Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: 48JfANAIem+Ya/RSENned+a8nCSsraMni3ZF9ajsMq0=
Subject key identifier: 62:C2:82:7C:00:B4:D2:AE:6B:DD:1C:E2:FE:2F:DB:13:7B:E3:3B:6E
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 0196BC6DEF958A64E77E38427B2ADA10932E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1262
Signing time: Sat 10 May 2025 23:00:43 +0000
Manifest this update: Sat 10 May 2025 23:00:43 +0000
Manifest next update: Sun 11 May 2025 23:00:43 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: mtTKgrlRsxtmqtTAYmgAdLFlfJyLts4k1RDBRE/kcDk=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ef:95:8a:64:e7:7e:38:42:7b:2a:da:10:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: May 10 23:00:43 2025 GMT
Not After : May 11 23:00:43 2025 GMT
Subject: CN=62c2827c00b4d2ae6bdd1ce2fe2fdb137be33b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:eb:4f:45:29:f5:84:ed:57:cf:d0:d0:4f:
2a:fa:b4:14:78:5a:13:03:a2:4d:1c:73:ee:32:10:
94:e3:55:2e:96:6e:7c:a3:9d:a5:51:37:15:25:5f:
9f:d0:1d:7c:f8:87:c0:c8:68:fe:b2:54:fb:32:f9:
73:df:55:68:bc:1d:6f:65:88:7f:63:5a:af:3a:92:
96:cc:08:d4:f3:f3:79:d4:a5:de:e5:c1:f2:12:0c:
a1:b9:f5:65:b3:cf:e1:2a:73:dd:cd:31:c2:ce:70:
41:f2:11:12:9a:5d:4d:4a:0d:89:e6:a6:71:0b:69:
32:37:f5:73:0b:b6:c5:47:10:8b:f9:b7:0d:01:a7:
74:04:de:62:f6:c1:2d:3e:75:0d:3c:9c:7d:72:cf:
5e:87:d6:44:ac:99:fb:0a:55:a6:ab:fe:79:1e:50:
06:57:32:9a:4b:e2:5a:46:0b:1c:51:3b:c1:75:fe:
1a:9c:d5:0d:c7:00:f1:5b:e8:70:a8:63:46:3c:b6:
92:ea:6e:86:a3:f5:bf:59:a3:e4:ab:e1:61:7a:f4:
21:8e:e3:30:64:d1:81:2b:a0:9c:06:86:e7:05:bf:
0a:76:e3:52:31:2a:ea:b3:10:43:c5:ae:14:18:da:
a2:48:ce:16:e1:e3:54:1b:42:da:d9:05:96:1b:7c:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:82:7C:00:B4:D2:AE:6B:DD:1C:E2:FE:2F:DB:13:7B:E3:3B:6E
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:31:02:1f:21:ba:65:3b:51:6f:5e:a9:ad:3e:53:0c:b0:e1:
3d:f0:0d:bd:b4:5f:b0:5f:bd:02:7c:f8:fd:3d:f5:4f:08:3b:
89:e5:13:77:93:e4:93:22:04:b7:5f:f2:35:8c:03:57:d0:1e:
4e:f1:82:43:5b:66:d7:3c:3b:3f:cb:64:9c:00:3c:bd:e4:1b:
6c:70:c1:af:36:1e:e2:ae:bc:d6:8f:50:69:d6:ac:76:07:96:
6e:43:21:a3:58:fb:a2:6b:bd:e0:df:ee:25:1b:27:32:29:c7:
90:1f:93:67:e1:9b:15:05:9d:a6:5b:aa:b9:34:83:8f:ac:42:
9c:7e:3a:d8:f2:b1:9c:02:88:2b:77:e8:c5:63:77:e1:e8:fe:
02:06:7d:25:ae:cd:90:49:67:3c:3f:e4:e8:90:8f:0e:70:4a:
8c:61:60:6a:0e:ed:6f:ef:dc:4c:8c:85:6c:c4:3d:e2:fd:aa:
6a:6a:02:dd:8d:23:0b:4f:83:8d:35:6b:42:11:e3:af:a5:48:
b2:9e:ad:91:7a:ef:83:e4:ff:d6:0a:ef:d6:aa:41:8b:e7:92:
3c:99:a6:fc:94:43:b7:3a:d8:6d:a5:fd:bb:a6:e9:c2:fc:a3:
c3:76:3e:76:7c:c3:c3:e7:d8:82:4c:22:5d:90:89:8b:4e:4d:
e4:1f:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:19:25 2025 by rpki-client