Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: oYhlEIX8Gd8pdIXM7WxHBXwBQF7VhbJYZ1FUD6rAHMM=
Subject key identifier: 16:74:F8:C8:0C:6B:1C:DE:4C:C9:18:5E:8C:2E:6F:23:AA:81:97:25
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 01976C98A64DBA663AAEEF9181892849D446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0E13
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: cO29rTzyhe0GKJOId784IbCR6gyZh/t+Onoe88YOkUs=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a6:4d:ba:66:3a:ae:ef:91:81:89:28:49:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=1674f8c80c6b1cde4cc9185e8c2e6f23aa819725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:38:7d:80:2e:7b:e6:a4:d5:ad:1a:af:9c:
ae:89:eb:75:8a:2e:75:54:52:07:0f:98:62:6f:94:
35:69:b1:d5:ac:de:47:6e:8b:9a:bd:41:be:b2:1a:
d0:e2:88:7c:d8:18:4e:84:59:ae:13:ac:56:e5:5f:
29:0a:1d:4e:00:ae:8b:32:13:dd:b6:08:b3:0f:f1:
82:6d:a0:4a:cb:09:5a:96:f7:21:59:62:d3:fb:a9:
1c:96:6c:35:7b:68:37:3b:9f:eb:3e:e7:85:8e:f1:
58:e8:26:dd:1a:63:2a:07:b4:c7:46:38:7b:e2:eb:
fc:3b:aa:8d:a4:48:39:8b:40:f2:e8:0e:61:1b:7a:
00:65:fa:67:86:93:b3:33:36:cf:75:90:8a:be:e1:
94:a5:a4:3a:7b:2d:49:9c:ec:c2:7b:75:44:50:ed:
3f:fd:63:72:a4:2d:b4:19:10:11:ae:cf:81:7d:d5:
f6:1c:0e:5f:1d:d2:03:e3:31:e1:c8:58:bc:83:86:
3e:d4:13:a7:be:fc:f6:43:93:aa:7c:c4:98:fa:cc:
38:93:68:aa:e9:3a:99:34:a9:18:1a:e6:6f:dc:6b:
ae:87:de:ef:6f:57:01:04:0f:15:5b:df:af:4a:d9:
27:24:69:c8:1e:dc:cb:de:c1:16:24:b4:ca:2c:bf:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:F8:C8:0C:6B:1C:DE:4C:C9:18:5E:8C:2E:6F:23:AA:81:97:25
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:66:38:6b:77:d1:6c:58:fc:bf:59:78:19:8f:6b:e1:58:de:
63:0b:74:37:92:04:65:4f:bf:bd:30:0f:d8:6f:1f:59:fa:04:
80:9d:6c:3f:20:53:17:00:1d:4a:fb:e5:91:50:58:61:d9:ce:
5b:18:7b:01:f9:ea:aa:59:ce:50:3d:bd:07:80:a3:5d:cb:43:
81:6d:94:39:78:de:9c:7b:2e:4e:cb:35:49:5e:af:92:e7:ce:
07:0e:27:ef:7b:41:10:f3:12:a1:cc:08:22:ff:5d:8d:a7:36:
08:b9:9c:38:13:96:57:84:0d:70:1a:08:56:25:00:d4:ac:89:
3f:26:6c:f6:68:9c:6b:3d:3e:46:73:e7:3d:b7:36:fe:2a:97:
1f:77:11:37:8b:64:cf:61:7e:80:d7:cd:de:a7:12:94:9e:ad:
d4:90:15:aa:16:ba:0d:7a:8a:0b:0c:e9:43:f1:42:b8:ca:33:
a6:7b:7a:ac:57:47:d9:83:2b:e3:dc:52:5e:75:cb:0b:a1:47:
19:ec:15:54:b7:8f:56:d9:a7:5d:ee:7d:c3:56:6f:79:4d:bc:
16:99:06:44:d3:4c:dd:9f:68:96:5e:0a:58:98:7c:52:5f:1e:
6c:a2:f9:c8:89:0c:d5:63:ae:8e:c7:15:4d:ce:ea:cb:46:99:
e8:0c:a3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKZNumY6ru+RgYkoSdRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0
ZWE5OGQwHhcNMjUwNjE0MDQwMDMyWhcNMjUwNjE1MDQwMDMyWjAzMTEwLwYDVQQD
EygxNjc0ZjhjODBjNmIxY2RlNGNjOTE4NWU4YzJlNmYyM2FhODE5NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzho4fYAue+ak1a0ar5yuiet1ii51
VFIHD5hib5Q1abHVrN5HbouavUG+shrQ4oh82BhOhFmuE6xW5V8pCh1OAK6LMhPd
tgizD/GCbaBKywlalvchWWLT+6kclmw1e2g3O5/rPueFjvFY6CbdGmMqB7THRjh7
4uv8O6qNpEg5i0Dy6A5hG3oAZfpnhpOzMzbPdZCKvuGUpaQ6ey1JnOzCe3VEUO0/
/WNypC20GRARrs+BfdX2HA5fHdID4zHhyFi8g4Y+1BOnvvz2Q5OqfMSY+sw4k2iq
6TqZNKkYGuZv3Guuh97vb1cBBA8VW9+vStknJGnIHtzL3sEWJLTKLL+PTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ0+MgMaxzeTMkYXowubyOqgZclMB8GA1UdIwQY
MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt
NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx
LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGY4a3fR
bFj8v1l4GY9r4VjeYwt0N5IEZU+/vTAP2G8fWfoEgJ1sPyBTFwAdSvvlkVBYYdnO
Wxh7AfnqqlnOUD29B4CjXctDgW2UOXjenHsuTss1SV6vkufOBw4n73tBEPMSocwI
Iv9djac2CLmcOBOWV4QNcBoIViUA1KyJPyZs9micaz0+RnPnPbc2/iqXH3cRN4tk
z2F+gNfN3qcSlJ6t1JAVqha6DXqKCwzpQ/FCuMozpnt6rFdH2YMr49xSXnXLC6FH
GewVVLePVtmnXe59w1ZveU28FpkGRNNM3Z9oll4KWJh8Ul8ebKL5yIkM1WOujscV
Tc7qy0aZ6AyjXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:24:54 2025 by rpki-client