Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: lhxsYequKry+UBuqlXkXcRhwM5u+t7CsrPZ3f1gsF7o=
Subject key identifier: 4F:CB:27:35:90:C6:3E:F4:69:F1:0B:9C:8F:EB:D3:CB:72:EE:4A:20
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 01987450BFEA4D037261F61C5E446F85A376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: ChinUtyvh7KuNf/iFelMkSi58Fq81lEP/TSHrvooFNU=)
7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:bf:ea:4d:03:72:61:f6:1c:5e:44:6f:85:a3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=4fcb273590c63ef469f10b9c8febd3cb72ee4a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:fc:3e:e3:a0:3c:1f:16:a6:3f:36:d3:54:
2b:1d:02:e0:51:d0:bb:60:c6:cd:53:b5:df:b5:f6:
00:cd:4d:fc:82:a9:2e:7b:e0:47:aa:2f:f5:94:c4:
97:21:86:dd:a8:e7:79:16:f7:62:bf:a2:47:c0:cf:
d5:85:7c:cc:a0:6e:20:7b:32:66:02:e3:fd:47:00:
79:17:4b:5f:f9:8e:59:b1:a7:ff:e5:27:8f:86:18:
e9:ce:37:f9:47:e8:68:81:fb:67:b7:5d:03:7b:e4:
bd:d9:41:25:50:39:9d:14:5e:b0:90:d8:e7:7d:ae:
84:db:5c:09:18:57:39:2e:2f:86:8a:04:8e:b1:2a:
47:a1:ad:a8:e8:88:81:1e:8b:bb:27:9f:a7:fa:bd:
90:29:fb:da:93:3b:4b:3b:47:17:a8:dd:bf:69:9e:
03:fb:5b:ef:8a:f0:a0:46:40:01:1f:3d:6c:a7:4f:
70:4e:94:9d:ec:d9:f8:21:5f:21:a1:fc:43:a7:e5:
ec:06:a5:a5:c7:a6:c3:f6:d4:48:1a:93:7e:12:da:
3c:91:fd:15:61:a4:20:92:74:b9:4f:84:b8:41:1a:
48:89:c1:bf:85:9d:96:04:54:0a:b2:2e:ab:f6:38:
ad:24:70:e8:d4:82:91:48:a4:07:f9:ab:5a:b5:2a:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:27:35:90:C6:3E:F4:69:F1:0B:9C:8F:EB:D3:CB:72:EE:4A:20
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:44:ce:ff:54:07:61:b9:29:11:5a:07:53:11:22:59:38:c9:
b6:37:f3:a6:38:13:72:7f:2e:5b:e4:bd:02:f5:ea:5d:3c:e0:
d0:a6:da:cf:e6:c5:99:f3:5e:87:f7:6a:0e:a3:8f:ae:e0:d4:
1c:bf:dd:84:2b:34:ea:68:8c:6c:e8:06:fe:0d:ef:eb:5d:8e:
46:c8:13:af:ae:df:b2:f1:ab:0c:5b:3c:0e:3a:37:17:ab:40:
d2:da:a3:d0:ea:d1:22:cc:97:8a:2f:ed:cd:09:a3:4f:57:76:
8a:20:8f:16:29:31:52:40:c3:90:08:4c:96:4f:d8:ea:09:1e:
26:b2:dd:b4:93:f9:63:ea:8b:69:43:7d:69:b6:48:6f:e9:c5:
84:73:39:42:dd:eb:8e:fb:cb:e1:5c:01:2d:51:84:f2:8f:3b:
84:a1:38:d9:87:4b:e9:7d:3f:94:7a:6a:33:55:6a:bc:a1:c6:
fc:d6:dc:39:3a:60:67:f9:12:73:d6:6a:0e:a4:1a:6a:af:00:
4a:a7:1e:43:e4:49:20:61:1a:25:52:3e:90:4e:ae:96:dd:b1:
bc:f3:1b:45:19:ad:eb:dd:42:90:fd:c7:bd:e6:50:e4:31:d4:
22:b9:98:af:42:90:92:a5:e5:c4:e8:33:d5:da:32:19:1e:47:
86:ad:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:35 2025 by rpki-client