Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: Nc4r1xFwHVZF5D4uvn4oI6KftDd3q8No2NFOMZWxNXc=
Subject key identifier: 3D:E3:2E:84:11:07:59:31:68:CB:2B:E2:4A:AE:84:9D:3E:A3:3C:D8
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 0199FAA17C6036C77D4850220B342636EC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 21
Signing time: Sun 19 Oct 2025 04:01:51 +0000
Manifest this update: Sun 19 Oct 2025 04:01:51 +0000
Manifest next update: Mon 20 Oct 2025 04:01:51 +0000
Files and hashes: 1: 4zImklvcYAVPCVi7B7vGd1c4iRU.roa (hash: nvTLIvIJofO2R9HrAaQpvAKjEbVKJcVlnQNjC2GDKUY=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: q83E+lOs9J9rg12TPjyMnJI3KXbwqZHtUkeVlKqMwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:7c:60:36:c7:7d:48:50:22:0b:34:26:36:ec:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Oct 19 04:01:51 2025 GMT
Not After : Oct 20 04:01:51 2025 GMT
Subject: CN=3de32e841107593168cb2be24aae849d3ea33cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:9b:47:d2:55:d8:dc:45:14:10:55:b8:27:
4b:2e:cb:20:3a:fd:4e:a4:c3:3d:4c:d4:cc:df:0e:
b5:0a:0c:dd:9f:07:3a:4f:6c:54:5c:cb:eb:65:23:
d7:8a:21:d7:c6:1e:e9:df:42:2e:5e:eb:63:7c:c1:
08:9a:58:e1:94:2e:2d:49:c8:9e:49:48:c2:d3:98:
b7:9b:2d:bf:76:fb:6b:d0:31:f7:16:3f:b8:7e:af:
30:df:b0:7e:7e:df:50:d9:77:53:98:b8:07:71:be:
8f:86:5c:a2:c2:f0:70:2e:a4:22:da:09:3c:20:ca:
48:3c:a7:4b:aa:3a:90:e7:a5:51:51:84:ab:3d:8f:
85:7b:16:0a:01:40:85:d0:ac:a9:7c:37:07:c7:42:
2e:bc:e3:3d:4e:f3:9c:50:e2:cf:7c:7e:ac:f0:50:
ea:31:bc:56:27:63:de:6e:45:07:04:fe:22:a0:a3:
2e:bd:65:55:82:5e:7d:93:69:c3:ad:d4:a4:b2:1f:
07:ff:bc:1d:d9:72:80:e6:08:c9:69:55:a9:00:50:
96:10:82:5c:c7:80:0e:e8:b7:a7:28:0b:09:1d:c0:
46:fa:c0:21:cc:f1:1e:03:94:80:74:f5:6b:5a:e2:
e8:61:47:43:a5:fd:1e:f8:96:9d:95:09:69:0b:e4:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:2E:84:11:07:59:31:68:CB:2B:E2:4A:AE:84:9D:3E:A3:3C:D8
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:81:94:42:d8:a3:7e:d8:da:47:ea:4e:9f:a3:7b:ea:24:35:
ee:70:8c:4b:e1:10:c2:10:eb:1d:13:89:dd:88:22:63:13:78:
dc:b9:37:4d:95:3a:ec:5c:7d:ac:82:ac:b5:07:d3:63:02:85:
8a:27:8e:af:cb:c8:04:b8:64:71:79:69:b9:7c:e5:7a:b4:8f:
e6:a0:1d:ee:cc:83:24:d9:80:38:d0:c5:9f:b5:5d:ed:73:76:
a1:99:3f:dc:c1:df:ad:76:2c:ce:88:e3:b7:2b:99:24:80:83:
6d:cc:c8:0a:9b:9a:cc:0e:a7:14:ad:85:eb:4b:5d:c9:f9:5a:
43:b5:db:ed:55:2d:b7:4e:8e:67:b7:8a:4b:1f:77:33:80:f9:
18:44:ba:46:85:15:83:8b:e9:74:da:04:30:ff:e4:08:b7:d8:
35:a2:9f:2a:e0:82:09:51:0d:9f:2f:35:44:5d:6f:03:5c:f2:
50:93:33:04:42:e9:7d:d4:98:e8:7c:f0:d3:d4:61:ee:c2:da:
e6:93:bf:f3:23:b3:80:30:ae:27:bc:e6:ff:69:da:ac:8f:f2:
7f:a3:d3:c3:da:51:ec:9d:7e:19:69:7d:c2:33:f0:cf:68:f8:
13:62:91:8c:4b:fc:6b:34:72:db:b7:ab:c2:a8:1b:c3:6a:ad:
48:7d:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:10 2025 by rpki-client