Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: qVL5cfpuY93BN/tlkJVYQpZ1DzXiJGEG7Ds8WYGvidU=
Subject key identifier: D9:F8:94:A6:91:72:11:92:99:E3:A7:8D:38:14:C2:56:3A:0C:C3:63
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 0197B70E9FDDFB840EC49EB25FBA55882628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: CfsjykAtbonMmqIgJdTp3E207JaO2cpkmwu1vGGuiwE=)
7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:dd:fb:84:0e:c4:9e:b2:5f:ba:55:88:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=d9f894a69172119299e3a78d3814c2563a0cc363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:29:e2:d2:71:11:e2:35:47:88:ec:d4:4b:
09:62:e0:91:44:9e:bc:a2:c6:ee:20:f5:1c:18:c7:
f9:9b:9d:00:41:2d:54:c8:ee:cd:18:34:b5:e5:4e:
26:ab:c9:77:14:3f:1f:d1:e2:13:9b:f4:c5:f4:e6:
2e:1c:d4:00:b4:38:34:4c:6f:6f:03:bc:77:4d:41:
df:35:25:67:d9:7d:3d:ee:bc:c6:4f:31:d4:56:d7:
e1:33:92:2e:6c:2e:17:06:08:4c:b0:54:a0:b4:fa:
da:fa:66:63:24:ad:35:af:2f:34:8b:ae:49:25:fe:
dc:7f:08:59:f0:66:c2:6b:f2:65:aa:71:ef:3f:6c:
8a:a9:05:8b:0f:9d:7a:ae:9c:66:9f:28:84:2d:92:
3d:7b:0a:1c:e6:b0:e6:04:b1:d5:2f:28:52:45:08:
5b:86:d6:c6:90:d6:2d:a8:12:a7:d6:98:87:5b:69:
a7:51:ce:98:42:8c:2e:c9:59:c0:94:8b:99:7d:57:
74:38:56:0f:b3:9f:0e:16:e1:3e:14:cf:37:bf:7a:
b0:f2:2c:49:54:02:c8:70:a0:05:5a:f6:0c:89:1c:
e7:99:2b:6a:0b:80:d7:75:0d:a6:2c:11:29:2b:66:
b8:20:b2:73:83:6d:52:c0:a0:d8:a8:d4:2d:76:4a:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:94:A6:91:72:11:92:99:E3:A7:8D:38:14:C2:56:3A:0C:C3:63
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b8:7b:05:bc:71:a4:54:51:48:a1:f3:21:cd:8b:ce:44:4d:
a8:62:91:cb:79:b0:8b:97:ac:54:91:e9:e4:60:df:a2:f3:ca:
30:d7:4d:c6:3f:ac:91:c4:35:b1:7e:11:94:03:76:95:ca:c5:
76:3b:c5:8a:c7:36:d2:8b:8b:e3:da:9d:d9:55:3c:83:61:ac:
8b:10:cb:1d:f3:ae:af:d2:1a:b0:91:76:47:06:7b:46:f1:75:
e8:22:ae:05:e8:ee:3e:c4:70:5e:41:c0:07:56:fb:2d:27:f3:
59:e5:c9:6b:16:f9:5c:11:64:f0:79:b0:41:95:23:59:e9:ce:
51:05:7a:a5:c3:c5:13:35:e3:58:06:14:99:29:1a:6c:ae:d0:
33:d5:00:b2:54:87:86:fb:b4:fd:e1:5a:18:7a:54:75:97:72:
a9:0a:9b:e4:2a:a5:2a:ae:7d:d2:05:21:f5:9b:46:0b:35:68:
f7:48:41:83:86:0e:59:58:bb:e2:d1:38:25:9a:6a:7f:51:c0:
eb:5a:97:c2:f0:7e:94:ec:43:9f:1a:a5:63:69:e7:64:7a:f6:
3a:fb:3a:83:75:27:b5:7d:0a:67:a5:82:30:52:3f:76:c2:32:
e7:ff:e0:b6:e3:df:b2:51:ca:19:ec:75:c2:db:b0:e5:9d:28:
39:47:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client