Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: C+hcqgbf413QKNZ5L0n1CKLR5jZaQh0AbXgBcW+O4VU=
Subject key identifier: 8B:DE:63:C6:40:FB:A3:4A:C4:29:D8:13:A4:23:FF:95:17:A5:DD:E5
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0197B7EAA8C745F4DB8EFF0A41BB06E73E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0587
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: WHyS8IYJzOjxsTS09q3Ur3CAGzvKsfRQ/mZ8+2qLU+c=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:c7:45:f4:db:8e:ff:0a:41:bb:06:e7:3e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=8bde63c640fba34ac429d813a423ff9517a5dde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:b0:e0:01:a1:6c:4a:75:cd:81:a7:a0:7c:
9f:82:8f:b8:82:01:7a:75:d9:d8:71:6c:1c:81:56:
cf:32:39:a4:88:af:8b:1d:40:a8:0e:97:35:f6:52:
16:15:76:3c:ec:ba:a2:ee:ea:16:10:32:1f:49:18:
60:d7:df:a0:ee:d3:e3:71:8a:c7:71:31:e6:e0:01:
ad:cb:f9:b6:8b:20:25:ae:63:79:b7:33:07:85:b2:
6e:7c:8e:32:64:b9:6e:2e:53:c6:01:bb:eb:43:16:
9f:c2:e6:88:60:8a:e3:95:df:d6:f6:07:fc:cf:53:
4a:76:8e:12:ea:89:71:34:0a:1f:1f:32:38:0e:a5:
9b:22:4a:a4:bf:c3:6d:b3:ad:a3:94:68:81:09:7f:
f0:7a:dd:40:52:90:8d:1d:f1:43:82:84:25:0b:fa:
28:c7:91:fa:2f:a7:30:13:9f:39:ab:f9:40:3a:25:
2b:66:07:3d:4c:60:25:c9:1a:fb:b0:75:89:60:36:
86:a4:bf:00:ec:54:91:db:88:02:6d:c3:8d:bb:ad:
78:d8:b2:ca:e5:0f:8d:78:68:86:9b:eb:30:18:2f:
e2:65:cc:39:7d:0f:41:24:30:52:8f:9d:4a:47:55:
b3:1c:00:e5:fb:69:20:8a:1f:df:35:9d:56:d5:3a:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:63:C6:40:FB:A3:4A:C4:29:D8:13:A4:23:FF:95:17:A5:DD:E5
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:67:48:da:b2:f9:13:54:4a:52:fc:ac:99:ea:7b:86:a5:7c:
65:ae:d4:14:c4:31:1f:13:a1:fa:04:74:73:dc:7e:83:a8:41:
7f:39:b9:3e:30:94:5a:af:35:fe:b0:21:ee:8c:e0:01:97:e0:
87:02:f1:f2:c2:51:77:eb:4c:9f:e1:a3:6e:5a:bf:9e:78:63:
31:3a:21:9f:79:c4:9d:ac:03:bb:7a:be:a9:c4:30:d8:ca:31:
fe:1a:49:46:3b:39:8d:34:dd:97:34:93:44:9a:cc:a6:14:60:
91:7a:02:a1:8a:72:14:86:c4:82:45:b6:07:d7:85:ef:04:bd:
2e:4f:d4:21:84:84:dd:83:db:20:82:e8:35:62:c9:b5:f8:f4:
ae:51:4c:c2:23:c6:9d:1e:1f:28:f8:6c:b9:45:ac:db:0d:87:
04:56:28:82:db:33:75:5b:f1:27:c3:85:48:5d:60:07:5e:6a:
e5:4a:38:22:40:d9:2d:15:e9:b7:12:1b:93:80:1f:0b:a3:c5:
7c:5f:38:11:da:a5:31:85:a3:a3:1a:90:54:d8:c4:92:08:43:
f4:bc:b3:e8:0f:44:1e:16:2e:23:59:cd:f5:58:9f:6f:80:50:
b2:44:f9:8e:41:8c:ba:6f:e5:74:93:f6:98:5f:e8:d0:fa:04:
94:8b:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:21 2025 by rpki-client