Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: TE6Il4fXPuySMduoFRgIrWZ2gSRlz1UQwxb5MdezGxs=
Subject key identifier: C3:A1:A5:DB:46:9D:31:EF:19:87:BE:EA:44:B7:72:C4:16:28:CC:EA
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019771F5EFC2CC3C93EFE4BE5E8F8FEDC982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 05:00:32 +0000
Manifest this update: Sun 15 Jun 2025 05:00:32 +0000
Manifest next update: Mon 16 Jun 2025 05:00:32 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: v1BabdCy0BiwqzLKY5C5oOYppmKXa6NZQ0bVSgenIDE=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:ef:c2:cc:3c:93:ef:e4:be:5e:8f:8f:ed:c9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jun 15 05:00:32 2025 GMT
Not After : Jun 16 05:00:32 2025 GMT
Subject: CN=c3a1a5db469d31ef1987beea44b772c41628ccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:c1:71:26:e6:34:db:94:4b:f8:c3:4f:54:
9a:08:81:dd:c9:b5:24:d0:94:23:c8:54:67:98:34:
ab:c4:00:66:ad:8c:92:cd:7e:bb:85:53:dc:bd:46:
f8:17:4b:12:92:14:31:ff:04:a2:b9:6b:cd:7e:64:
8d:fe:0d:33:e7:3f:2d:d1:7f:8f:83:38:96:45:df:
36:b1:af:bc:b7:aa:c1:2a:4d:bb:03:e2:de:f5:53:
85:76:10:87:7a:e2:13:1f:3f:a5:3a:94:dc:92:b8:
3b:82:84:06:9a:fd:0a:15:89:eb:3a:78:a5:fa:71:
d7:98:54:2a:0d:ea:17:df:e1:3a:5b:b4:b7:af:f3:
8b:d2:61:6f:22:5c:72:ee:58:fa:79:03:cf:d5:64:
d6:41:33:c8:d3:b4:07:fd:59:1c:b4:f8:85:be:b7:
a3:fd:37:4f:87:67:1a:3f:81:3e:af:29:8a:4b:f4:
f4:e5:09:39:80:e5:67:24:6d:85:fa:0e:92:e9:e7:
6e:d8:96:22:b3:12:a5:aa:fc:20:3a:79:1d:10:7e:
98:a2:07:e6:01:b5:7c:b0:18:72:30:53:d9:22:80:
86:47:95:05:d9:11:6d:7b:8b:0d:03:55:1d:66:ce:
36:76:1c:60:3f:5b:7d:f6:29:70:d3:82:31:24:7d:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:A5:DB:46:9D:31:EF:19:87:BE:EA:44:B7:72:C4:16:28:CC:EA
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:a8:49:98:bd:83:f3:d0:3d:77:34:38:5e:88:1b:fa:0a:
ac:1f:36:af:9e:10:b1:62:f7:c9:d1:a9:31:51:5a:bd:d3:e6:
48:a2:04:14:0c:7b:0f:aa:12:0c:4a:90:ad:d9:fa:d8:c1:78:
03:3f:f8:36:e3:4c:5f:f4:9d:c2:a1:11:c3:30:d2:87:d8:ee:
bb:07:01:67:6f:60:e5:a4:c9:ab:76:ba:7c:73:aa:dd:67:e7:
50:5d:c4:5d:1e:d2:7e:4a:81:82:80:39:99:2b:61:80:a3:0d:
07:df:98:79:43:29:19:90:7c:7d:ec:0d:93:67:ab:92:01:75:
ac:cd:e2:ef:b6:97:bc:23:54:d6:cf:f0:af:47:e3:6e:89:2a:
cb:fe:e1:5f:36:c1:55:ea:28:3c:9e:20:a0:9f:9c:95:0a:2b:
ad:2c:5c:d9:8e:e8:dd:91:77:e4:63:9c:4b:13:31:ac:77:f3:
c4:65:e8:e1:65:27:4d:be:28:71:06:7e:fc:51:99:8d:f8:ff:
8f:d8:a0:59:0d:4e:02:f6:6d:be:cb:ac:07:11:6f:a4:25:6d:
04:3e:0f:c6:7f:56:96:8c:6e:5a:93:8c:fd:9f:87:c2:16:42:
e0:ec:ee:05:15:24:78:28:e1:d5:c2:ca:33:6d:47:72:e1:66:
77:2c:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:22 2025 by rpki-client