Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: 9BgF/tN8m8DE/VYpd4UROKHQtwYfdhtRYehXeRNhcQ0=
Subject key identifier: CB:0E:70:65:8D:C1:73:73:AE:E9:52:78:66:92:E9:0D:2A:99:B2:1B
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0197B77C87E8F83259BE4CB913829775E632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: OndplzVMvDzle1RPGNn+Jshs7UYtkNqEmNqBCzbNRrQ=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:87:e8:f8:32:59:be:4c:b9:13:82:97:75:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=cb0e70658dc17373aee952786692e90d2a99b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:70:09:a1:af:ac:c8:38:09:bb:66:5a:7b:
0e:75:58:81:f2:ff:7a:30:52:91:34:18:21:4f:ef:
ba:fa:24:04:b7:ad:09:05:a8:f5:93:7a:26:cf:ac:
ae:fd:75:96:30:32:f9:17:31:f6:79:5d:3c:1c:12:
47:09:15:97:cb:86:22:81:a5:50:1d:23:be:ab:45:
b3:92:02:c8:c5:54:9f:06:72:bf:a0:68:ee:bc:51:
67:53:d2:52:3c:3b:3f:2b:7d:98:c6:f5:f0:30:2e:
29:39:ed:b4:03:59:c0:fb:f2:7d:48:a7:00:57:7c:
a4:56:fa:0a:a7:05:d0:61:5c:32:74:e0:52:47:8c:
89:e1:44:59:4d:26:98:24:10:79:69:c5:cc:90:4b:
21:c8:a2:6f:8c:8b:cc:2c:ee:ee:fc:47:d8:a8:d2:
88:f4:5d:f1:47:ac:f5:75:27:60:91:90:86:4d:91:
07:3e:28:f5:52:d8:80:c8:34:41:c2:02:85:72:2d:
20:81:d4:be:75:5c:8d:4f:07:a9:7b:11:0b:40:e2:
5f:72:9b:2e:fb:11:42:09:50:f0:95:3a:8a:1c:23:
7d:4f:2b:90:f0:cb:7f:c2:bd:4c:1d:ae:6d:d8:23:
2a:6c:c6:03:d8:04:5e:b3:ec:ef:f1:b2:d8:bc:e6:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:70:65:8D:C1:73:73:AE:E9:52:78:66:92:E9:0D:2A:99:B2:1B
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:4b:e2:e7:8a:2c:16:3c:05:cb:ce:5e:0a:02:ea:10:97:
2c:02:f7:9d:cf:d1:2c:2b:9e:68:a7:4b:7b:36:99:e4:fe:db:
92:e7:ab:c4:22:fb:04:06:2c:0c:ba:b3:ed:63:83:a1:ae:21:
6d:6e:72:8e:9a:4a:53:34:64:8b:01:56:c5:3b:86:43:3c:58:
5f:13:a4:c3:c6:c0:4a:52:6b:1e:07:8e:b9:61:cb:39:12:aa:
e5:86:69:4b:a8:84:47:15:5e:b4:8e:04:7f:6d:f4:e1:70:05:
3c:98:5d:f3:3b:f6:b0:66:f8:0b:55:64:62:af:d5:5d:fa:4a:
8f:dd:7b:25:83:0c:4e:61:76:9c:8a:14:8d:8b:bc:a8:fb:bc:
55:0d:f3:1c:71:a3:32:4d:f5:a6:c6:77:2a:84:9a:49:a6:3e:
cf:82:de:96:5d:c1:b9:10:8a:6f:48:12:0d:be:73:b3:70:9c:
74:ae:0e:6f:5f:0d:20:cc:6c:69:04:5d:71:53:20:68:fb:08:
99:93:60:03:00:86:2c:fa:b8:43:2b:ed:e3:c9:cf:32:13:22:
60:4b:5e:5a:8d:b6:17:b5:f8:b4:d8:05:87:e1:13:ab:ab:91:
e8:12:2d:5e:d6:af:37:11:21:df:63:40:be:80:b2:43:a9:f0:
c9:7b:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:43 2025 by rpki-client