Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: pYRpiafJ3A44AutzNW+esI1EckHmmhdinoPiTz0cUpw=
Subject key identifier: 7B:9A:F6:13:0C:03:38:A9:9B:E0:EB:37:2A:14:3B:E8:3E:EE:FC:A6
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0196C26FFE06C084DC8CBDC0D52E6C175DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1540
Signing time: Mon 12 May 2025 03:00:41 +0000
Manifest this update: Mon 12 May 2025 03:00:41 +0000
Manifest next update: Tue 13 May 2025 03:00:41 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: X/9G2gHfVWkrhr91KefqC6/Fu++Jd1DYGOP5NDCy3lw=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:fe:06:c0:84:dc:8c:bd:c0:d5:2e:6c:17:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: May 12 03:00:41 2025 GMT
Not After : May 13 03:00:41 2025 GMT
Subject: CN=7b9af6130c0338a99be0eb372a143be83eeefca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:5c:17:04:2f:7c:ba:e3:d2:08:fa:16:35:
3f:e4:f0:9e:41:5b:ee:fb:d3:aa:78:a0:4c:dc:13:
e7:ec:94:ef:45:e1:28:6c:d3:b4:dc:73:dc:6c:35:
07:e6:da:ab:dc:af:51:52:1b:6e:18:db:1c:9f:66:
9c:48:3a:4f:46:68:50:17:7b:a9:59:ea:55:dd:de:
55:c5:c2:62:f3:fe:f5:42:98:fb:cd:a0:d9:cd:f7:
8a:88:ab:dc:03:53:14:5c:66:cc:78:64:b8:a6:14:
63:52:05:67:5b:bc:ed:b3:2b:66:e1:39:4c:e8:02:
15:d9:54:99:59:49:5e:bb:52:30:d6:54:5d:5a:9a:
07:61:c6:4d:05:9f:36:8e:7b:1e:6e:3b:29:90:01:
c1:42:1c:e3:c2:b8:95:51:2a:1a:e1:0d:3c:9a:49:
5b:da:78:80:5e:88:00:77:5f:0d:38:6f:6b:9a:f6:
6b:62:65:9f:1d:b2:ae:1c:e6:67:6d:4f:58:01:bd:
27:a0:32:17:1f:e1:9e:60:3b:b4:f4:b9:03:f0:0c:
b5:07:a8:20:6c:65:bd:0b:ac:19:c0:ee:36:22:db:
6b:ff:ca:fd:64:71:3a:0b:d4:09:ec:c4:42:84:6b:
ca:08:57:a0:ce:73:c1:cc:a0:81:73:d7:03:ec:d7:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:F6:13:0C:03:38:A9:9B:E0:EB:37:2A:14:3B:E8:3E:EE:FC:A6
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1c:ac:f4:ea:34:fc:e7:f5:b2:1f:6d:e8:99:96:20:dd:d8:
32:dc:6f:b1:d1:5d:44:ef:16:08:b9:79:86:2b:7a:30:61:da:
12:5f:8f:c7:56:32:0d:7e:48:ab:60:b6:5c:e8:9d:c6:36:c9:
c4:fd:e6:0a:2a:c6:5e:e6:a8:02:31:b6:b4:6e:5c:f8:ab:2e:
66:9c:f9:54:28:a9:e2:50:9f:22:ad:6e:b6:16:76:1a:fd:89:
f5:84:f2:d1:2b:4b:46:d6:f9:5b:0c:32:9f:0d:4f:a9:dc:34:
61:a6:3f:6e:f5:0e:36:ee:f9:d7:70:7e:02:cd:ce:75:fd:4f:
93:da:a1:9f:c8:05:4d:00:91:ae:7d:85:71:18:d1:1b:fc:a9:
14:98:88:60:bd:41:49:30:d5:1b:dc:26:b3:76:02:86:ab:1b:
65:8b:1f:0c:fc:fb:b9:5b:21:cf:fb:25:a2:bd:d0:13:d9:d4:
fa:83:0f:a1:ec:1d:ad:f2:ee:b6:2c:b7:74:39:96:d4:a8:1c:
1d:bf:b6:18:12:7e:ce:19:a6:b8:ee:76:0b:f8:ac:1a:4e:dd:
e8:38:ca:59:4c:d8:41:0b:12:d8:99:4a:bd:28:7e:8c:b6:32:
38:3e:e6:17:89:e0:3c:d5:a1:d2:c5:e4:48:55:df:a0:10:3b:
0a:bc:94:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb/4GwITcjL3A1S5sF120MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjUwNTEyMDMwMDQxWhcNMjUwNTEzMDMwMDQxWjAzMTEwLwYDVQQD
Eyg3YjlhZjYxMzBjMDMzOGE5OWJlMGViMzcyYTE0M2JlODNlZWVmY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPRcFwQvfLrj0gj6FjU/5PCeQVvu
+9OqeKBM3BPn7JTvReEobNO03HPcbDUH5tqr3K9RUhtuGNscn2acSDpPRmhQF3up
WepV3d5VxcJi8/71Qpj7zaDZzfeKiKvcA1MUXGbMeGS4phRjUgVnW7ztsytm4TlM
6AIV2VSZWUleu1Iw1lRdWpoHYcZNBZ82jnsebjspkAHBQhzjwriVUSoa4Q08mklb
2niAXogAd18NOG9rmvZrYmWfHbKuHOZnbU9YAb0noDIXH+GeYDu09LkD8Ay1B6gg
bGW9C6wZwO42Ittr/8r9ZHE6C9QJ7MRChGvKCFegznPBzKCBc9cD7Ndw3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHua9hMMAzipm+DrNyoUO+g+7vymMB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhys9Oo0
/Of1sh9t6JmWIN3YMtxvsdFdRO8WCLl5hit6MGHaEl+Px1YyDX5Iq2C2XOidxjbJ
xP3mCirGXuaoAjG2tG5c+KsuZpz5VCip4lCfIq1uthZ2Gv2J9YTy0StLRtb5Wwwy
nw1Pqdw0YaY/bvUONu7513B+As3Odf1Pk9qhn8gFTQCRrn2FcRjRG/ypFJiIYL1B
STDVG9wms3YChqsbZYsfDPz7uVshz/slor3QE9nU+oMPoewdrfLutiy3dDmW1Kgc
Hb+2GBJ+zhmmuO52C/isGk7d6DjKWUzYQQsS2JlKvSh+jLYyOD7mF4ngPNWh0sXk
SFXfoBA7CryU8Q==
-----END CERTIFICATE-----
Generated at Mon May 12 10:40:58 2025 by rpki-client