Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: RjEtwiFurFShtk5kJAlDV/29pcApXajFonYTqvOa8HQ=
Subject key identifier: 76:F6:EF:A2:05:3E:1B:04:93:78:03:92:66:52:4C:BF:D2:D7:32:5B
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0198D65FEF2BF89837947A907ACD4CD49650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: 8pmJ8SgsiVdQws29V37H9NbiSHRgW31ja8N+g1wKS7o=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ef:2b:f8:98:37:94:7a:90:7a:cd:4c:d4:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=76f6efa2053e1b049378039266524cbfd2d7325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:73:4a:ec:13:c8:03:54:59:3d:90:f4:70:
b2:38:ed:ce:39:9b:9e:99:b5:6b:0d:e1:64:7f:2c:
d5:4f:6d:49:c0:ab:42:38:8a:82:8a:64:b5:18:b1:
3f:82:f9:cb:91:ab:f5:22:49:cc:42:49:c8:7e:39:
af:85:b3:18:34:3d:28:79:59:35:31:86:85:6f:29:
c0:7f:e4:66:9a:c1:0c:eb:13:7a:40:fe:41:a7:af:
69:cf:33:4e:c5:55:2f:17:20:46:04:61:12:cf:26:
a6:f4:47:8d:e8:8c:6e:84:47:70:87:49:a5:e5:f0:
71:a2:75:7a:95:be:0d:91:60:55:cc:be:d8:08:55:
54:2a:57:e6:4b:4a:5b:9b:b7:8a:d2:c1:f2:2b:7f:
59:0b:1e:32:92:2d:f1:cf:6a:0d:a5:35:c9:91:58:
78:61:3e:d8:b7:49:79:3d:47:eb:d8:b5:f9:31:37:
2f:1e:42:94:c5:84:73:25:b1:2d:cf:90:99:22:39:
25:b8:5a:e7:2c:a6:04:0c:f1:09:0f:bd:25:01:84:
a6:f1:35:b4:f6:d9:00:6f:87:63:c8:33:0f:40:dc:
f9:50:b0:67:f9:d3:4e:89:31:b3:49:ae:a0:12:f9:
a7:b2:4b:e1:95:43:3f:30:1c:79:96:9f:c9:f3:e3:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:EF:A2:05:3E:1B:04:93:78:03:92:66:52:4C:BF:D2:D7:32:5B
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:47:eb:9b:1d:19:05:e9:b5:47:0d:5f:7e:0d:f3:66:eb:05:
f4:ae:c4:a9:e7:55:75:b6:2c:b4:c8:d3:f2:5e:b5:7d:16:03:
73:a9:78:44:4c:43:3a:3e:c4:81:bc:94:bc:5e:02:db:da:c7:
c9:0f:d1:d4:ea:23:c7:69:9c:ff:e7:5e:89:19:95:bc:1a:a5:
9e:50:02:dd:e9:95:2d:ee:13:6e:9a:4e:57:7d:ee:b0:4a:7e:
8d:fe:b4:eb:42:7b:f4:c2:60:22:7c:c5:bd:80:4f:97:9c:6d:
de:8e:17:e8:c2:e7:3f:00:5f:bf:ff:37:e0:15:4d:76:83:75:
e7:86:76:3a:81:85:bc:a6:d9:00:ca:ee:ec:e7:59:77:7b:1b:
00:e6:91:86:f0:1f:24:a9:d2:0a:e2:17:92:86:09:e9:c6:9f:
23:a0:02:f0:c4:20:48:49:ce:0b:76:5c:bc:83:29:dd:35:7f:
2d:75:b4:70:36:30:de:9c:6b:92:3b:36:9f:9a:54:65:21:15:
e8:10:90:ae:53:3c:c5:09:f4:13:fe:cd:ab:4f:32:d4:09:45:
3b:2f:49:1a:7e:b0:99:45:bf:f6:bc:79:ca:7e:48:6a:47:7e:
eb:81:12:a9:a1:c9:02:cb:4f:a4:1f:4c:b0:79:03:a4:05:64:
cb:02:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:40 2025 by rpki-client