Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: Gp/DJ71FAoPbgPY74DntiVN7FKX80nAHDo4gN1t0OOY=
Subject key identifier: A7:EE:3D:2F:D4:3F:B7:33:52:A7:60:1E:FB:4B:64:FC:00:69:22:0C
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019A71B8B4827146DCBD8F095D98E1E35398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: cQOiXTCBswYmZXFSoshC6xCKmjX8nGVDORfSW7WwnA8=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:82:71:46:dc:bd:8f:09:5d:98:e1:e3:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=a7ee3d2fd43fb73352a7601efb4b64fc0069220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:60:42:5a:be:a6:da:1a:42:27:26:96:64:
dd:51:88:29:c5:64:da:98:1f:50:fc:33:39:38:7b:
53:5b:fe:c4:9c:cb:df:b5:4a:bc:6a:45:28:fb:92:
b3:c2:92:eb:5d:14:ac:7e:93:7e:af:35:27:15:11:
ab:64:14:9d:d7:4b:b2:46:fd:9a:f8:59:22:03:ec:
d5:c1:e4:9b:1e:6f:4a:f6:70:54:12:66:fb:79:f0:
02:c0:38:c2:2f:8e:32:7d:21:cd:c3:f9:6f:17:c2:
44:e7:9a:b5:48:bc:ae:b9:e2:47:5c:00:1e:28:08:
c9:73:74:69:8c:28:08:42:c6:97:64:a8:70:0a:cb:
22:87:19:5a:3f:7b:89:dd:a5:db:31:e6:a8:8c:c2:
3e:ca:a7:00:30:6a:a7:52:12:66:4e:24:95:52:7b:
21:a0:08:2c:d4:9d:5c:ba:1b:cc:77:55:0a:81:11:
e0:2f:9a:6a:c7:57:b2:ca:4b:50:7f:7d:c2:8c:9e:
ca:48:95:cc:38:c5:57:99:42:23:51:bc:83:dc:06:
ae:79:f2:1a:93:81:d0:8f:3a:da:22:c7:8b:30:a5:
e2:e1:4e:3f:d2:7a:25:18:14:37:4e:64:77:bf:36:
1e:85:b2:4f:86:a5:a8:91:6a:2b:63:26:ab:df:60:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:3D:2F:D4:3F:B7:33:52:A7:60:1E:FB:4B:64:FC:00:69:22:0C
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:3f:d7:48:4e:47:00:9d:9a:f8:ef:f5:bb:c3:df:0a:76:
79:9b:8f:df:55:48:07:ee:fa:88:dc:5d:ed:0c:24:bf:7e:f9:
69:ed:03:7e:4c:29:14:a3:cc:56:2e:bf:53:4a:55:ce:21:d9:
ea:ce:df:2c:0e:9f:28:52:4a:f5:74:b6:c8:21:e4:11:8f:a9:
8e:e4:5e:e2:8e:7e:01:1d:a2:0a:80:cd:09:8a:25:4f:2e:4d:
0a:d5:ad:58:cf:be:32:39:d1:31:7f:82:80:cb:c1:22:2a:ec:
41:4a:d9:e6:dc:31:29:11:78:12:0d:21:31:19:8b:1b:20:e6:
93:35:5c:1d:42:20:63:7a:ea:e8:9b:3b:79:6d:01:65:ee:85:
86:07:19:b3:31:54:91:fc:31:aa:97:26:fc:4c:50:77:a1:8d:
56:42:3b:d1:54:2e:04:ab:42:49:b4:62:d7:ef:e2:5d:06:70:
b6:c4:7a:5c:1f:0b:d2:b7:79:61:31:bf:11:e7:52:e9:9b:ba:
34:c8:e8:b7:73:2a:de:a4:9a:2a:f7:ae:a0:02:a1:12:6f:8e:
66:c6:41:43:b7:3d:3c:e3:5e:36:31:0e:62:76:f8:ac:3d:9c:
22:31:31:d0:01:04:67:23:ee:b0:5f:ac:58:62:55:1f:47:0c:
ca:0f:69:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLSCcUbcvY8JXZjh41OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi
ODc4ZjMwHhcNMjUxMTExMDcwMjAxWhcNMjUxMTEyMDcwMjAxWjAzMTEwLwYDVQQD
EyhhN2VlM2QyZmQ0M2ZiNzMzNTJhNzYwMWVmYjRiNjRmYzAwNjkyMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufBgQlq+ptoaQicmlmTdUYgpxWTa
mB9Q/DM5OHtTW/7EnMvftUq8akUo+5KzwpLrXRSsfpN+rzUnFRGrZBSd10uyRv2a
+FkiA+zVweSbHm9K9nBUEmb7efACwDjCL44yfSHNw/lvF8JE55q1SLyuueJHXAAe
KAjJc3RpjCgIQsaXZKhwCssihxlaP3uJ3aXbMeaojMI+yqcAMGqnUhJmTiSVUnsh
oAgs1J1cuhvMd1UKgRHgL5pqx1eyyktQf33CjJ7KSJXMOMVXmUIjUbyD3AauefIa
k4HQjzraIseLMKXi4U4/0nolGBQ3TmR3vzYehbJPhqWokWorYyar32AG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfuPS/UP7czUqdgHvtLZPwAaSIMMB8GA1UdIwQY
MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut
OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4
LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd0/10hO
RwCdmvjv9bvD3wp2eZuP31VIB+76iNxd7Qwkv375ae0DfkwpFKPMVi6/U0pVziHZ
6s7fLA6fKFJK9XS2yCHkEY+pjuRe4o5+AR2iCoDNCYolTy5NCtWtWM++MjnRMX+C
gMvBIirsQUrZ5twxKRF4Eg0hMRmLGyDmkzVcHUIgY3rq6Js7eW0BZe6FhgcZszFU
kfwxqpcm/ExQd6GNVkI70VQuBKtCSbRi1+/iXQZwtsR6XB8L0rd5YTG/EedS6Zu6
NMjot3Mq3qSaKveuoAKhEm+OZsZBQ7c9PONeNjEOYnb4rD2cIjEx0AEEZyPusF+s
WGJVH0cMyg9puA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:14 2025 by rpki-client