Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: llvjbqxZBlP33uGV3nQK8Fn9TinnW2Qo/29QcIB5pHs=
Subject key identifier: 44:09:F6:1D:00:A7:4F:07:4D:79:01:3F:54:74:E8:47:D3:8A:42:F7
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0199FD33DEC11F50DA759E6487429377C462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 16:00:58 +0000
Manifest this update: Sun 19 Oct 2025 16:00:58 +0000
Manifest next update: Mon 20 Oct 2025 16:00:58 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: Cd7jJ8xPLxpgXTE8et1DYa/3DE9FkKr2DCuVhTGSKaA=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:de:c1:1f:50:da:75:9e:64:87:42:93:77:c4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Oct 19 16:00:58 2025 GMT
Not After : Oct 20 16:00:58 2025 GMT
Subject: CN=4409f61d00a74f074d79013f5474e847d38a42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:be:ef:05:ff:aa:2c:91:b6:fc:d1:2c:a5:
8f:f0:c3:0e:ee:4d:fe:7d:de:39:81:79:72:73:ac:
82:c4:34:38:a2:e5:d6:2f:9a:4a:c3:ec:8d:fc:fe:
f1:4c:38:89:2f:53:08:c7:6f:96:30:64:f1:cf:f0:
cf:e0:ea:07:f3:88:61:a3:9f:e4:96:c3:4d:96:82:
a6:69:32:70:1e:f7:5e:15:74:e8:ca:41:36:77:53:
79:03:da:f6:cb:90:d6:7a:42:15:f2:ea:a0:c8:06:
e5:59:33:93:1e:43:fd:2a:76:ff:84:57:3d:dc:14:
aa:0a:19:fe:b4:37:5a:0a:50:64:fb:45:a8:02:d5:
93:fe:9b:42:d6:56:d3:52:33:9d:08:2d:6a:e7:6d:
5f:d3:f9:c1:2c:57:9b:ac:f3:b4:aa:9c:bd:10:b2:
0d:bd:8e:de:2d:39:1e:7a:f0:35:c2:ea:cd:46:38:
dc:84:be:42:41:e7:95:c1:55:9c:aa:31:71:65:81:
ea:0c:bd:7f:21:92:73:aa:68:1e:28:ef:7c:ee:67:
e5:87:80:95:40:95:68:4e:14:f2:e8:b3:a1:72:62:
08:33:22:35:ce:67:57:d0:5e:d2:c9:97:24:b3:16:
04:99:ca:a2:e8:28:60:83:1a:8b:60:bf:13:b4:63:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:F6:1D:00:A7:4F:07:4D:79:01:3F:54:74:E8:47:D3:8A:42:F7
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:d5:bf:d8:59:0f:a5:3f:54:a4:6d:65:6b:f2:ba:c2:34:
0c:6f:16:eb:2e:a5:77:b6:fc:e0:0f:76:f3:63:72:72:99:71:
9c:f1:44:1f:d7:9b:72:ce:4e:44:bf:5d:30:9b:1d:21:94:c4:
f8:0f:e6:86:c0:85:62:7c:39:06:df:e6:e4:9c:4a:da:bd:62:
a8:3a:90:27:63:22:ff:ac:9f:ec:30:24:ea:d3:de:88:4b:9f:
51:7c:88:4a:52:c4:fd:60:da:ca:69:b2:c6:ab:bc:bb:d5:33:
03:56:5e:4b:13:bf:58:6f:5f:f2:53:f6:31:01:c9:38:1f:95:
fa:f8:c7:f7:f0:0d:56:33:0f:c7:15:17:95:5f:c0:17:76:b3:
d0:cf:22:f0:4f:a9:ed:62:ac:b9:be:b9:6f:df:e4:dc:20:54:
97:37:4e:7b:9b:38:42:62:1a:4a:8b:c9:9d:72:ee:f3:fc:cc:
2d:ce:af:ff:4c:39:24:d7:db:66:36:0c:ca:4c:14:ff:27:d5:
2f:bd:1e:3b:ff:24:d2:8a:5d:71:bc:75:e7:bd:5b:6f:e3:00:
c1:99:8f:17:34:15:dc:c6:f2:cc:9e:e6:d0:6d:22:98:af:51:
7c:1c:e0:c8:26:3e:b2:b9:82:03:b8:22:e4:54:63:b7:9a:9f:
bd:89:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:24 2025 by rpki-client