Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: waJUolZaU7TPkOkzMFBWYpMHxla+fv84vaKIiiSaFE8=
Subject key identifier: 08:13:6A:82:5A:BE:69:8C:D6:CB:4A:2F:BE:07:C5:6C:B6:EC:C5:52
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 0198D5838420C81281A54BFACDBC5AE3FF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: rscsvVxRxUbda4MWg2/dARK1jJzTrgpeTmfTepCWBME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:84:20:c8:12:81:a5:4b:fa:cd:bc:5a:e3:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=08136a825abe698cd6cb4a2fbe07c56cb6ecc552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:8c:b0:fc:1e:8a:89:7c:be:2c:5c:09:6f:
ab:b8:54:d2:41:4d:b5:d8:ac:a6:f0:bf:9b:62:e3:
7c:ed:ae:25:91:25:5e:b3:9d:7f:81:ed:a3:dc:73:
e8:9e:6b:d5:5f:c8:73:13:89:ec:1b:25:6e:a2:f5:
eb:40:71:4b:b4:4d:ae:ae:1e:63:bb:a3:6d:1b:f5:
03:99:e8:0e:11:6e:d8:43:da:b1:af:f3:e9:e1:5e:
87:a2:6b:54:84:61:6c:94:8a:17:4f:89:d2:57:51:
30:0c:22:a4:18:90:42:77:2b:cc:eb:51:60:7f:b6:
95:4d:ce:31:a1:5c:c6:32:11:38:40:29:0c:5d:a6:
71:a0:64:15:36:da:c0:e4:f6:d7:d2:4a:63:02:d6:
57:be:31:36:17:11:c9:df:ba:b9:8c:7c:57:a7:ed:
97:b6:fc:07:b6:60:37:de:86:dd:2d:f3:ee:30:82:
66:5b:af:91:dc:38:69:1e:33:db:2c:6d:3a:28:d6:
af:66:46:79:aa:54:63:11:bc:64:ca:f0:95:fe:17:
aa:81:6c:da:60:fa:f0:1c:be:44:e1:eb:d9:51:ca:
d4:6f:c5:4f:c6:eb:09:bd:9b:91:cb:0a:a8:51:34:
46:b7:28:55:52:f1:8f:01:f3:02:c5:c5:98:1b:f5:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:6A:82:5A:BE:69:8C:D6:CB:4A:2F:BE:07:C5:6C:B6:EC:C5:52
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:5b:df:b9:52:f4:f3:b4:3e:4a:b4:0f:0c:b3:ed:09:0c:
fd:63:1a:c2:fd:c0:6c:73:e2:ea:d5:57:c9:57:b4:5c:3e:6f:
1c:eb:de:82:d9:d1:2f:56:1f:d4:c8:af:21:48:2d:d9:74:e2:
06:d3:e0:7d:9e:0f:33:75:bd:5b:b3:68:3f:3a:66:a6:c2:a9:
cf:7e:64:92:44:ee:31:bc:c4:31:6c:0b:91:02:50:25:86:f1:
fd:6d:2d:6b:7c:23:5b:ec:7f:bd:d8:e8:f9:f9:49:92:07:d5:
ee:f0:2f:08:af:e4:01:31:b6:d5:b8:43:fc:33:1a:1a:9d:36:
10:23:d1:f7:20:7b:d2:3c:71:3c:21:c3:ae:41:cb:26:1a:24:
d2:71:00:cc:9c:4d:b5:7e:f3:24:d7:b7:ff:13:04:df:86:b4:
27:68:c6:b3:6e:d7:dc:59:da:cd:13:4e:d4:05:c6:b4:b2:60:
6a:c4:a5:59:87:f2:e5:94:7f:87:e1:1b:71:28:1b:72:3c:be:
ce:8a:46:b1:39:06:85:cf:1b:e9:20:c5:8a:ea:54:5e:90:29:
18:f6:ee:8e:39:37:fb:03:ee:c5:58:ea:ab:d2:15:8b:a0:d6:
85:29:bb:44:46:29:65:9e:b7:87:91:2a:d9:5a:63:d5:12:4a:
a4:cc:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:00 2025 by rpki-client