Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: 2XStPfwj0ZWxCndLBW8EKCbE8VFX26vehz60SY6UN1k=
Subject key identifier: 2A:CB:13:09:EE:B2:84:6E:8F:C4:52:66:59:69:15:7A:0F:50:7F:07
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 0199FCFD536CE8C77E4843A58AA0D78FFDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: pQ40DbjSjtFYyMce0ZbeXwyJEc/TRiUKk9Is0B7bwck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:53:6c:e8:c7:7e:48:43:a5:8a:a0:d7:8f:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=2acb1309eeb2846e8fc452665969157a0f507f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:0f:b8:b1:d7:91:f4:5e:ba:c1:8e:31:23:
45:ad:ff:2a:fd:07:a3:81:13:20:ee:e6:5e:29:10:
17:c0:cc:54:98:cf:96:97:50:92:ee:51:1b:ad:5b:
9d:36:e1:70:6c:0f:c9:2e:9c:9e:10:17:cd:9d:e3:
9b:f6:f4:34:8f:44:a7:76:c1:6b:b9:c2:6f:92:98:
79:f5:95:4f:f0:57:37:bf:7d:27:c4:3f:fa:d4:1a:
a0:5d:bc:47:5a:04:13:00:48:39:9f:ba:e6:05:5c:
f5:fe:2e:54:c2:63:84:d9:4d:b5:8e:8e:a2:06:36:
08:14:e8:3f:9e:7a:45:07:c8:22:cc:12:e8:68:d5:
e1:02:6b:2c:a2:7e:2b:9a:9b:a6:42:f2:a6:c7:f2:
9c:82:cf:8a:53:49:ce:df:4c:7d:b4:f1:bd:09:b3:
a9:07:08:75:47:28:b0:8f:cc:0d:ff:b6:b5:78:51:
de:b5:b7:cc:c3:a1:47:a6:32:e6:7a:61:64:6a:32:
58:bb:7c:63:2c:b5:ae:0e:6e:97:4a:43:ce:6a:92:
6f:76:4a:ee:96:17:5c:ec:f9:7c:15:cf:ca:85:4e:
14:23:c6:62:ba:b0:2a:7a:e3:dc:86:af:0b:ab:cd:
8e:64:30:1b:3c:33:57:b5:5c:b0:49:cf:a1:81:3a:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:13:09:EE:B2:84:6E:8F:C4:52:66:59:69:15:7A:0F:50:7F:07
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a8:9b:5b:71:ca:50:0f:5e:dd:16:74:4d:19:37:a6:08:c3:
d7:6d:f8:90:9a:82:8e:3a:55:5e:aa:c1:65:23:6f:f7:30:c0:
e8:ed:b1:91:00:99:60:bb:a3:c2:89:c0:25:b5:32:c1:91:3f:
ec:6d:f7:d7:75:cd:cb:ec:87:83:82:ef:57:bb:1b:0f:b7:9a:
e0:7e:91:8b:50:85:db:89:bd:b3:5b:b2:04:5f:89:57:b2:12:
5d:5b:5f:39:32:d5:91:a0:79:1f:5a:e1:06:0e:65:58:9b:7f:
7f:35:5a:c1:26:95:dc:b0:3b:9f:91:42:f5:14:87:46:54:de:
d6:f7:bb:a5:d9:ed:41:8a:65:62:a0:55:99:fb:93:85:76:5e:
6c:b6:dd:d0:82:fd:94:90:73:5a:6d:55:0e:97:82:97:fe:24:
d9:a2:ed:a8:ab:19:6b:85:ea:78:6b:fb:80:99:d1:fb:e7:89:
e4:60:d8:e5:ce:26:95:c4:5c:42:27:88:4d:a4:f0:c9:aa:0d:
cb:e8:07:17:b6:62:9e:83:16:ab:1d:7d:5a:c6:7b:af:44:2e:
e9:5f:81:55:84:1b:b7:66:32:9c:ef:ad:62:bc:9d:45:ac:db:
46:96:4a:25:d8:92:4d:f8:81:a0:08:0c:4b:26:b1:73:4e:f1:
45:56:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:07:32 2025 by rpki-client