Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: wZKS5BrckL55gdbKN44dJkvPjxKtOrSpRoFl+jSCN1E=
Subject key identifier: E9:B7:C5:FE:62:30:A6:8D:A2:84:F5:B2:20:DA:82:B2:68:BB:05:1C
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0197B88EE3BA45B967C391049A1C505D11B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0700
Signing time: Sat 28 Jun 2025 22:01:01 +0000
Manifest this update: Sat 28 Jun 2025 22:01:01 +0000
Manifest next update: Sun 29 Jun 2025 22:01:01 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: A+vO+3PQMP0T/K8QKdoO4JqRGqsdT21hAIW4znDdNPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e3:ba:45:b9:67:c3:91:04:9a:1c:50:5d:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jun 28 22:01:01 2025 GMT
Not After : Jun 29 22:01:01 2025 GMT
Subject: CN=e9b7c5fe6230a68da284f5b220da82b268bb051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:3c:b0:00:58:03:1c:fa:d1:73:50:d1:eb:
88:a7:ec:2e:25:5f:66:7d:f0:4f:1d:2f:34:80:72:
17:b7:58:27:f9:1d:2c:84:ba:3c:43:8f:1b:25:b1:
7f:b6:f1:bd:35:81:3e:46:04:82:38:b9:56:d3:a7:
3d:df:d2:39:4c:0a:fa:c0:5b:e6:15:a0:73:ff:f3:
22:d4:49:a6:0f:92:c5:b8:05:69:c4:76:4b:4d:40:
80:87:f0:a8:e6:46:bf:35:fe:aa:51:9d:08:4e:5a:
2e:60:a9:d8:01:77:af:90:3f:ba:ee:20:1d:8d:bc:
6e:ee:82:34:84:24:2a:1c:e9:1f:52:14:16:ec:e2:
f0:d2:79:6b:e7:be:ba:4f:12:ab:f1:74:d7:e6:eb:
ce:fb:ac:30:3e:8d:62:a1:f3:22:ed:58:d8:f7:18:
8f:36:2c:0e:b7:5e:3d:3e:e2:3f:da:35:46:6a:8c:
df:62:99:75:30:47:f1:63:6c:f7:cd:4f:35:ba:e9:
56:49:d0:ff:88:98:57:72:97:17:38:97:c7:77:42:
95:b1:9f:87:c0:e7:de:31:c4:6d:ed:47:f1:71:79:
e1:9f:de:bf:de:4f:ef:a5:80:75:97:71:68:3f:85:
a4:48:e2:5b:ac:e5:63:ad:65:58:dd:0d:e6:ee:95:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:C5:FE:62:30:A6:8D:A2:84:F5:B2:20:DA:82:B2:68:BB:05:1C
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:10:40:88:ab:b6:0c:58:9a:50:19:5d:85:4c:26:22:1e:
25:4e:8d:9c:15:b1:d5:46:bb:b4:7d:65:41:f4:b4:0f:0b:03:
d9:65:34:58:62:50:f7:58:88:dc:c4:b4:4f:39:26:48:28:e5:
9d:08:92:4c:77:80:a7:d0:59:ae:1d:39:07:6d:aa:56:1f:44:
79:b0:c2:12:9c:08:d5:85:9f:e2:ad:0c:f0:aa:70:18:ba:12:
d1:ac:ab:5b:a9:22:71:a4:82:66:55:53:a6:b5:69:5c:a8:fb:
02:aa:8b:56:1e:7e:11:22:43:38:8b:ee:b0:9e:15:fb:b9:21:
a5:ab:b7:ae:8e:0c:21:ac:83:8f:66:e0:90:45:03:47:02:84:
a2:dc:08:b3:69:78:b8:00:1a:5e:3e:eb:f2:62:7f:40:45:25:
30:5c:92:61:2d:23:79:83:83:ec:e3:17:1f:20:f6:de:4d:07:
b8:dd:46:bf:98:32:f2:bd:6e:37:ed:63:52:2b:56:ab:e5:88:
1c:f0:b7:51:d6:c0:20:c8:94:ed:30:da:7b:16:1e:e0:ae:f4:
34:fe:c1:21:9c:26:78:9d:c5:2a:27:95:b3:82:ab:9d:ff:73:
02:11:e2:0d:08:da:ea:0c:b2:12:1b:b8:e1:6c:51:e8:6f:04:
b8:6b:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:07 2025 by rpki-client