
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: 9+l0PMp5N2o3X5Ob5Km47RTjCHNebInLPzNWbXw2AgQ=
Subject key identifier: C7:92:DA:F4:33:2E:B7:CE:63:92:47:A9:AC:93:AF:70:F9:88:28:BC
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0199FBEBD4FE8D827E8EF02D01D1A71CCB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: oOXXE9AAyKnOV6fLZuEqNXZ5lMHwL1qDLLt+nPoVPv8=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d4:fe:8d:82:7e:8e:f0:2d:01:d1:a7:1c:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=c792daf4332eb7ce639247a9ac93af70f98828bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:c8:19:8a:fd:0b:97:eb:f8:5e:98:e0:3f:
c5:ae:3b:32:ad:e5:45:54:5e:8a:43:02:67:f0:35:
5f:cc:83:c2:f1:64:e7:38:f3:5c:f4:23:ea:48:e7:
74:54:48:a5:05:7d:8c:b3:33:b5:4d:eb:5f:33:f0:
c2:3e:49:58:85:89:ce:d5:08:ba:6a:8c:cf:d7:d9:
2c:4f:c7:40:e3:01:5e:24:c6:cf:69:bd:ce:c0:19:
0d:3f:ae:3c:27:10:e8:56:76:ba:8c:78:3f:40:ee:
f6:4d:b2:55:72:da:2a:09:8f:dc:26:ad:2a:3e:67:
6a:23:09:8f:92:c4:f4:66:2d:ab:1b:0d:fe:f3:32:
28:28:be:a0:9a:57:d4:65:59:29:64:a7:96:8c:b2:
b4:79:7f:6c:64:0a:b1:e5:37:28:32:91:fc:0c:c9:
ac:a3:ed:5a:03:36:3a:e8:62:b4:e3:14:f0:ee:61:
40:28:ba:85:ab:23:6c:41:a4:29:2b:9b:ee:22:aa:
cd:b9:67:f2:c3:20:91:92:73:f3:7b:71:d3:00:d8:
13:84:53:e5:84:6f:02:74:bb:6d:85:c7:1a:2c:0d:
5e:8d:12:f4:4d:79:b5:26:23:5f:65:04:08:08:b1:
06:67:a1:49:c7:af:6f:b7:06:8b:6d:36:ed:0c:5f:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:DA:F4:33:2E:B7:CE:63:92:47:A9:AC:93:AF:70:F9:88:28:BC
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:47:be:5b:a8:a4:55:7c:b0:eb:76:ab:18:0f:da:80:f5:
97:bb:c2:9e:d8:1c:2d:5a:af:ec:49:66:a7:91:e7:29:66:66:
8f:5a:68:e2:3f:08:d9:2a:39:41:eb:fd:1c:89:49:5a:99:cc:
4f:82:b2:ce:47:5f:1c:91:b0:a1:28:d1:3d:38:56:01:33:5b:
45:c1:aa:8a:d6:2e:90:a6:4e:bd:ad:ec:4d:bb:9a:d6:dc:f2:
61:d8:83:d5:26:4f:43:7e:2d:fd:58:7b:cd:3b:99:8b:91:f9:
23:e8:27:58:2d:fe:1a:d2:bc:c2:51:73:a6:12:76:2c:be:db:
43:d1:09:c7:6d:a5:d2:22:15:b7:6c:95:93:67:6d:33:7b:b0:
a8:83:12:21:a7:cf:42:eb:72:9a:e5:1a:c4:7e:03:7a:e9:fb:
0f:b3:d6:73:3e:48:57:a6:42:29:8a:cb:3b:23:fc:e6:03:0b:
5e:f5:1e:63:eb:a7:d4:6f:63:35:b1:68:4e:b9:7a:5e:51:4b:
ad:82:71:74:59:86:9b:8d:97:8b:52:21:81:4f:8d:dd:67:f8:
47:2a:ec:8b:c4:03:1c:a6:2f:77:0b:94:a6:3d:4b:2d:85:9d:
e5:c3:a2:70:af:da:20:b7:3a:49:c7:1c:d7:b3:cb:46:e5:d5:
dc:da:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client