1:de:ee:4f:
d0:c0:d1:e7:4c:8a:f7:7f:41:b8:21:de:35:48:13:91:c8:97:
87:55:42:91:5f:44:6a:f4:21:d5:65:a0:2f:ae:a3:20:05:0c:
9e:28:b1:45:52:31:7f:c0:65:22:56:a4:9e:76:66:29:c6:9d:
a1:e2:b7:78:c4:15:5b:fb:66:4c:08:9b:d9:c8:24:77:69:e8:
a4:02:ad:ff:e9:e3:88:77:1a:2b:70:c8:4f:df:79:0d:92:04:
f3:72:a1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB6yg/OviCOiG/+Q0+JwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh
ZDM4MTAwHhcNMjUwNjE0MjAwMDQwWhcNMjUwNjE1MjAwMDQwWjAzMTEwLwYDVQQD
EygzZGM4YjlhODI1ZmIxNDJhMmJmNjdmY2JlNzc1NDQyNTlmYTFhNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfcxy4Y6EV7X+kfSPaa7eUKeiD99
Z3MBCT6Ciabj1SPaiPgRVT6gbx1oqvLs/KdcuD9CQ3xZDm8WKCb/fcxGZ6ndtinv
9b8JDzVfurVugra7WjOPADziXZiE0FngX+iFVqvg0PdPVg1GKrhJPMe/t/LIRugB
AKH8YvUkNj4O5Lnr5U2kZJmqmqUJF+NMMUFWGbxEgLwjWLdzYJn2expBCADgOoNS
mG5a2lJa4qa5SfJlr4fW0G02z/QHcr66YEt3uXYpCGy70OMALk+uUG9CFCAmc7NC
nCVY7XHjzhsyrDXnRc+x3cPXbAc9TMsz3HOctGqLTxVe3Oc7SsCerKcbjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Iuagl+xQqK/Z/y+d1RCWfoaVFMB8GA1UdIwQY
MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt
ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz
LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLiVmXJg
btggEt23ONxidzB1oQQiGdd6/CCraftPboM+FL/XVnw3BhF0DZc+Y8hQBI9FquTL
pwOxWtg2chVgbSnK0+2bEV/zfBJYUiNGsN6aHbTLmK2q5L2WVUEC314bfVsOJvmK
N+9EA6bIm1ZWiuZ4yIsJ+fKZ1CgAdDuTcHAqhUxbJhcMMHiWrsFRecnT1mwPxN/m
4mt9KLThoDax3u5P0MDR50yK939BuCHeNUgTkciXh1VCkV9EavQh1WWgL66jIAUM
niixRVIxf8BlIlaknnZmKcadoeK3eMQVW/tmTAib2cgkd2nopAKt/+njiHcaK3DI
T995DZIE83KhPw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:50:32 2025 by rpki-client