Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: HY9croz70CFE93AxqUaDK4bqOgB/DtwTqdqHtNJIcWo=
Subject key identifier: 65:4D:9B:62:35:13:A7:0F:5A:F0:0B:1F:05:B7:7B:2F:78:05:74:78
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 01974A4391264393382BA5169B17D35AE2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:31 +0000
Manifest this update: Sat 07 Jun 2025 12:00:31 +0000
Manifest next update: Sun 08 Jun 2025 12:00:31 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: nk5Ar4rlAKIEggWsNHvnx5smtwx/xZpwoPHf47I0srQ=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:91:26:43:93:38:2b:a5:16:9b:17:d3:5a:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Jun 7 12:00:31 2025 GMT
Not After : Jun 8 12:00:31 2025 GMT
Subject: CN=654d9b623513a70f5af00b1f05b77b2f78057478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:0f:be:00:bd:10:ea:3f:bf:bb:6a:5f:fb:
d3:37:2d:ea:5f:b8:4b:31:02:80:17:ca:3c:dc:07:
de:34:cd:65:4a:d4:46:9c:47:88:18:f8:be:5e:b8:
d1:ba:3e:a2:16:7b:29:5d:d3:55:01:04:55:6f:a5:
ed:8b:21:97:11:c7:cd:a3:43:ea:00:81:67:36:f9:
78:8a:ea:fd:0c:f8:cf:6f:0b:a3:07:f5:b1:77:24:
65:06:2a:44:fe:5a:73:90:e4:23:65:16:05:d2:78:
33:9d:bc:c1:3e:a2:5a:7d:75:2d:46:4a:e6:03:89:
30:43:35:42:ad:1c:f7:1e:ee:c4:7e:9b:ec:0c:f8:
67:ef:f3:27:cb:fc:26:43:1f:d5:d6:c4:a9:59:3f:
5c:46:a9:e9:34:75:95:d0:67:92:d0:a1:fb:82:fa:
a4:ce:5a:88:e1:9d:7b:c2:23:6e:c0:66:48:76:e1:
ad:58:e9:a2:ad:57:b7:5d:eb:a3:5e:47:7e:4d:34:
b0:c0:33:04:43:f6:a2:2b:71:e4:ef:f2:b5:ed:f1:
21:cb:37:41:19:a4:04:08:cd:3d:56:1a:9b:09:af:
d3:48:db:6b:e5:e0:55:e1:bf:dc:82:d0:b8:d1:15:
96:dd:aa:ce:e0:a7:34:83:a6:45:8b:de:79:09:e5:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:9B:62:35:13:A7:0F:5A:F0:0B:1F:05:B7:7B:2F:78:05:74:78
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:8e:98:f0:6c:da:7c:f0:eb:0a:18:c9:86:96:cf:fe:fe:
3e:1f:ce:88:b1:f4:1e:fb:4f:cd:41:32:5d:24:0e:6c:ad:47:
4d:6e:22:c9:5a:cd:e7:85:dc:3a:7d:3d:c1:ad:83:f9:6e:f6:
b7:1e:af:c8:5a:a0:f3:c4:c8:68:9a:49:36:24:69:ee:25:34:
91:fc:08:c9:cc:74:0f:89:14:dd:dc:68:61:a6:da:fc:71:23:
83:c6:6f:62:c6:1d:50:e3:81:8c:a7:8d:3a:69:6e:92:bf:45:
e0:2f:2d:24:dd:4d:f8:fe:38:43:27:f2:e9:af:04:64:5e:28:
25:32:f1:eb:88:58:15:93:a7:ea:14:d0:5b:db:40:c2:be:48:
c8:a0:e1:b1:c0:53:9b:0b:6c:12:ba:ce:69:dd:5a:c0:5e:d9:
67:e6:75:a6:06:cf:f6:e8:46:ef:c1:1b:1b:b0:86:bd:92:03:
31:da:19:56:0a:29:65:51:79:c1:70:13:18:1e:b0:7a:9a:e1:
87:53:44:fc:36:ff:3f:48:24:5f:4c:40:00:13:0b:12:29:e3:
f7:46:c3:87:37:13:da:08:e5:de:91:bb:3e:5c:0e:2e:36:e5:
d9:68:9e:f8:d2:93:1a:c2:a1:0a:7e:09:88:16:68:13:5a:d0:
94:81:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:07 2025 by rpki-client