Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: 57+RKab9AcyV7v4S5zOlrcXwU2PrMj3YRkP3YIScYDo=
Subject key identifier: 97:0D:E2:78:E2:18:0A:89:B4:BC:61:2B:5A:B4:5A:A1:0D:8E:64:35
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0197B9A177374A732B7DCA70F212F8E83C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 15C0
Signing time: Sun 29 Jun 2025 03:00:56 +0000
Manifest this update: Sun 29 Jun 2025 03:00:56 +0000
Manifest next update: Mon 30 Jun 2025 03:00:56 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: nkEpEUNURV1zRhiO3/4yqIMXU786DERk707CzXMUMIE=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:77:37:4a:73:2b:7d:ca:70:f2:12:f8:e8:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jun 29 03:00:56 2025 GMT
Not After : Jun 30 03:00:56 2025 GMT
Subject: CN=970de278e2180a89b4bc612b5ab45aa10d8e6435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:bc:48:bf:7e:76:d4:22:5e:be:ec:25:be:
ad:61:3c:88:1a:6e:61:aa:ec:4d:d2:d3:3b:d6:13:
7d:2c:ee:a3:4c:48:bd:35:92:f6:c6:26:ba:04:52:
74:22:b2:38:35:a4:06:ed:16:6d:52:8f:10:d9:e5:
5f:9d:dd:18:02:8f:15:98:77:79:b5:c2:f0:4d:da:
2a:9b:17:b0:fb:3a:6d:de:3a:9e:17:4e:e5:d5:f1:
7c:83:4b:b9:10:72:f4:8c:80:51:40:ac:35:c5:d2:
16:1c:65:ae:4e:7f:d2:61:54:9c:de:08:57:26:42:
5b:5d:4b:c9:e5:a1:ab:c2:37:e3:a8:d9:7f:ab:db:
f4:fc:e2:75:3f:3e:6a:bf:91:40:07:a6:3c:1d:c4:
6c:e5:14:83:d5:32:53:cc:b3:73:85:a3:66:f5:ef:
bb:bf:f6:9f:20:1a:55:06:ca:ca:3b:c8:fc:0c:88:
0e:b1:34:d7:78:8f:b5:4e:8d:71:1d:38:2d:7a:79:
6a:09:aa:87:52:47:24:22:6a:6d:b7:2c:ac:58:87:
f0:bb:79:ae:5b:04:a2:1c:0c:09:ca:c1:26:64:05:
06:67:99:9d:dc:5b:99:57:8b:3b:b0:af:7d:64:d2:
8b:06:57:01:2c:4b:d5:e5:4f:01:15:67:67:05:27:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:E2:78:E2:18:0A:89:B4:BC:61:2B:5A:B4:5A:A1:0D:8E:64:35
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:d8:d4:44:11:c2:26:cc:2f:d7:81:12:1a:99:fa:41:5a:
cb:7b:a5:c2:27:55:65:ed:7b:2b:a0:75:f5:63:54:9f:90:e2:
64:7a:38:2b:9d:df:de:0b:3d:35:cf:6a:65:08:9d:e1:ed:41:
74:6e:ed:2d:ed:42:0d:bc:41:61:2a:dd:59:07:b3:3c:f5:28:
91:54:39:35:a0:0a:7d:af:2b:ca:5f:55:8c:4e:ae:b4:3e:35:
95:ab:d0:d2:24:23:cb:c2:a0:0b:5f:b1:d8:88:82:5f:60:82:
6b:71:38:84:0e:b4:95:48:cf:a9:fa:3f:20:a7:08:db:e5:2f:
0a:78:10:cf:a7:a6:99:3d:09:2e:28:f6:04:57:f8:00:21:83:
68:28:66:a0:72:ea:65:b7:7d:d1:dd:b2:56:90:fc:75:b3:d7:
a7:09:82:9a:8a:8e:ca:52:3b:db:3d:7c:6f:90:b1:ca:c3:0f:
31:b2:1e:9c:e3:79:2f:65:43:94:76:c4:51:a3:d0:60:56:f6:
44:fe:34:cb:e3:23:e4:fd:00:c3:86:7f:a3:12:e9:f6:18:d2:
be:79:d0:c4:e3:2b:f7:6d:6f:86:31:72:40:92:64:c9:2e:56:
c0:9d:02:aa:d5:f0:27:26:a5:cf:86:e9:76:86:af:3b:c6:72:
8a:a9:8c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oXc3SnMrfcpw8hL46Dx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjUwNjI5MDMwMDU2WhcNMjUwNjMwMDMwMDU2WjAzMTEwLwYDVQQD
Eyg5NzBkZTI3OGUyMTgwYTg5YjRiYzYxMmI1YWI0NWFhMTBkOGU2NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsi8SL9+dtQiXr7sJb6tYTyIGm5h
quxN0tM71hN9LO6jTEi9NZL2xia6BFJ0IrI4NaQG7RZtUo8Q2eVfnd0YAo8VmHd5
tcLwTdoqmxew+zpt3jqeF07l1fF8g0u5EHL0jIBRQKw1xdIWHGWuTn/SYVSc3ghX
JkJbXUvJ5aGrwjfjqNl/q9v0/OJ1Pz5qv5FAB6Y8HcRs5RSD1TJTzLNzhaNm9e+7
v/afIBpVBsrKO8j8DIgOsTTXeI+1To1xHTgtenlqCaqHUkckImpttyysWIfwu3mu
WwSiHAwJysEmZAUGZ5md3FuZV4s7sK99ZNKLBlcBLEvV5U8BFWdnBSdWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcN4njiGAqJtLxhK1q0WqENjmQ1MB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeenY1EQR
wibML9eBEhqZ+kFay3ulwidVZe17K6B19WNUn5DiZHo4K53f3gs9Nc9qZQid4e1B
dG7tLe1CDbxBYSrdWQezPPUokVQ5NaAKfa8ryl9VjE6utD41lavQ0iQjy8KgC1+x
2IiCX2CCa3E4hA60lUjPqfo/IKcI2+UvCngQz6emmT0JLij2BFf4ACGDaChmoHLq
Zbd90d2yVpD8dbPXpwmCmoqOylI72z18b5CxysMPMbIenON5L2VDlHbEUaPQYFb2
RP40y+Mj5P0Aw4Z/oxLp9hjSvnnQxOMr921vhjFyQJJkyS5WwJ0CqtXwJyalz4bp
doavO8ZyiqmMRw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:41 2025 by rpki-client