Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: +jnw6lYQvXla/WDSE22/dfUA/12pB7CGG12WGXs1bW8=
Subject key identifier: 8E:84:C0:98:1E:70:FA:94:B9:10:F1:A9:92:47:D4:FB:1B:BE:DE:C1
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0199FC58D06CCFAAAFBDD1B87C9C7A1A0144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 06B4
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: mRuHk6staxLH9r43wAGrqula9urW+2Raf54bFjsH5xc=)
2: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (hash: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=)
3: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:6c:cf:aa:af:bd:d1:b8:7c:9c:7a:1a:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=8e84c0981e70fa94b910f1a99247d4fb1bbedec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:1b:3c:f9:36:aa:f5:3d:eb:b0:3c:41:21:
53:f7:b0:4b:ea:7a:3f:38:e6:b5:34:41:0f:33:8c:
28:7e:89:64:4c:d3:50:cc:f7:71:54:36:e8:8f:2a:
f4:ee:b3:31:67:56:84:6b:c3:00:13:5d:07:fc:a3:
94:34:a7:4c:c0:35:1f:f1:e0:66:a0:dc:f6:b8:4e:
7f:69:90:0a:e3:8d:1f:7f:40:1c:3c:96:02:e5:a9:
56:b2:f1:81:0f:3a:e6:dd:53:26:a1:64:50:97:1a:
13:37:eb:0c:20:d2:a9:5a:d5:ca:71:e5:b4:f5:67:
c7:f2:24:03:a9:d9:ac:69:c0:4f:96:3d:f4:6a:1e:
f4:0c:79:38:2d:30:96:98:8c:96:24:c7:7c:f7:07:
b9:29:7f:fd:56:90:89:87:19:1c:e1:3f:24:ed:0e:
5e:58:cd:15:ed:d1:3f:e7:76:b8:7e:5e:f4:3a:07:
9c:0e:94:ee:f0:a7:1e:53:e2:71:ee:e5:b8:83:8d:
9c:1e:6a:95:1f:3f:13:3f:31:96:37:0f:87:db:59:
8b:7a:d6:64:5d:6f:a2:51:3a:82:cd:65:91:7f:15:
be:70:65:d3:9e:7b:d9:ed:4f:d1:ae:5e:5a:95:1a:
9f:2c:29:d4:14:58:4e:71:ff:78:be:9d:ca:1d:cb:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:C0:98:1E:70:FA:94:B9:10:F1:A9:92:47:D4:FB:1B:BE:DE:C1
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:a2:10:e1:99:d8:90:41:e5:5c:03:2a:b3:90:98:cc:80:
80:14:2d:0f:4b:3b:7e:ec:b4:e4:68:86:81:c2:55:f8:99:e3:
e5:f6:2e:49:5c:85:f2:ee:41:08:68:e0:1e:7c:ff:1f:ad:9f:
2c:a4:6a:67:be:66:16:02:94:03:56:fa:b4:1c:f8:0b:18:f9:
ec:e8:64:46:95:80:56:71:57:e7:05:d9:d0:c3:1e:0f:dc:51:
c2:2b:c2:33:7b:0f:d6:c9:c8:00:6a:7f:6b:45:74:31:8c:bc:
87:5e:b0:f9:63:48:66:e7:66:d8:63:3c:a4:5b:93:45:4a:d0:
04:82:71:81:df:b3:eb:38:a5:94:66:d4:66:7a:d4:2b:6e:8f:
19:72:1d:c7:0c:23:33:f6:44:b5:97:a6:e9:44:89:09:cb:a0:
25:9b:ad:b9:f7:14:7f:01:64:67:d3:a6:3d:8b:12:64:d2:b7:
6f:d1:0e:66:f4:4e:41:73:b4:28:5e:1e:00:1a:0d:97:46:b3:
d4:f6:68:d9:9d:19:16:ad:f5:36:38:46:23:8d:14:44:64:1f:
89:d7:61:27:99:b6:26:13:07:41:61:73:78:6b:57:15:56:cd:
25:ba:29:7b:04:21:42:30:4f:90:cb:d0:99:ca:81:49:1d:48:
87:1a:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:41 2025 by rpki-client