Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File: NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier: UGEiwKAzkrHmvykyFzCHeTPxQLtwO6kEa8zHoz/4sqY=
Subject key identifier: D2:2C:0F:B8:FE:45:BA:9A:0B:22:AB:D0:A4:9C:DA:BB:92:EC:AE:59
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer: /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial: 019A71B8E696E0EEA2C07112447587F5C8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number: 1672
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: w20kLkewYn5DoPRlTtoxiXnq49CDGLuV2G3nxU382Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e6:96:e0:ee:a2:c0:71:12:44:75:87:f5:c8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=d22c0fb8fe45ba9a0b22abd0a49cdabb92ecae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:ff:05:8f:c6:0d:4a:a2:6d:ef:f7:3d:c8:
10:51:86:b8:e4:57:25:ae:df:03:e0:2c:5a:2e:77:
ff:9b:00:58:52:6b:fc:cd:17:6e:ed:32:ad:89:2e:
e4:e8:2f:3a:79:7e:ab:c3:0b:33:85:4f:e5:0f:be:
87:3d:c4:cc:80:31:98:ac:73:35:da:51:36:45:b3:
44:16:76:18:95:5d:23:00:8a:b0:06:e7:3d:d9:cf:
b3:14:07:8f:d1:ea:31:09:7d:db:71:d5:fb:35:1c:
66:8c:c0:fd:b3:52:c8:60:15:82:85:9d:0e:13:a0:
cc:99:34:09:cd:5a:1d:95:c5:d1:71:71:65:4a:19:
30:2b:21:74:b7:a7:71:15:1e:ee:58:be:3c:ad:bf:
91:17:6d:dc:c4:34:27:86:85:a3:47:bd:52:cd:82:
dc:7e:56:29:58:c7:09:1f:74:f5:8d:12:36:36:c0:
36:07:c2:db:08:0e:01:59:9c:7b:e0:bf:3d:51:00:
43:bd:65:9b:85:b1:f1:8c:7e:fa:32:aa:bc:79:f7:
12:c0:7c:f3:ba:c5:c2:27:2b:cf:b2:4d:09:9b:2c:
08:54:7a:ab:51:4a:c7:81:50:92:15:27:eb:7e:02:
16:ad:ef:55:75:9a:ed:ac:dd:f4:5f:d0:9e:91:eb:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:0F:B8:FE:45:BA:9A:0B:22:AB:D0:A4:9C:DA:BB:92:EC:AE:59
X509v3 Authority Key Identifier:
keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8e:b8:20:5c:64:0b:8f:51:75:4e:8b:2a:ac:e3:42:7d:69:
81:61:66:f0:5f:2d:75:5d:d0:39:7a:d0:c5:54:cf:3a:37:91:
2a:3c:50:7a:f9:8e:42:b3:ea:33:9d:a5:88:33:35:07:2c:f0:
74:42:64:63:81:e3:b4:52:8d:98:b2:2b:7d:07:f0:82:9a:3d:
a5:a4:ce:0c:00:44:dc:ab:8d:19:94:ad:b8:30:09:a9:1c:74:
d7:d9:b9:c6:59:e3:f6:f2:c0:45:3c:97:30:4a:77:51:76:a9:
b3:fc:52:7d:49:b4:34:ef:af:f7:5b:ff:88:b6:f2:3c:8b:5b:
00:d5:bd:3b:52:89:bf:e1:66:89:4d:77:6a:28:9b:59:6a:86:
16:5d:ec:ff:bf:cc:2e:c0:84:b7:48:1e:8a:4a:fd:6a:5a:d3:
7a:a5:62:e9:7c:a7:69:34:2e:1a:5d:5f:31:16:a4:ed:e7:b9:
f4:36:7b:aa:2c:7c:2a:ea:1b:0d:cb:01:98:c5:44:9d:61:7e:
a7:e1:62:0c:32:79:51:ce:1d:b1:c6:c8:ef:4d:3f:f9:ac:37:
5f:bd:3b:a4:23:35:00:78:90:3f:3b:7a:3a:47:5e:7d:67:c5:
a2:f9:d4:43:2a:97:2d:77:b0:bc:9b:93:74:30:48:bd:5a:b6:
21:dc:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:22 2025 by rpki-client