Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: 2I1yyudymHEzal5WIDWw6AvU5Hq6i8PDMpFYuIrPCpw=
Subject key identifier: F9:CE:38:58:88:B2:33:37:15:38:19:AE:16:60:8A:C1:A8:ED:4F:92
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0199228C40E9E893FEE9D9D0AFEE052D071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: rAoMJdnWLtizIkyrjwpsOAo/3skyZJnc+sInefIkZ70=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:40:e9:e8:93:fe:e9:d9:d0:af:ee:05:2d:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=f9ce385888b23337153819ae16608ac1a8ed4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:11:9d:ae:b4:87:05:1f:e9:d2:d9:dd:53:
23:6d:04:7e:81:76:8f:ed:aa:3c:c5:31:be:36:a2:
0a:3a:99:07:34:21:f5:dd:87:09:58:1b:7e:09:76:
22:b4:d5:93:4c:89:db:70:ec:83:39:56:d8:13:f0:
9b:6e:7c:f9:01:98:cd:2b:98:06:f3:7a:88:5f:28:
38:50:20:91:9e:56:c9:98:5a:9f:02:0e:b1:3a:b1:
e9:db:bd:e3:5f:40:03:df:7d:94:81:f3:cb:81:ed:
86:32:35:8d:3a:92:f8:db:ef:a8:f2:28:67:58:78:
38:96:35:e1:06:eb:2e:2d:4c:f8:a1:c3:96:88:57:
fd:4d:5d:42:87:6a:a4:fc:e5:66:89:2b:85:9f:c1:
13:ff:24:46:d5:6e:e2:f7:d5:ca:d6:11:f8:34:b8:
ea:a5:79:57:e0:16:4c:fd:19:9e:d5:35:4a:3c:59:
4a:c9:52:82:70:02:9c:cf:44:88:46:65:2a:ee:a0:
01:25:79:c2:44:99:57:e6:6b:37:fa:7e:9b:dc:b7:
f8:18:c9:5f:e9:c7:2b:5a:79:32:38:1a:5e:3c:ea:
d0:da:e2:06:f1:ce:05:7f:31:13:3d:c3:91:f1:38:
2f:4d:58:01:6d:a1:bf:db:88:81:21:94:c4:9f:56:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:38:58:88:B2:33:37:15:38:19:AE:16:60:8A:C1:A8:ED:4F:92
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:31:b0:10:ce:b6:75:a1:f4:44:43:cd:c9:59:f2:2a:1f:4a:
52:72:3e:a6:f5:da:1a:9d:d2:7b:00:8c:77:a7:0a:17:87:0f:
b0:aa:2d:9c:be:25:fd:7b:2c:06:e2:a3:a8:2e:34:6e:f6:1f:
f6:eb:3d:f9:6c:dc:e8:38:e1:3f:c6:b7:56:5e:e3:80:b8:a2:
41:ac:e1:08:4f:57:b4:e5:54:d0:fc:cc:df:7e:ac:fe:ed:8a:
12:ff:4b:e0:c9:9b:60:21:e3:1c:2e:de:9e:1b:5f:68:6f:41:
54:a9:84:b0:de:3f:7d:60:9e:6c:7c:16:6c:62:3d:50:39:6a:
a8:df:db:7d:72:97:80:ff:e4:70:51:00:32:e9:e9:24:25:ea:
e4:3c:33:10:43:f1:f9:73:f9:fa:8c:48:79:5f:6c:13:2b:2e:
b1:be:fa:27:3c:3f:fc:e8:95:09:e3:73:26:09:20:02:a1:9d:
8c:a4:a6:54:48:66:43:20:ab:74:17:02:d2:25:dc:d0:c6:97:
a1:8a:a9:c2:bb:2c:ed:73:13:c6:c7:0e:35:e7:09:94:ff:45:
f5:4f:83:93:17:1e:8b:fe:13:a5:b7:5c:86:61:76:ad:dc:ea:
07:ea:53:57:42:e4:4b:18:7b:7e:db:55:28:c3:ee:d3:33:2c:
3a:5e:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:42 2025 by rpki-client