Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: 74sW15hvD+mlL04QcURE5Z+T0YMOITxuLGPhQHiUV2I=
Subject key identifier: 09:56:D7:F8:23:E2:69:93:17:C3:F9:AB:40:85:C8:85:02:8B:AC:56
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0198D660985599508AFA55123BE72881E3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0794
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: ctGE1R7J/QO3YM/tBHMWldmMotZaUgIBsv6ezjt2EEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:98:55:99:50:8a:fa:55:12:3b:e7:28:81:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=0956d7f823e2699317c3f9ab4085c885028bac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:f6:06:2e:6a:f8:08:e2:92:9b:04:83:1a:
2a:82:f4:db:df:3f:d1:9a:2d:fa:f0:36:8d:cc:64:
59:02:13:b5:4e:5b:dd:47:ab:14:4b:78:77:d8:1e:
04:bf:b0:87:2e:e8:08:e1:e3:87:bd:13:1a:ff:b6:
8a:e0:e2:60:e3:fc:1d:94:49:1c:2e:a8:4a:16:99:
c6:9f:e3:da:2e:bd:bf:38:d8:13:27:cd:4c:03:bc:
40:e7:f9:a9:a0:93:26:6b:8c:39:3a:fa:08:52:f4:
68:2b:51:9b:3c:f7:52:43:67:f3:8b:ac:bd:ef:46:
bf:40:33:29:11:66:19:37:db:cd:da:e6:3a:6f:5c:
7c:00:21:cd:0b:b2:1f:7a:26:b9:80:13:a0:62:66:
0a:37:0e:b9:94:14:ec:16:fb:2c:86:c4:34:60:7b:
77:5a:2d:02:b0:2b:9d:4b:88:02:ee:0f:aa:00:53:
a3:63:08:ea:ac:3f:f6:61:0a:c4:ca:11:cc:78:25:
0b:cd:7e:98:19:4f:a9:c1:31:3b:75:c4:d0:23:ce:
e7:4b:49:23:22:15:f0:08:85:d5:47:9c:76:fe:5c:
1a:09:da:c2:85:dd:c7:28:b2:e7:05:5a:d5:3a:cf:
8b:7b:0e:cd:b0:be:a2:35:14:8b:d2:f9:1f:f6:9b:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:D7:F8:23:E2:69:93:17:C3:F9:AB:40:85:C8:85:02:8B:AC:56
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d9:e6:19:be:a5:09:4f:78:c6:8c:37:2e:80:ff:36:ca:0b:
35:2e:1c:1a:3b:8d:48:4a:c8:fa:ea:b9:fb:83:16:e8:97:f8:
cd:7f:a4:cc:d7:ee:2c:d1:44:b4:aa:33:f3:2b:68:5c:03:c9:
a4:0b:a4:80:e2:bd:d6:74:40:65:f6:a2:c6:ad:e2:a8:72:3e:
92:db:7f:5a:a6:68:17:47:56:45:b3:c6:37:4c:2f:ae:6f:01:
e0:d4:fd:03:fb:2b:32:6f:6f:25:c7:ae:cc:43:db:97:78:c0:
ae:10:54:cb:32:d4:d9:6f:0b:57:42:ef:c1:65:b4:91:bd:f8:
1a:1a:5c:f4:d3:4f:1b:4f:0e:12:01:29:63:c6:d8:ea:ad:7c:
64:4d:ba:07:f7:8b:c8:5f:b0:33:37:6c:cf:25:e7:a1:dc:d2:
d8:06:54:d1:cc:07:47:8d:fb:7b:68:38:38:4d:c4:37:ee:0f:
cd:92:51:c4:6b:fc:74:96:97:c5:46:90:11:57:d6:5d:ea:05:
8b:54:82:77:2c:90:87:a2:0d:57:0f:40:fd:8c:d3:f1:11:63:
b5:3d:b6:8e:ef:27:ce:96:e9:ed:43:89:55:74:17:39:49:d1:
ac:f0:5e:a9:4c:39:9b:b4:f9:03:36:f0:cf:e1:96:6d:c1:e7:
5c:b9:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:50 2025 by rpki-client