
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: y+ybHFUqwlsA+80vBXmrlmHrYDSB0icRztyFRQua0wI=
Subject key identifier: BE:C0:FC:E2:66:ED:69:FD:5A:E2:FF:F8:BB:92:EF:A6:84:47:63:F4
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 0199FAD7F8EDC71D5A7E1A40D43B2A22369E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1410
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: ndGuNX/H5j7nz0yMbddc0vfmQEkrKvprQbDOYB6aXsY=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f8:ed:c7:1d:5a:7e:1a:40:d4:3b:2a:22:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=bec0fce266ed69fd5ae2fff8bb92efa6844763f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:1b:88:39:f9:cd:42:a6:b7:72:18:c0:43:
40:42:d3:09:85:20:02:9d:86:9d:9e:7a:54:a9:0c:
b7:11:5f:d1:41:bb:c6:85:80:ef:c6:3c:83:c6:a0:
28:d7:0d:c6:a3:1b:e9:62:d5:42:fd:b3:7d:e8:13:
59:b3:ca:a1:0a:f4:cb:4d:c8:98:0d:fb:e6:d9:d5:
19:0b:d8:da:c5:79:7d:25:71:da:52:02:32:cf:3a:
22:fc:6a:29:6e:10:15:84:dd:bb:11:68:20:b2:9d:
da:dd:01:54:d8:09:df:35:d8:bf:80:c5:56:07:3c:
89:6f:a9:d4:3e:c3:c9:a1:e6:68:0c:ae:2d:bd:c8:
e8:60:bb:fe:52:db:b8:9d:44:34:c4:30:13:32:35:
51:70:de:d8:42:a1:12:49:fc:8b:ee:6f:7e:f9:ff:
5e:aa:21:1e:05:26:7a:b2:89:23:8e:b4:2c:4e:9a:
52:40:44:cb:11:5c:a9:9f:07:e3:c6:4b:f5:10:4c:
f7:85:91:2d:e5:7d:af:96:34:91:b7:eb:13:3f:e3:
ec:84:53:48:b3:2c:d8:51:31:7a:5b:ba:2a:0c:ed:
ec:45:83:0a:e2:b5:37:b5:16:f0:dd:e3:43:17:71:
d3:d5:a2:23:3e:59:cd:9e:b6:4b:8f:0e:47:37:51:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:FC:E2:66:ED:69:FD:5A:E2:FF:F8:BB:92:EF:A6:84:47:63:F4
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:cd:f4:09:0f:35:b2:b9:66:44:5e:20:4d:04:18:4f:e5:
bd:7c:3b:61:16:ce:b4:5a:4d:e1:a4:6d:7e:16:b4:65:39:bd:
a4:78:93:74:70:64:73:0f:3a:86:c6:c2:7e:f5:75:28:eb:08:
74:fd:cc:eb:30:41:6c:73:1a:12:64:40:be:a9:b3:98:69:ba:
35:a3:bb:8a:58:fa:d9:ee:c6:de:cd:c8:34:f5:9f:6f:1b:e1:
85:cc:f0:a7:f9:27:b2:1d:3d:9c:16:d3:12:b4:f0:23:63:ec:
29:73:3e:72:d5:bb:0a:11:e0:f0:86:cc:11:20:68:17:72:c9:
75:fc:3c:14:7a:08:38:79:ee:17:f4:11:79:f6:ac:f8:c5:ab:
1c:d9:fd:bf:8a:5e:59:85:7a:a9:3d:b9:1a:52:85:e1:ae:9e:
74:40:48:ce:da:42:c8:b3:e6:d6:82:9c:0c:12:b2:ff:c3:12:
a2:2c:28:6c:c5:77:dd:c4:fa:09:85:9f:64:e3:28:6a:23:e2:
96:36:22:28:08:ec:c9:cc:a4:34:2f:7f:b5:15:2c:3c:f6:40:
a7:4a:61:3a:1a:43:f5:ba:af:0b:11:2c:0e:da:51:28:38:84:
b4:48:3c:53:3c:8b:ac:4d:1f:28:c6:ac:5d:50:7a:e1:2e:07:
e0:ae:5e:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/jtxx1afhpA1DsqIjaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew
M2UzYjEwHhcNMjUxMDE5MDUwMTIxWhcNMjUxMDIwMDUwMTIxWjAzMTEwLwYDVQQD
EyhiZWMwZmNlMjY2ZWQ2OWZkNWFlMmZmZjhiYjkyZWZhNjg0NDc2M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJwbiDn5zUKmt3IYwENAQtMJhSAC
nYadnnpUqQy3EV/RQbvGhYDvxjyDxqAo1w3GoxvpYtVC/bN96BNZs8qhCvTLTciY
Dfvm2dUZC9jaxXl9JXHaUgIyzzoi/GopbhAVhN27EWggsp3a3QFU2AnfNdi/gMVW
BzyJb6nUPsPJoeZoDK4tvcjoYLv+Utu4nUQ0xDATMjVRcN7YQqESSfyL7m9++f9e
qiEeBSZ6sokjjrQsTppSQETLEVypnwfjxkv1EEz3hZEt5X2vljSRt+sTP+PshFNI
syzYUTF6W7oqDO3sRYMK4rU3tRbw3eNDF3HT1aIjPlnNnrZLjw5HN1HPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7A/OJm7Wn9WuL/+LuS76aER2P0MB8GA1UdIwQY
MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt
MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0
LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRbN9AkP
NbK5ZkReIE0EGE/lvXw7YRbOtFpN4aRtfha0ZTm9pHiTdHBkcw86hsbCfvV1KOsI
dP3M6zBBbHMaEmRAvqmzmGm6NaO7ilj62e7G3s3INPWfbxvhhczwp/knsh09nBbT
ErTwI2PsKXM+ctW7ChHg8IbMESBoF3LJdfw8FHoIOHnuF/QRefas+MWrHNn9v4pe
WYV6qT25GlKF4a6edEBIztpCyLPm1oKcDBKy/8MSoiwobMV33cT6CYWfZOMoaiPi
ljYiKAjsycykNC9/tRUsPPZAp0phOhpD9bqvCxEsDtpRKDiEtEg8UzyLrE0fKMas
XVB64S4H4K5ebQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:07 2025 by rpki-client