Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: c3CS1smkK72JUHR9K9qZpElbnB8z/8qjzu9t4u5LLOc=
Subject key identifier: F4:2B:87:59:D0:45:38:73:30:B2:F2:BB:80:AC:84:28:C2:BD:4E:27
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0198D4E0656930AAB12E307B27ACF2A09CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 061B
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: x+llcanzepb9wDTgaSGgooVnOKbreGvERa7YwzsnBcU=)
2: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (hash: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=)
3: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:65:69:30:aa:b1:2e:30:7b:27:ac:f2:a0:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=f42b8759d045387330b2f2bb80ac8428c2bd4e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:83:a4:10:bf:12:c8:a7:be:5d:6e:45:47:
70:ad:6d:9d:5e:87:30:a7:b9:b0:cb:14:f4:46:8f:
29:99:3a:ff:6b:21:6c:cd:e5:41:64:b6:1c:5f:b6:
0b:9b:bf:91:39:ef:6e:37:ce:1a:1a:2a:34:af:e4:
11:a9:d2:0f:35:46:c9:5f:d8:8a:64:3c:94:54:b3:
ce:0c:30:83:c8:5f:22:f9:0d:7f:c5:43:35:21:76:
9a:14:8c:5d:73:3f:9f:17:5d:d4:25:93:4a:bc:2a:
56:40:c0:ef:78:d1:a5:3e:7a:6f:ec:bd:bb:9c:72:
82:a1:cf:50:5d:38:dc:2e:c2:c3:cb:16:9d:50:90:
9c:9b:f3:aa:37:68:13:a3:5d:75:0e:74:d9:e1:bb:
63:57:35:9c:60:44:5a:5e:f8:0f:60:b1:44:d6:1e:
50:91:16:3a:47:4c:62:25:42:46:f4:b0:7c:12:39:
4f:2e:48:69:ce:f3:89:2e:b8:c9:43:b0:15:9e:8c:
50:ce:8d:3e:4a:55:0a:bb:23:67:77:f7:bf:19:d1:
cc:da:b8:0b:c1:eb:3c:2e:53:4b:cb:52:af:8e:67:
9e:8c:8a:11:3e:e6:66:fa:67:fe:d4:96:1c:39:bb:
4b:54:50:95:c1:b1:06:95:e0:ca:dd:f5:88:83:9c:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2B:87:59:D0:45:38:73:30:B2:F2:BB:80:AC:84:28:C2:BD:4E:27
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:89:b0:51:5b:6c:a8:3f:41:5f:48:3d:e0:10:41:5e:98:
70:19:63:db:20:5e:46:2f:0f:fd:c5:2c:4c:62:1f:e2:73:98:
0b:ef:ce:04:39:1e:a0:97:1b:1e:15:79:a1:d5:62:d9:22:b7:
e9:72:2a:c2:da:15:98:ea:06:73:7a:3d:6a:3a:c6:eb:e1:c2:
7a:ec:02:96:a8:9e:30:9e:b4:6b:f2:1d:be:ab:d7:75:a4:83:
44:00:c7:31:e2:05:d4:5d:aa:04:c8:02:15:5a:e3:a4:57:01:
50:41:ce:8c:25:74:bf:c2:f7:11:25:57:d7:11:33:d0:ad:92:
f5:1f:8b:b6:04:58:fd:2e:e2:65:8e:30:81:6a:07:ae:a9:a2:
e2:02:d5:e2:1d:28:45:69:49:47:3b:7a:60:99:12:63:96:ed:
b1:ea:e9:47:b6:bc:9c:0b:3e:51:b1:53:42:08:1b:59:47:44:
5d:74:5f:b5:9e:54:98:bf:d4:1c:46:a7:51:ce:b3:9d:35:a6:
bd:d2:75:b8:d7:2d:f3:29:14:68:4d:67:ad:1e:32:fc:cd:e7:
e2:bd:69:a3:d3:ae:0b:ca:5d:9b:35:45:d4:97:f6:82:76:52:
65:91:8a:8d:c3:2b:b4:64:eb:57:d3:5e:4a:bc:83:cc:68:e4:
e0:11:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:54 2025 by rpki-client