Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: wHpvlabxqAmlOIZ3kK0s7zCarXPQuCjuZrIunf5hSlA=
Subject key identifier: 85:A1:D4:D8:99:A0:60:FA:F1:05:F2:EE:32:15:85:32:D6:C4:7D:D5
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0199FD3427AF77812F46202D06B8A7924AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0F67
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: cbN7+HEqIp5MPwHe0wt8NJWvGTISopK02P9qZjXmJnI=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:27:af:77:81:2f:46:20:2d:06:b8:a7:92:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=85a1d4d899a060faf105f2ee32158532d6c47dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:00:de:d1:1d:5c:b8:7c:5b:7f:be:c0:4e:
0f:4e:d9:30:75:e8:8f:fc:1f:19:9c:98:56:cf:74:
f3:ac:2c:f2:d1:9e:d0:74:c3:cd:49:ba:49:00:9d:
28:eb:36:52:3b:b0:15:a9:d4:6d:f3:82:50:ae:15:
ac:26:a0:d9:96:7b:97:25:c8:a6:36:84:0c:da:00:
73:f8:6f:9d:20:ee:9a:e9:36:32:a2:8a:d2:9f:c8:
8d:47:78:ac:2f:03:93:7a:8c:f7:61:03:dd:a3:39:
cb:d5:42:5f:ef:19:d5:cc:d2:af:5a:a5:35:39:74:
8b:a2:c9:f9:1d:a2:52:84:7b:b0:bb:68:c2:78:ac:
a9:49:97:b3:bc:86:72:9f:3f:75:32:28:b2:be:cf:
db:ae:81:b4:d7:90:15:61:dd:b6:2c:68:3d:0a:37:
83:9b:bd:20:6a:49:59:88:a2:c1:24:52:a1:b1:01:
e7:47:c4:2c:54:fb:c9:69:13:cc:4b:2b:4d:3e:45:
81:40:ab:6b:8d:c2:d4:63:5c:ae:2c:17:df:81:d6:
a1:5a:6d:58:f8:84:f1:12:17:65:88:98:71:ed:b6:
ad:ab:47:a7:6b:94:16:16:c6:3a:fc:37:01:f9:ce:
3f:0d:13:a3:6d:77:44:c6:17:68:13:5f:03:f6:fe:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:D4:D8:99:A0:60:FA:F1:05:F2:EE:32:15:85:32:D6:C4:7D:D5
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4d:ea:7c:7e:dc:93:b3:65:92:90:2a:a0:c0:bd:bc:e5:9b:
30:62:6a:9d:2f:9f:d0:4b:a4:97:42:e0:26:5d:66:41:23:9b:
59:a7:67:82:ec:83:54:cb:14:7c:35:48:96:cd:b9:15:b5:56:
80:26:d7:38:eb:eb:13:df:69:be:87:9a:94:8b:4a:6b:81:56:
5d:02:ab:30:8f:40:eb:9b:3d:a6:7f:65:c5:b5:20:f1:31:d1:
e0:8c:18:ac:39:f1:8d:dc:62:66:d3:56:00:df:4f:9d:71:a1:
70:fe:6c:ae:87:ba:50:d0:bb:19:ba:32:8c:0c:e5:26:e2:c4:
6f:4d:33:41:72:73:7b:9b:8d:56:91:59:26:cb:d9:5f:e2:3a:
cb:09:29:93:32:1b:c6:13:7f:1d:85:f8:d3:c2:f4:30:ff:71:
3a:27:71:ed:97:df:d5:41:75:2e:e4:be:8e:70:0d:27:b1:8e:
32:cd:2f:d6:59:e9:83:f8:88:88:a6:16:f9:1b:09:fc:b8:4d:
69:aa:fd:cf:23:9e:a2:49:51:4b:92:e8:b9:5a:e7:59:09:63:
eb:4c:68:23:56:e6:69:ed:89:4f:ea:57:73:57:a5:9d:f5:ea:
f1:36:db:15:5f:d3:ce:66:f3:62:21:c7:73:d6:e8:0f:1e:9d:
d0:ee:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:01 2025 by rpki-client