Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: roGs124GK63quxybiHtqyzTZk8p9yocrkKa7gK4KIzU=
Subject key identifier: 46:E2:D3:71:26:09:B1:32:62:1F:ED:3C:C9:4D:87:E7:24:64:D7:3D
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 01993236261BEDFCE3BBA14630A6B6324C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 06:00:33 +0000
Manifest this update: Wed 10 Sep 2025 06:00:33 +0000
Manifest next update: Thu 11 Sep 2025 06:00:33 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: VizGe/IBT8EXTziayxQRuP7DPdzBwcQ7EOCDGzMg+qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:26:1b:ed:fc:e3:bb:a1:46:30:a6:b6:32:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Sep 10 06:00:33 2025 GMT
Not After : Sep 11 06:00:33 2025 GMT
Subject: CN=46e2d3712609b132621fed3cc94d87e72464d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:8a:9f:8d:03:36:e2:8d:86:24:b1:fd:59:
5b:38:50:f4:5b:87:4e:68:22:26:72:52:eb:d7:7e:
69:2d:24:21:46:ea:35:db:97:fe:1f:f8:ec:fa:13:
44:07:8c:a4:6a:e3:a6:89:e0:e3:b0:d2:a7:98:be:
58:c6:a2:6b:14:cf:5a:b8:88:ed:3f:d7:96:1f:02:
9e:49:4c:65:33:27:f8:e2:93:30:dc:cf:41:33:c7:
fd:6f:5a:cd:60:5d:fc:46:ab:53:ce:fa:66:f7:c0:
4d:74:3b:4e:14:8b:da:b4:d5:44:46:ed:f4:b9:cd:
c1:b7:4b:c8:27:62:97:8d:01:8d:a6:ba:60:44:c8:
5a:9f:3c:17:d7:cc:e0:ff:7a:8f:2a:53:3f:12:4b:
60:41:c9:3b:fb:3d:38:73:b9:f2:58:9d:06:ce:56:
4a:2f:c0:5f:6d:19:70:2b:59:80:93:18:0b:33:7c:
45:31:4a:35:0d:4c:fa:e3:54:6d:d3:09:05:5b:29:
53:c1:39:2d:4b:af:e3:5e:7b:34:8b:b6:3b:09:9c:
52:25:1c:98:e8:8c:3c:4c:97:50:02:aa:85:0c:1b:
03:38:fc:2f:c2:6c:7b:d6:af:70:de:d7:f8:b6:59:
de:a4:94:35:69:5d:09:05:74:8c:55:4f:e2:d5:ab:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:D3:71:26:09:B1:32:62:1F:ED:3C:C9:4D:87:E7:24:64:D7:3D
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:5a:9a:70:b9:2b:17:bc:95:97:d8:62:59:09:89:6d:e3:
a7:c1:d3:37:f1:01:28:0d:5a:74:14:4e:5a:73:58:0c:7f:cc:
8e:d4:35:cc:fe:c4:64:2e:8f:fb:9a:59:65:a9:e3:40:e1:6a:
26:11:28:fb:fa:ba:08:b9:26:20:47:a4:f7:2e:78:eb:a7:6d:
bb:bd:88:0b:ae:0f:3b:c6:99:cd:78:b9:af:17:dd:71:51:e1:
ca:6c:41:26:3c:06:d4:26:28:4b:84:59:5e:75:17:ef:0d:f5:
36:ef:36:99:47:c2:49:08:65:52:f1:ba:27:4a:dd:a7:6b:08:
b5:c9:82:e4:c2:3a:b1:ff:e1:40:cc:22:22:4d:0a:20:2c:5c:
a4:c4:21:79:f4:d3:55:91:b8:53:1f:58:8e:5a:6f:70:ce:c8:
60:74:b6:3d:11:c5:3c:1b:e7:99:c4:a5:e4:78:2d:86:cb:b0:
9a:8d:80:29:2e:8c:25:45:7a:d9:86:33:00:51:21:f4:b8:da:
0e:90:6c:36:56:2b:aa:ae:f0:75:af:2b:82:63:74:96:10:02:
dc:54:2e:79:59:4e:17:a0:aa:83:2a:55:8c:82:29:07:a8:1e:
48:63:89:fc:65:a8:1c:37:91:eb:cf:90:85:8c:c3:47:d0:57:
88:61:75:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNiYb7fzju6FGMKa2Mkx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5
NTJiMzQwHhcNMjUwOTEwMDYwMDMzWhcNMjUwOTExMDYwMDMzWjAzMTEwLwYDVQQD
Eyg0NmUyZDM3MTI2MDliMTMyNjIxZmVkM2NjOTRkODdlNzI0NjRkNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLCKn40DNuKNhiSx/VlbOFD0W4dO
aCImclLr135pLSQhRuo125f+H/js+hNEB4ykauOmieDjsNKnmL5YxqJrFM9auIjt
P9eWHwKeSUxlMyf44pMw3M9BM8f9b1rNYF38RqtTzvpm98BNdDtOFIvatNVERu30
uc3Bt0vIJ2KXjQGNprpgRMhanzwX18zg/3qPKlM/EktgQck7+z04c7nyWJ0GzlZK
L8BfbRlwK1mAkxgLM3xFMUo1DUz641Rt0wkFWylTwTktS6/jXns0i7Y7CZxSJRyY
6Iw8TJdQAqqFDBsDOPwvwmx71q9w3tf4tlnepJQ1aV0JBXSMVU/i1atZ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbi03EmCbEyYh/tPMlNh+ckZNc9MB8GA1UdIwQY
MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt
MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj
LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/damnC5
Kxe8lZfYYlkJiW3jp8HTN/EBKA1adBROWnNYDH/MjtQ1zP7EZC6P+5pZZanjQOFq
JhEo+/q6CLkmIEek9y5466dtu72IC64PO8aZzXi5rxfdcVHhymxBJjwG1CYoS4RZ
XnUX7w31Nu82mUfCSQhlUvG6J0rdp2sItcmC5MI6sf/hQMwiIk0KICxcpMQhefTT
VZG4Ux9YjlpvcM7IYHS2PRHFPBvnmcSl5Hgthsuwmo2AKS6MJUV62YYzAFEh9Lja
DpBsNlYrqq7wda8rgmN0lhAC3FQueVlOF6CqgypVjIIpB6geSGOJ/GWoHDeR68+Q
hYzDR9BXiGF14Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:30:16 2025 by rpki-client