Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: /E1Er58lkK4LKfAZIA9vOyPHovNOh5yi02vnSV1EGns=
Subject key identifier: EC:64:3C:AC:9A:56:6C:C5:7A:84:53:34:97:37:A2:89:9F:3F:03:9A
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 0197B77CD68CF854A1E34623C7140F739376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 12E4
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: h+EYZQyLFc0Erv6ZeXTlesWh7UiZAJLtRO0KzmuYvPo=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d6:8c:f8:54:a1:e3:46:23:c7:14:0f:73:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=ec643cac9a566cc57a8453349737a2899f3f039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:7f:23:ee:0d:09:2a:5f:bf:1e:12:14:0f:
51:a7:50:ab:ab:b6:41:c9:7f:4e:85:df:e2:65:cc:
ea:1c:fc:e1:a3:a8:7b:1b:9f:56:f5:d5:3a:ea:7d:
0f:e3:20:f0:5a:ae:3d:ac:98:0b:15:a3:da:73:75:
d9:ea:60:e5:e0:15:51:50:45:20:51:b5:cc:d1:c1:
1a:f6:b3:47:cf:26:12:af:a2:37:36:c4:3e:39:04:
77:99:fd:bc:e1:b6:83:cf:ea:9c:e2:d3:25:13:0b:
47:6c:e3:c3:8b:52:89:17:5c:40:9c:8d:1f:97:10:
7b:bc:5a:4e:01:fd:1a:4b:15:a5:e6:32:d3:99:13:
7c:df:85:8f:d1:70:ab:4b:42:fd:3b:33:3b:d6:78:
0b:e5:30:cc:f2:c9:c8:f4:10:1c:98:ab:56:77:df:
b4:03:5f:6a:10:b5:ff:b3:d9:54:c0:59:ae:cc:11:
0e:4a:89:b1:0f:e9:35:d5:2c:f3:fd:4e:dd:03:d4:
3b:58:a1:87:5e:dd:ee:b5:a6:c8:04:2e:13:04:17:
e4:91:6d:c0:0e:ad:36:cf:d8:11:b7:39:2e:0f:c1:
93:44:32:a6:be:ea:51:54:35:d9:f8:2a:8a:84:29:
3c:d9:3a:7c:d1:54:90:1e:01:df:70:3f:3d:ed:1c:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:3C:AC:9A:56:6C:C5:7A:84:53:34:97:37:A2:89:9F:3F:03:9A
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:a6:fd:3d:ee:69:f5:be:99:59:c7:6d:1e:ef:86:d0:b6:
3f:19:42:d8:a2:6f:1e:4a:29:31:67:bb:93:cc:f5:64:c4:47:
41:69:97:1a:b9:bb:a9:90:3c:f9:99:12:a8:19:49:8d:c4:b6:
af:d9:c6:88:25:52:52:8c:0b:fd:cc:38:ae:75:d6:f5:47:9a:
21:3c:75:69:33:7d:49:e1:09:1e:e8:ab:de:43:50:2a:80:10:
ae:5a:40:7e:a6:60:07:f4:41:16:a7:e5:07:ed:95:55:ee:99:
4c:c7:9a:d3:c2:78:80:25:3e:1d:48:c1:f6:31:8a:46:ee:68:
af:84:29:b8:8b:fb:2f:c5:f7:c9:69:32:53:0e:2a:53:b0:58:
7f:53:9a:7b:5e:45:5e:03:f6:ef:a4:5e:92:bc:af:f4:97:40:
1d:66:b9:dc:2f:b5:83:a8:8d:4e:fb:62:33:57:fb:ca:73:86:
84:64:d2:82:8a:80:24:d5:18:30:48:36:d0:fd:a7:13:26:aa:
1e:ab:bd:50:c5:19:ed:59:c0:51:78:cf:b1:f2:37:c8:6b:24:
95:c7:98:3e:12:1e:a0:16:9c:5e:69:2b:05:f1:6d:d0:29:e7:
84:3c:f2:ee:52:97:48:6b:12:42:fa:df:b8:57:c1:a8:28:79:
32:05:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:58 2025 by rpki-client