Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: +B7pK7GCS0iSYIVkRc6aAYypJgBuKMneBk/xcd38wLI=
Subject key identifier: 31:49:8B:EA:AB:3E:60:9A:E9:18:2E:54:A8:33:5F:09:F0:1E:F6:70
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0199FDD9BA614CAAE9375099ACE39B06E043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 082D
Signing time: Sun 19 Oct 2025 19:02:08 +0000
Manifest this update: Sun 19 Oct 2025 19:02:08 +0000
Manifest next update: Mon 20 Oct 2025 19:02:08 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: jz6TbOuiked9LTDqyUTrUGgHzCPM0CIjN8ppDmikcT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ba:61:4c:aa:e9:37:50:99:ac:e3:9b:06:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Oct 19 19:02:08 2025 GMT
Not After : Oct 20 19:02:08 2025 GMT
Subject: CN=31498beaab3e609ae9182e54a8335f09f01ef670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:e1:4b:76:23:a2:51:26:2d:24:03:6a:d0:
11:c6:75:73:98:9c:1d:10:04:ff:34:03:d6:df:83:
da:d8:d2:a0:92:14:ea:ed:a9:d0:8b:26:24:2d:ee:
cd:c7:67:ef:d5:87:e6:6a:b3:95:d1:33:03:40:01:
38:f1:89:64:cd:5d:0b:df:91:7c:a3:31:b8:24:91:
a1:ea:a7:29:87:c4:a8:fc:28:89:80:11:d6:e9:62:
55:38:aa:d5:e6:3d:37:4c:cd:f5:5c:e9:cb:04:64:
5f:20:e7:1f:8a:5b:56:4b:bc:e4:9d:f5:79:34:10:
92:f0:c7:4d:8f:24:0d:66:d3:c6:5b:c0:a2:e4:c4:
a8:ac:6f:f0:80:8b:82:5a:67:5e:bb:3b:58:9c:d4:
a1:f6:aa:e7:9c:fb:f5:72:23:75:e0:7f:18:0e:0a:
b2:e1:b5:b3:ef:28:b3:95:1d:72:75:04:51:39:ff:
3d:ac:25:f8:37:ad:20:1b:16:34:43:36:65:fc:0e:
f6:4a:f1:a3:45:4c:c6:2a:f5:56:09:41:4a:e4:0c:
b4:36:f7:87:f6:42:84:08:8e:86:6a:71:25:ff:b4:
09:76:7f:ee:29:74:4b:16:cb:7b:5e:e6:a9:a4:02:
20:22:1b:90:7a:5f:21:5a:94:aa:4e:93:c3:ff:21:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:8B:EA:AB:3E:60:9A:E9:18:2E:54:A8:33:5F:09:F0:1E:F6:70
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:e0:5b:b3:3f:7f:88:e8:83:cd:7b:6f:06:5b:88:02:7c:
15:65:cd:f1:31:f2:be:9f:bf:c9:a1:ac:6e:ed:b5:94:b3:e7:
b3:cb:c0:87:17:6b:ab:2e:f3:3a:43:b1:22:45:f4:61:f5:3c:
c4:ad:56:6a:ec:7e:27:60:5e:78:db:18:fa:dc:27:00:6c:4f:
e2:40:65:8f:be:46:39:39:ae:33:d6:de:5a:7f:24:45:96:65:
83:e3:98:8f:e5:40:68:9a:4b:61:77:96:36:d3:56:7b:73:23:
e3:48:10:4b:33:e1:1d:68:1f:f8:dd:24:0c:c4:1d:c3:87:e5:
cb:39:59:15:6a:82:fc:01:f3:1f:1a:59:fe:32:4c:bc:14:e3:
6f:6c:02:03:d9:fe:4d:87:42:39:48:60:19:a1:bc:8b:79:8b:
3e:33:50:06:71:95:32:39:b1:01:02:ee:2d:4b:7b:41:79:58:
79:5d:f7:ad:28:a8:a5:57:29:57:42:cf:1c:c2:18:09:9d:f8:
2a:97:42:66:b5:68:01:92:df:15:59:9d:34:70:9d:44:22:fc:
68:ee:f8:8d:b8:46:e2:b8:78:66:93:43:a7:d6:c7:c7:dd:ca:
e6:70:48:4a:a2:0b:02:e4:67:0a:54:e9:03:9c:ef:67:05:68:
29:1e:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:37 2025 by rpki-client