Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: Vn0kZA90c+JRHKiCptaLjylB32t2q4XNDc7OhwqAKTY=
Subject key identifier: 26:59:21:FF:87:06:94:80:43:D7:E0:E4:44:44:CE:5E:9C:02:AB:A8
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01988545121F4437158C65FEEA5C46837035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 076A
Signing time: Thu 07 Aug 2025 16:02:33 +0000
Manifest this update: Thu 07 Aug 2025 16:02:33 +0000
Manifest next update: Fri 08 Aug 2025 16:02:33 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: i7ycJl5zFmWn+Nn6JxmStO6IaDTI07YaAlaGIZGYIrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:45:12:1f:44:37:15:8c:65:fe:ea:5c:46:83:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Aug 7 16:02:33 2025 GMT
Not After : Aug 8 16:02:33 2025 GMT
Subject: CN=265921ff8706948043d7e0e44444ce5e9c02aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:64:22:de:1d:4f:a0:79:c9:a6:9c:be:90:
13:7b:3c:cf:44:eb:e7:81:23:59:b1:3a:a8:fb:13:
49:90:b6:54:2b:09:78:64:70:4a:29:67:e8:f1:ba:
2e:f4:4e:d1:d7:c7:78:65:26:00:19:d3:52:20:74:
1d:bf:f3:53:33:e9:01:84:8d:d2:a3:3b:ff:37:32:
c6:4d:69:bf:68:4d:3c:f3:91:79:1a:ca:00:38:fb:
11:ab:82:c4:94:17:0a:f7:1f:a7:de:f4:0d:4c:c2:
3a:6a:38:d4:ed:5b:8c:4f:bb:f4:5c:33:9c:52:0f:
bc:0b:5c:10:9f:7d:40:b8:20:a8:2d:8c:12:14:3e:
98:4e:2a:d9:15:f0:4f:b5:25:82:2b:c7:fd:62:0b:
d9:b1:78:da:66:1b:49:29:06:83:6b:9b:15:56:5d:
3f:f4:e5:e6:9f:c3:99:52:b7:54:a5:df:16:fb:28:
c0:2e:b8:26:47:bb:cd:70:b6:8f:db:a3:0d:b8:b2:
18:6c:6e:91:d0:ff:ec:a1:7c:4f:76:c2:92:a4:cd:
c3:7c:72:ee:76:de:41:23:8d:c1:06:98:1a:09:b8:
f4:0c:c0:26:73:9c:33:24:83:90:28:41:c6:69:fe:
7c:95:22:0d:e6:b2:8b:30:a9:53:05:86:fb:e4:82:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:21:FF:87:06:94:80:43:D7:E0:E4:44:44:CE:5E:9C:02:AB:A8
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:4a:bc:10:2f:de:77:db:e0:c1:87:84:2b:0c:b5:8e:f2:
94:3a:3f:0d:ad:3a:e4:d5:d2:a5:af:8c:f8:14:da:c5:49:e4:
3e:04:92:e9:8a:29:71:29:65:38:4a:e9:a7:dd:60:70:72:0c:
30:6d:2e:26:f4:1d:4b:37:ba:09:68:d7:30:f8:41:90:bc:b6:
6b:41:f5:ea:22:0e:93:51:d0:a3:8a:ef:53:3d:50:87:c1:1d:
20:bd:e1:e1:d0:2b:6c:ab:f1:a1:c2:46:5f:47:07:5d:a8:7d:
74:e0:bc:88:b4:ee:63:eb:88:fd:dd:93:f3:d2:1b:8f:a3:39:
d9:d5:c2:0b:41:ff:26:4a:49:80:9c:df:fe:84:64:73:f8:19:
09:a8:ea:24:96:9f:85:ae:d9:21:bf:85:5a:4a:2d:10:b7:4e:
b9:49:58:ca:4c:1b:74:3b:f9:6e:1d:1c:17:8d:59:e1:8b:78:
fd:3c:ec:d1:ad:58:c2:5c:26:e7:1e:30:bc:26:39:29:d5:0f:
5a:5b:3b:6f:13:83:3a:64:5d:40:a6:1d:3d:44:1b:86:54:c1:
b5:fd:0d:dc:4e:98:3e:e4:e5:dc:37:1d:5d:29:56:e2:b2:e1:
ad:a2:36:10:bf:d3:c1:4f:ff:d5:15:27:eb:88:b3:32:f4:05:
1a:8f:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:23 2025 by rpki-client