Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: XKp4WgUa7KiETZB5JaWOcjGiEYBy9U+ThUNcxc6YoNE=
Subject key identifier: F8:71:EF:F8:4D:0B:ED:33:33:C4:7F:DD:C0:F8:30:F7:F1:E6:E7:DD
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0196C0B8C6BB041E2CB6F1B00E0977A61803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 19:00:57 +0000
Manifest this update: Sun 11 May 2025 19:00:57 +0000
Manifest next update: Mon 12 May 2025 19:00:57 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: NRA0CXgi/cdoU7JHNDQ5FG9ALA5YY63SfnMlOC3/j9Q=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c6:bb:04:1e:2c:b6:f1:b0:0e:09:77:a6:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: May 11 19:00:57 2025 GMT
Not After : May 12 19:00:57 2025 GMT
Subject: CN=f871eff84d0bed3333c47fddc0f830f7f1e6e7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:69:8b:43:e5:c9:d5:56:a4:21:c0:01:1d:
ca:85:12:dd:55:62:d9:4b:b2:95:7e:a8:1f:cb:8c:
eb:6f:40:07:1f:21:a1:39:40:3f:01:c1:dd:a6:94:
38:8e:f6:5b:8a:2c:1a:2e:03:69:d5:bc:c8:92:39:
b0:5f:f5:9f:97:36:b9:b7:d2:c0:95:29:ce:fa:01:
00:9b:30:0e:fe:46:25:11:9f:71:69:49:b1:14:1c:
80:cf:55:ce:8b:81:f5:5f:20:5b:7e:e5:e8:8e:36:
5e:5a:01:ee:77:da:fe:03:8c:c5:0b:41:86:a2:88:
ec:46:c8:b5:dd:3b:d3:ab:65:80:73:ad:79:d2:67:
d8:21:52:1e:9f:82:57:80:8f:3a:b4:e7:a5:ee:f8:
10:03:5d:6d:5f:6d:99:db:90:fc:fb:82:f1:79:09:
46:02:89:1c:f3:68:45:eb:0d:7a:94:cf:e2:ec:6e:
98:56:64:66:92:07:09:45:c5:c1:82:13:09:80:05:
83:83:33:a6:27:6b:ca:f4:f9:22:76:95:42:88:6f:
5d:89:09:7a:76:55:2f:08:31:a0:5e:25:97:12:d5:
7d:dc:24:e3:7f:08:da:ba:9f:1f:68:61:b4:40:cd:
6a:51:35:90:ee:74:48:c8:28:bc:85:77:f2:99:28:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:EF:F8:4D:0B:ED:33:33:C4:7F:DD:C0:F8:30:F7:F1:E6:E7:DD
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:bc:3e:3e:34:7b:bd:54:85:37:06:02:58:fd:b3:dc:6e:
82:43:15:04:83:40:29:b7:6e:44:a0:8f:7b:85:bd:e8:fd:1b:
1e:2b:28:5f:f4:90:dc:c6:34:2c:b6:95:e4:26:33:21:71:63:
50:99:65:2e:f8:e5:9e:72:20:aa:8d:3f:e9:58:7e:8a:71:9b:
a1:ba:e3:18:74:75:39:03:e9:4d:ce:5f:c0:1b:e0:39:53:5a:
6d:32:ed:d9:73:2b:74:11:a7:00:28:d3:e4:7d:1f:60:9b:d3:
98:54:38:e7:cb:55:98:39:eb:7b:09:37:2c:52:ad:33:5d:05:
e5:99:f3:7e:c1:44:e4:a4:13:3c:6b:a1:f0:47:a5:1f:bb:fa:
41:ca:82:69:db:3b:d6:01:2c:b8:ad:44:a9:db:08:2c:a2:ef:
0c:8f:cc:72:33:a4:4d:3e:75:fd:12:ab:aa:c6:1f:a1:06:96:
dc:6e:de:36:c7:61:e5:38:ca:83:f6:78:f0:9a:a8:4c:a9:82:
97:e9:3b:86:f5:13:74:ee:74:d3:9b:73:21:a8:02:e6:b0:14:
f0:38:2a:e6:64:f1:2a:69:2d:b8:10:46:54:bd:9a:ec:54:ab:
e1:3f:1f:eb:5e:5a:0b:3e:dd:10:eb:52:33:d6:c9:a9:67:b8:
ba:04:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:11:06 2025 by rpki-client