Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: wW+1yvuRJT9D5kzESBCtJwNW28XUlsuDKYCagoVCPg4=
Subject key identifier: DD:67:E0:05:4A:96:94:34:CD:5C:4E:39:92:E7:63:41:BC:BF:1A:1F
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0197C94BF85C5185BFB5C9904D52FD2A39D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 15C7
Signing time: Wed 02 Jul 2025 04:01:28 +0000
Manifest this update: Wed 02 Jul 2025 04:01:28 +0000
Manifest next update: Thu 03 Jul 2025 04:01:28 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: V2cAvSwpzAxMasmr/ReH9sM4W0EONCIGYLqLHbU3O9Q=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:f8:5c:51:85:bf:b5:c9:90:4d:52:fd:2a:39:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jul 2 04:01:28 2025 GMT
Not After : Jul 3 04:01:28 2025 GMT
Subject: CN=dd67e0054a969434cd5c4e3992e76341bcbf1a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:b8:70:9a:ce:8a:ea:59:19:8a:ad:7f:ef:
33:df:07:8f:68:36:33:d6:a1:3b:be:d9:a7:3d:4f:
fd:8d:d1:c9:dd:23:93:3b:59:47:e3:fe:8f:f4:5d:
c1:c9:51:7b:c3:38:86:8f:d9:e8:30:db:be:ad:51:
07:7b:be:d2:65:16:27:d4:53:64:d9:c6:aa:0f:e8:
f4:6f:60:24:1a:9b:37:75:b9:68:c6:e9:5a:97:1d:
fe:90:69:76:4f:c1:a4:a7:1f:cd:9b:85:2d:4c:67:
cf:35:e1:f7:01:33:01:11:d2:b7:9b:f7:74:c1:c3:
75:1d:5d:74:ff:c7:e0:74:55:32:ad:0e:1c:18:15:
e9:00:b6:bb:79:aa:6d:ba:06:48:2e:7e:36:bf:cf:
3c:87:15:82:59:99:90:45:8a:ef:ff:aa:de:62:d6:
29:82:a4:2d:46:bb:f4:a7:25:d5:2a:66:3f:e0:21:
49:0a:f7:e6:2f:86:a2:8f:8e:82:a2:1e:2a:a0:c0:
a0:67:dd:bc:c2:3a:50:3d:a2:0b:26:be:35:b7:93:
87:68:f7:8f:11:61:61:ed:bd:0f:8a:94:f2:6c:af:
83:23:e9:87:7e:00:9a:34:43:88:32:02:ae:4e:bc:
39:a5:a9:28:e7:7c:70:29:63:ec:70:c5:81:56:bf:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:E0:05:4A:96:94:34:CD:5C:4E:39:92:E7:63:41:BC:BF:1A:1F
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ec:62:44:8d:37:8d:f8:0b:86:6a:ba:bc:1e:ff:af:b3:70:
17:32:db:14:01:ea:0a:d0:a1:2e:f4:c4:d0:ea:f9:fe:8e:1a:
6a:c3:9f:af:1e:ca:a9:3c:62:ad:c0:56:ea:98:d9:27:69:66:
6d:1a:59:b3:f2:d5:82:61:0c:58:21:3c:3d:57:47:0c:36:93:
b3:5d:5d:70:cf:f9:c1:69:01:6f:cd:8b:a9:09:aa:54:97:23:
ac:e6:52:25:f7:41:fd:b5:56:5b:ad:dc:1c:e9:77:5b:9d:42:
cf:ba:e6:77:a7:d0:28:91:14:09:51:1e:e6:20:9a:57:ff:c8:
65:31:0b:60:91:9d:f2:cf:a0:ea:db:a8:60:0c:a2:46:b0:42:
23:b2:5f:43:a5:8c:7c:f8:9f:61:a7:c3:3e:29:40:f7:92:da:
e5:aa:f4:c3:eb:7f:c7:db:a1:a5:3a:28:09:39:84:6e:7f:1c:
a2:94:c0:d7:da:05:42:58:d6:cb:4e:ed:5c:1c:fe:fb:5c:47:
2a:07:96:c4:52:e6:e6:ea:46:bd:0e:cd:5f:36:4f:84:dc:f9:
80:19:ca:5a:b9:36:1e:d3:88:86:b9:16:04:8c:f0:b9:95:f4:
76:f5:33:8a:49:e4:a8:f9:6d:83:08:15:c2:01:8e:65:30:97:
70:c5:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:30:04 2025 by rpki-client