Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: 8EpjR9t5j4dCu2EvLu8vfCIjohrnUteGIUyqo4UfZaE=
Subject key identifier: CD:3C:52:F0:A2:45:D6:52:B3:80:15:A3:53:00:67:F4:D2:DA:9F:B5
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0197B7EA279A805B324B23F941A7A4E03790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0E3A
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: Fu1LBM5dIeWMF/3TZYNtdBrMpI8EXxnX3G8gmDGzSIk=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:27:9a:80:5b:32:4b:23:f9:41:a7:a4:e0:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=cd3c52f0a245d652b38015a3530067f4d2da9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:f6:90:e6:fa:68:66:3e:76:79:43:e5:eb:
de:04:21:44:0f:c3:31:65:df:5a:24:4d:d4:2a:23:
64:d5:f5:4f:b5:8a:af:c0:39:51:68:b9:62:39:56:
96:dc:b4:68:8d:fd:2d:ec:da:29:07:d1:bb:48:31:
4f:38:fd:f4:02:a4:68:fb:75:07:65:04:80:e9:4b:
d5:1a:e8:f7:8f:2d:8a:47:3a:83:1d:ec:fe:11:49:
4f:40:b8:f7:ba:7b:1f:27:20:fe:e0:14:9b:59:a8:
a8:29:4d:80:ae:24:b2:1c:2e:e7:6b:83:c4:ed:40:
1d:98:13:9b:40:bf:06:31:0b:96:66:72:1e:c7:f4:
02:9b:db:5c:2c:76:74:3d:d4:fd:16:15:c2:ea:97:
0e:dc:7c:3b:d5:7c:b6:d3:77:6e:e1:6c:aa:85:b9:
18:d4:50:91:40:ee:7c:c5:6d:19:2e:f7:c3:68:3b:
9d:f2:45:e6:ea:46:21:b8:8d:08:b5:79:32:80:97:
46:d1:1d:23:25:04:b8:8b:63:30:dd:e4:fa:cc:c0:
06:df:7a:7a:f6:84:74:c0:ad:7b:4b:11:eb:9c:4c:
19:f2:cd:25:15:7b:da:ae:e0:3f:68:a2:8a:52:08:
5e:1d:37:1a:f2:9f:b1:a8:4d:e3:3e:fa:a9:9b:25:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:52:F0:A2:45:D6:52:B3:80:15:A3:53:00:67:F4:D2:DA:9F:B5
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2d:0c:2b:6a:0f:73:fc:77:ba:85:b6:0e:f3:89:c8:48:ae:
02:02:aa:19:ca:0f:6a:df:97:5b:55:6a:3b:22:a3:b7:2f:6c:
8c:b8:f4:b5:6b:8e:31:0a:45:5b:98:68:b7:a1:6c:85:80:d3:
a4:7b:eb:da:1c:f4:a2:14:e1:c0:99:de:0b:a3:14:1f:28:07:
4e:a2:0b:56:cd:1f:f0:64:03:e9:5a:73:23:cf:dc:26:80:3c:
32:51:a6:76:2d:89:f5:19:33:3c:d8:d1:12:4a:52:ec:0b:20:
7c:28:2d:4d:80:4a:6b:f3:0d:ae:83:0b:9f:62:f9:05:f9:56:
09:e0:50:92:33:39:60:65:d6:26:37:f4:d2:55:6d:38:4d:5e:
ca:95:0e:83:74:20:9d:22:cd:ab:77:d8:2e:d3:51:c1:5d:03:
0f:cd:61:40:d8:d2:af:a6:86:30:e0:47:4c:c9:37:6a:ff:5e:
2b:d5:71:8e:e9:f7:ef:ad:27:dd:b9:b3:01:9d:d9:0f:dd:48:
e8:c3:d2:c0:4c:de:09:a0:c3:15:01:78:8d:7e:bb:a6:e1:8a:
8b:ef:08:85:19:b8:0c:0d:00:8e:63:88:0c:ab:2d:06:d9:63:
f4:87:c8:18:6d:2d:81:80:80:a7:d2:20:7b:ab:4a:db:1e:9c:
7b:dd:fe:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ieagFsySyP5Qaek4DeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0
ZWE5OGQwHhcNMjUwNjI4MTkwMTA1WhcNMjUwNjI5MTkwMTA1WjAzMTEwLwYDVQQD
EyhjZDNjNTJmMGEyNDVkNjUyYjM4MDE1YTM1MzAwNjdmNGQyZGE5ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3v2kOb6aGY+dnlD5eveBCFED8Mx
Zd9aJE3UKiNk1fVPtYqvwDlRaLliOVaW3LRojf0t7NopB9G7SDFPOP30AqRo+3UH
ZQSA6UvVGuj3jy2KRzqDHez+EUlPQLj3unsfJyD+4BSbWaioKU2AriSyHC7na4PE
7UAdmBObQL8GMQuWZnIex/QCm9tcLHZ0PdT9FhXC6pcO3Hw71Xy203du4WyqhbkY
1FCRQO58xW0ZLvfDaDud8kXm6kYhuI0ItXkygJdG0R0jJQS4i2Mw3eT6zMAG33p6
9oR0wK17SxHrnEwZ8s0lFXvaruA/aKKKUgheHTca8p+xqE3jPvqpmyV75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM08UvCiRdZSs4AVo1MAZ/TS2p+1MB8GA1UdIwQY
MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt
NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx
LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC0MK2oP
c/x3uoW2DvOJyEiuAgKqGcoPat+XW1VqOyKjty9sjLj0tWuOMQpFW5hot6FshYDT
pHvr2hz0ohThwJneC6MUHygHTqILVs0f8GQD6VpzI8/cJoA8MlGmdi2J9RkzPNjR
EkpS7AsgfCgtTYBKa/MNroMLn2L5BflWCeBQkjM5YGXWJjf00lVtOE1eypUOg3Qg
nSLNq3fYLtNRwV0DD81hQNjSr6aGMOBHTMk3av9eK9Vxjun3760n3bmzAZ3ZD91I
6MPSwEzeCaDDFQF4jX67puGKi+8IhRm4DA0AjmOIDKstBtlj9IfIGG0tgYCAp9Ig
e6tK2x6ce93+gA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:46 2025 by rpki-client