Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: R/+xvcQebSF9r05YcOynbMsIiqVjLn9SU06J7zruOIU=
Subject key identifier: A4:E2:60:0C:CA:4E:CB:C0:10:C6:D8:2B:96:9A:89:04:91:AC:F3:7F
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01976D3E59465AB3C73D0AAEB11CE93E4620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 06D9
Signing time: Sat 14 Jun 2025 07:01:31 +0000
Manifest this update: Sat 14 Jun 2025 07:01:31 +0000
Manifest next update: Sun 15 Jun 2025 07:01:31 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: c9ujoKgguQ31Eauy63fwsSjh6vem7WL9lO1Jvv+cm6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:59:46:5a:b3:c7:3d:0a:ae:b1:1c:e9:3e:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jun 14 07:01:31 2025 GMT
Not After : Jun 15 07:01:31 2025 GMT
Subject: CN=a4e2600cca4ecbc010c6d82b969a890491acf37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:69:dc:ba:2f:44:3d:c3:8c:71:45:7d:a7:
bd:af:9a:e4:b7:07:e0:b2:e1:6e:89:82:e6:4d:b9:
87:44:24:d5:a0:47:48:71:e6:2d:67:2f:85:99:dd:
2d:97:55:b1:40:76:e8:59:17:88:b3:5c:91:8e:b0:
d0:ef:3c:97:4b:f9:11:9c:c3:52:cf:63:96:ee:bb:
74:3a:0f:4e:20:44:06:1b:43:3e:0f:59:f1:74:1a:
29:66:f0:8b:37:d7:4a:1b:5c:fc:6b:db:00:cb:70:
8c:f4:31:7b:4f:2a:45:74:67:28:93:e2:ed:44:2b:
77:98:f8:04:9e:bb:7f:9a:ed:45:83:8e:b1:d9:eb:
fc:08:c4:74:42:ba:fb:0e:91:c5:fe:e3:96:dd:0c:
4a:92:22:ad:11:65:9e:e8:a4:f2:f9:8d:71:1b:67:
91:2c:0a:d9:7c:22:a7:69:5c:76:da:08:9b:9e:41:
32:47:01:7d:05:c8:f7:e7:58:f3:d7:80:6f:e5:7c:
17:e4:c2:4a:32:72:70:f9:5e:d3:22:03:ec:fd:49:
ff:00:04:9d:4a:f2:bd:6c:ce:da:95:70:11:b0:a0:
8d:5f:bb:d1:26:8a:b6:33:6c:ff:df:d2:f8:f2:55:
9c:f4:04:6b:3c:58:d7:72:ca:de:7b:e7:13:1e:b5:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:60:0C:CA:4E:CB:C0:10:C6:D8:2B:96:9A:89:04:91:AC:F3:7F
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:61:17:22:48:c1:d3:f3:70:d9:df:e3:b6:ce:21:ac:06:
9b:72:ac:a0:1b:52:79:84:16:b8:93:f2:4a:7c:d6:99:17:7b:
a8:3a:4e:4b:90:77:09:b9:28:2f:f5:86:1f:3c:d6:f8:aa:df:
2a:ac:b3:ef:e4:36:af:ac:d4:d9:89:79:9c:61:78:a5:36:56:
fb:79:df:40:61:bd:aa:24:f0:25:9c:a2:06:f4:9f:9e:84:87:
94:b0:bf:ba:fa:d8:58:f3:c7:84:62:93:4f:3a:f6:ab:06:ca:
e8:78:8f:40:5f:ca:4e:b3:b5:ed:5e:6e:b5:93:df:97:9a:8c:
0b:4d:82:ff:03:71:ea:0a:36:fb:58:52:1e:0d:be:43:43:7c:
39:c2:f3:f0:79:84:b2:81:b0:28:6d:be:a5:02:57:bb:45:c5:
93:bb:95:a7:a9:26:b9:91:cf:35:b2:15:85:a7:e8:7d:5f:fe:
6f:90:78:79:55:74:42:b6:f7:dc:76:a1:ce:08:81:79:b1:38:
ed:04:c2:d7:63:af:77:3a:75:66:4c:8e:ff:9b:60:a6:4e:ab:
29:39:03:8e:19:9d:16:3c:05:d4:c7:41:aa:55:ec:d0:15:37:
c2:74:f2:a9:05:2f:42:6f:46:01:b3:4f:8e:b6:2c:e2:8d:5b:
6a:ec:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:14 2025 by rpki-client