Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: ucKNU5pT9Bv/m7Wf0oMp9OUi1v4BJV4/zckqdiqVwp8=
Subject key identifier: 7E:C4:F7:00:66:D7:E0:25:AE:9E:9B:AA:27:FD:85:14:07:C2:E3:87
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01968C261FF967FBDA9DF8AA4462E977F557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1249
Signing time: Thu 01 May 2025 14:00:30 +0000
Manifest this update: Thu 01 May 2025 14:00:30 +0000
Manifest next update: Fri 02 May 2025 14:00:30 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: ySwsfDSSWvx5pG1gDviqCJ3c/Xkc1WVybFvvjnR+oT0=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:1f:f9:67:fb:da:9d:f8:aa:44:62:e9:77:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: May 1 14:00:30 2025 GMT
Not After : May 2 14:00:30 2025 GMT
Subject: CN=7ec4f70066d7e025ae9e9baa27fd851407c2e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:ed:ef:16:42:7b:a7:07:ba:cf:47:ea:a5:
1f:aa:96:0e:0c:2c:18:b3:65:da:9c:2a:a5:9a:f7:
01:c2:e4:4e:5f:03:65:67:1a:ea:41:63:69:5a:e0:
3d:7d:ca:fc:3a:5b:b8:3e:f2:dd:74:11:9e:c7:de:
43:fb:5f:f3:1a:7d:cd:be:94:3a:35:99:6d:78:5c:
55:6a:3b:e8:92:c5:c9:2b:25:ef:f8:6b:a3:b4:c8:
26:ff:77:39:33:40:fb:1c:0c:07:ff:59:91:cd:b9:
94:22:02:08:d9:9e:5e:30:e6:9c:3d:15:e5:e5:30:
fd:3d:4a:3d:71:c4:c2:2e:e8:ce:0c:bd:fe:1a:2e:
ed:c9:a7:a9:4d:ac:7f:21:93:ce:5c:24:d6:a4:1e:
23:56:91:6d:39:58:e2:19:4a:29:cb:8a:4f:ba:86:
91:20:0c:45:25:bf:b5:fc:da:de:54:90:a6:3e:d4:
d9:ce:09:8e:a7:b1:ba:e2:00:56:5d:b5:5f:a1:4d:
98:09:4d:42:01:ab:e1:ce:e8:f0:b0:6d:96:94:53:
d2:76:de:1a:a5:70:96:93:64:81:c5:ef:11:ad:58:
11:de:38:29:07:c2:8f:2a:f8:14:bf:2a:31:19:12:
ba:f0:1b:12:02:57:37:e6:5d:b8:52:e3:90:82:83:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:F7:00:66:D7:E0:25:AE:9E:9B:AA:27:FD:85:14:07:C2:E3:87
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:39:ee:37:60:0b:86:40:e6:67:6b:ea:ea:a4:3c:cd:b6:
42:ed:80:cf:43:fa:29:cf:88:78:0e:86:bc:56:1c:63:26:1a:
49:ff:df:26:bf:a5:27:76:17:78:e8:a2:91:a7:42:7d:82:a5:
47:74:47:34:a9:6f:6b:37:4b:a5:a4:28:79:ca:9c:4f:72:0c:
4e:7f:3c:71:94:65:9e:b4:8c:92:80:37:3d:d9:6d:78:e2:49:
64:8f:0a:cc:c5:9f:16:de:4e:e3:32:91:f8:d8:f2:d0:27:b9:
89:66:9f:7d:4a:46:cb:01:c9:41:02:85:95:37:3a:b6:84:65:
57:a8:db:b0:36:e2:ce:4f:77:35:e9:7d:ff:48:24:a1:6b:b3:
13:1a:b7:92:dc:ed:c1:35:48:07:ff:61:48:6b:7d:05:c6:61:
15:b3:2c:c0:c3:bd:c2:1b:1b:1f:4a:79:5d:56:cd:b9:1f:05:
c5:a6:c4:5a:9e:a4:e9:fd:35:cd:b8:28:a9:76:51:90:ba:54:
d7:13:33:6f:5a:85:e3:66:86:fd:80:08:f4:c2:b9:5f:be:66:
e6:3b:74:3b:9b:e1:cc:06:88:6a:83:57:c8:2b:7e:5d:f3:d0:
81:ac:4a:3c:77:93:6c:25:c6:98:7c:cd:67:76:b3:8d:38:84:
b4:a9:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:34:36 2025 by rpki-client