Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier: 78nwhS7SjFS2H9I4CSqRPYy8aLjfv4bWKyIH34kfUso=
Subject key identifier: 62:CD:66:01:67:FA:DE:B3:73:C6:D9:2C:B0:24:CA:28:60:12:F4:DD
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer: /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial: 0198D472F01F788F3E201D7612875279182F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number: 02AD
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: RuHE3CbuzBAQEthoRnrzof/oKtMOSWOznauMNBuTK44=)
2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f0:1f:78:8f:3e:20:1d:76:12:87:52:79:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=62cd660167fadeb373c6d92cb024ca286012f4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:a8:d5:35:ff:10:1d:1d:80:a1:d8:46:59:
ba:09:20:e6:2d:a5:db:30:2f:02:8a:59:bf:a7:53:
52:e0:f8:9d:5f:ed:e6:7a:d3:79:ab:99:e4:50:76:
ff:40:da:bb:0e:91:ff:f7:90:75:0c:d5:21:16:10:
a8:19:e3:89:63:3a:bb:69:2c:5c:32:28:17:a4:16:
d0:95:69:be:9e:5d:c0:37:59:a4:94:6f:a2:01:0d:
58:4f:4e:ab:ad:34:d7:12:5c:64:35:c8:2c:32:db:
b2:14:74:76:b8:50:e1:c9:32:d4:85:7a:9c:22:56:
fb:23:dc:03:0f:56:f8:68:01:ea:85:b1:d5:0f:e1:
6d:4f:14:5b:12:45:f0:4a:f5:d0:86:26:cb:d1:c6:
e9:08:ac:59:4d:02:0e:83:58:33:dc:87:3c:64:d4:
f3:5e:71:79:47:33:eb:18:fe:a4:1f:38:72:61:a7:
6e:0b:48:4c:92:90:39:69:a6:0a:18:40:70:18:3d:
48:d6:cc:31:46:1e:98:0b:49:eb:ac:9b:3a:33:eb:
32:7a:51:a2:25:2f:ce:bf:1d:4f:2c:d0:fd:f4:4d:
c1:09:9a:15:3a:e8:9a:5b:0f:d5:9d:25:39:d5:cf:
79:e4:2b:1e:e5:4d:c6:a8:3c:6b:7a:21:b5:c1:98:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:66:01:67:FA:DE:B3:73:C6:D9:2C:B0:24:CA:28:60:12:F4:DD
X509v3 Authority Key Identifier:
keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:fc:77:7e:77:b4:60:6c:22:5e:a3:2d:d8:b0:91:8c:72:
b1:6d:38:16:f2:c3:a6:bb:38:ee:1d:bd:2f:f4:93:cf:2f:cf:
00:7f:27:b1:58:03:3e:88:8d:95:66:4e:0f:43:31:2b:63:29:
e6:16:4a:14:86:0c:de:ce:bf:b3:2e:98:b1:0f:be:e1:6e:37:
85:ae:c1:a9:b5:92:6c:1a:1f:ed:78:7f:29:57:95:90:61:e3:
2e:1b:1d:96:05:9c:30:42:ec:b6:9f:1c:78:62:05:e5:e2:64:
39:44:11:99:48:29:bc:5e:da:db:6b:d8:14:3d:74:ed:79:66:
a5:c1:48:b2:e3:d0:df:f9:23:ec:71:0c:9d:0d:5b:e2:b5:0c:
6b:96:ed:6b:13:d7:99:5f:22:64:95:a0:81:df:92:ea:70:f2:
8f:4d:07:ef:80:24:4d:ac:06:d8:3b:46:ca:d5:4c:46:a3:c7:
8d:92:6b:bc:9e:e2:02:4a:a9:5e:ca:67:9d:f5:f0:40:a9:93:
37:cb:ba:ed:70:b6:e7:b1:69:ac:b3:b5:88:ed:b8:48:ed:a2:
43:ce:ed:06:93:94:9a:f6:ea:a9:a0:54:58:d4:cb:8a:f0:5f:
d3:3b:18:fd:81:d3:dd:0f:8f:e1:b7:7e:b2:27:f9:dc:60:ea:
b8:2d:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:49 2025 by rpki-client