Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: sS66RyTGEbsJjg8TzuBbYirHhuoIeIodwL7KvKq8EM4=
Subject key identifier: B3:8B:52:C4:B2:0A:A8:21:35:6A:89:7A:8B:6E:7F:DB:28:0A:FA:2F
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0197B6A1A2A1416815CDB1A029F9F4FB9B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: LFx2U1WOFzifZIQbFh7qv65WJgjjoK4viBgItD32KEE=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a2:a1:41:68:15:cd:b1:a0:29:f9:f4:fb:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=b38b52c4b20aa821356a897a8b6e7fdb280afa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:ba:b8:45:54:57:8a:0c:15:4c:c7:a7:e9:
18:8c:3c:25:ec:e5:1d:e1:52:e7:06:f0:69:0b:34:
08:0e:f5:b1:87:f1:36:ac:51:43:97:22:81:78:ec:
76:4a:7e:38:bc:dd:ea:2e:21:d8:67:bc:04:0a:00:
b7:5c:07:3c:4c:31:8d:95:cb:3a:6b:ff:e2:23:62:
fa:d0:20:93:4a:95:58:3c:86:1e:95:fd:c7:ba:ba:
90:c2:b7:33:00:b2:fa:19:89:36:df:42:bc:8e:89:
cb:ef:52:0a:a6:be:1c:43:c6:ac:09:05:00:6e:62:
d7:d4:a8:ac:01:0a:4f:1a:23:66:6c:3d:90:8d:1b:
e0:cf:6d:35:97:36:aa:03:10:6b:e6:cc:16:02:37:
a0:99:cd:71:fa:13:a2:f6:d7:a3:93:cf:57:4c:ad:
f7:ac:c5:e3:bd:9b:af:69:94:4e:b4:d5:d8:4c:7d:
d3:74:42:4c:b3:4f:0f:f2:52:f0:e3:78:08:fc:db:
15:f7:9c:1b:57:e6:dc:21:6b:c6:e8:26:63:19:55:
a1:ea:94:14:84:0a:83:69:1d:ea:02:e0:f7:c1:f0:
5b:f2:5b:f9:f9:01:1d:99:25:a5:f0:b3:55:90:ee:
7f:95:5d:15:a1:f4:43:59:c3:85:f3:3e:65:8f:4b:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8B:52:C4:B2:0A:A8:21:35:6A:89:7A:8B:6E:7F:DB:28:0A:FA:2F
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:32:5a:49:dc:ce:3b:2a:47:01:4c:aa:44:72:27:13:d5:80:
92:46:55:d2:c9:e6:21:02:d6:29:58:32:73:a8:2b:57:d4:37:
b8:3f:68:b1:ab:43:cc:54:7f:57:08:12:24:fa:6c:9b:17:b3:
a0:64:7e:dc:01:9f:f9:6d:bb:50:1a:be:05:d7:4f:cc:7d:78:
2a:ce:04:4a:d6:00:19:8c:63:a9:a4:27:9d:c2:ce:10:64:9e:
9b:c0:0c:5b:23:3c:8d:78:5d:3a:49:fd:3b:60:fb:d9:9d:d8:
ec:d1:25:a2:5d:8d:6c:ff:83:75:81:16:a1:8c:e9:2c:2b:3a:
d1:fc:e9:60:bd:32:19:82:e7:18:38:f0:34:8d:76:a5:05:c2:
ad:b8:4d:a3:5a:86:4a:b3:99:5e:5d:d0:ca:ae:df:3a:6a:bf:
de:f9:d4:85:70:e8:8f:86:fa:72:0b:16:9e:c3:5f:58:5f:bb:
65:dd:9e:19:1b:05:45:66:bc:5f:2e:42:64:71:d3:03:f0:84:
0d:c4:30:04:0d:a2:bf:83:51:d6:ce:13:02:49:58:a3:4b:50:
60:db:0d:2e:70:9a:7c:f0:40:bc:53:34:89:25:93:29:17:1c:
bd:e4:9b:74:6d:d6:52:f2:52:a2:21:68:af:db:ea:3d:89:0f:
03:e3:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:01 2025 by rpki-client