Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: CTGtRg9ZunZPbP8KR2Evt3ZXuxVSqOMYyQ1hhLDDcbI=
Subject key identifier: F1:14:03:BD:A9:39:5E:60:64:C9:15:DF:E3:C0:A9:7E:6B:30:D7:B5
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 019A296796E3D4145CCDF2AB2AA37840FE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 06:00:45 +0000
Manifest this update: Tue 28 Oct 2025 06:00:45 +0000
Manifest next update: Wed 29 Oct 2025 06:00:45 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: Nz8CLHXN3iASKMu1AgV+SLwV2MAzaxMcy5VJrDgAbWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:96:e3:d4:14:5c:cd:f2:ab:2a:a3:78:40:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Oct 28 06:00:45 2025 GMT
Not After : Oct 29 06:00:45 2025 GMT
Subject: CN=f11403bda9395e6064c915dfe3c0a97e6b30d7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:20:b3:33:2d:c5:d7:81:69:5d:3d:df:18:
c4:4e:0e:ec:f2:0f:5c:cb:0a:ac:04:bb:69:47:d4:
ad:93:31:b6:9a:55:59:27:1f:8d:66:ec:c7:ad:8a:
48:05:1b:79:a7:77:7e:e7:9b:61:23:0c:4a:88:c3:
27:56:4d:78:69:57:a9:da:95:b6:f5:f6:a7:08:a8:
da:5d:42:9c:54:24:a0:74:9c:f5:82:86:82:ea:db:
c2:1e:6b:75:0d:3a:a7:5e:d7:74:9b:5c:10:5e:ce:
28:79:c6:c0:a5:2c:f5:ed:99:e1:fa:53:5a:8b:a5:
68:1c:af:d8:75:1c:2f:ec:16:a1:ba:1f:f6:a4:02:
fd:13:2f:3f:6e:ad:80:a3:e0:9c:5b:53:4d:c7:dd:
80:d0:7d:05:da:0f:9b:27:d2:6a:7e:42:9d:91:04:
41:81:28:a7:bd:0e:c2:50:6d:a0:6f:6f:96:e9:63:
ac:7c:f0:26:ad:6b:78:eb:3b:5d:9d:fe:5e:f4:c6:
9d:0a:7f:3c:a7:ce:d6:24:11:7d:ea:63:fb:55:d6:
06:ff:ae:bb:c9:af:d0:7f:5a:ce:f1:c3:7f:fa:9d:
a1:0d:5c:7f:bc:1e:4c:3b:f6:46:f1:c6:87:d5:f1:
2b:04:7b:51:91:70:b6:bd:28:fd:5c:0a:9c:a3:be:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:03:BD:A9:39:5E:60:64:C9:15:DF:E3:C0:A9:7E:6B:30:D7:B5
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9f:df:67:ec:4b:0c:18:ef:ab:ea:bd:d3:1e:b1:58:95:65:
7f:b2:ea:16:87:34:c9:66:27:cb:f3:06:7d:2e:0e:ef:c2:67:
53:c9:a2:fd:5f:37:eb:4e:c9:ed:49:6e:0b:5f:40:0e:53:9e:
68:f0:b5:b5:3c:22:2c:63:84:a0:08:c3:a2:f9:f8:1f:08:d0:
ec:b3:fc:d8:4a:21:d9:eb:e1:fe:85:1c:97:c2:6c:35:54:09:
e6:31:72:c3:e4:6f:34:9d:75:68:6c:fc:7c:01:69:e1:12:fe:
92:f4:00:78:b0:9d:eb:4e:2e:1f:2f:a1:61:de:27:f4:ae:e5:
33:c5:43:a9:38:c4:97:79:b5:16:08:a1:b4:fb:1f:47:dc:07:
ac:ef:5f:14:7e:cb:29:bc:92:e3:e1:8b:96:0b:d6:e8:ea:59:
15:73:28:66:5d:f3:35:0d:15:79:f0:b1:12:17:74:78:fc:4e:
b6:7d:90:ea:6c:6c:00:d5:93:22:34:0d:b4:fd:4e:fd:a6:63:
f4:46:8b:4a:87:85:cf:06:e2:80:2f:e9:9c:ee:73:ea:ba:4f:
d7:c9:ac:46:73:dd:cf:02:80:a5:89:45:68:b6:60:5c:6c:63:
ee:05:3b:50:bc:e4:df:8c:c2:5d:0e:b7:b6:a6:a4:b4:51:33:
b4:9b:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:42:33 2025 by rpki-client