Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: h5Kr9F0LnpFPVSeJjPcZXOJKenjRipAAaaEFquJIhpA=
Subject key identifier: 5C:E5:59:15:F3:B8:8C:AC:37:E6:F6:87:DB:31:EE:49:96:CE:DD:27
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 01987ED414EF1B02BC7B6BFAFEB7A08B5DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0EA1
Signing time: Wed 06 Aug 2025 10:01:24 +0000
Manifest this update: Wed 06 Aug 2025 10:01:24 +0000
Manifest next update: Thu 07 Aug 2025 10:01:24 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: 6KRnVonYUO0MxSWx+d7zw1S609NlF81yydSlE404ek8=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:14:ef:1b:02:bc:7b:6b:fa:fe:b7:a0:8b:5d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Aug 6 10:01:24 2025 GMT
Not After : Aug 7 10:01:24 2025 GMT
Subject: CN=5ce55915f3b88cac37e6f687db31ee4996cedd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:8e:ce:bc:58:02:8c:87:ce:ee:44:be:38:
de:85:b1:ce:9c:1e:3d:67:c5:b9:d6:a3:ca:d1:69:
be:70:13:07:82:4d:0e:ae:9c:c0:6f:ea:f5:d9:41:
ac:e5:4a:09:3d:ef:ac:a7:00:48:bd:a5:14:e6:ca:
d3:28:6b:9b:93:05:25:c7:a3:95:f7:11:93:40:26:
f3:78:27:64:cd:24:8c:6c:78:0e:27:24:ef:7c:97:
c0:22:3b:f1:a1:2d:a0:48:78:c7:cf:12:8f:c9:88:
9c:2b:b9:97:4b:80:86:c0:f0:30:1a:1a:1c:61:e8:
60:b6:2e:51:5a:12:bb:07:0b:48:e3:56:e7:65:8c:
48:74:f1:01:27:a0:a8:fb:39:9f:b2:48:eb:82:7e:
7f:a8:79:59:24:7b:c3:47:cd:c6:f9:56:59:1c:e7:
12:14:8b:04:26:42:fc:bf:74:f1:62:d2:34:3d:9f:
18:25:04:b6:94:3f:84:3e:9e:cb:d7:c0:79:ce:d0:
25:87:6a:4b:97:01:34:e6:1f:bb:31:67:00:d5:d9:
27:4f:b0:45:a0:ea:b0:27:6a:07:37:37:af:26:a3:
7a:6b:ae:13:7f:af:78:bd:0a:a7:24:8c:ab:2f:f7:
43:1c:d5:cd:23:25:e4:bc:d2:7d:0a:c8:fa:27:b8:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:59:15:F3:B8:8C:AC:37:E6:F6:87:DB:31:EE:49:96:CE:DD:27
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f2:ea:54:8b:fe:61:1a:f0:10:4b:6b:77:c2:0a:cb:ab:ee:
c7:9b:aa:c0:13:21:d9:a5:cd:53:05:ff:ec:5e:7b:74:9c:e0:
76:dd:34:be:70:a6:42:5b:cc:da:b8:f1:3b:51:1f:ec:36:7a:
4d:f0:b8:6b:54:6f:e3:b7:14:fc:e1:9e:75:6e:c9:df:39:3c:
1a:2b:c7:4d:0d:88:b9:8c:e5:af:6a:9c:09:3b:d0:52:84:1e:
f7:97:8e:bb:69:32:59:11:05:71:8b:92:8a:f6:62:48:7c:fb:
73:f1:5e:a5:61:5c:78:99:2e:b4:8b:93:21:b3:a2:6a:d6:7c:
42:cc:27:44:1d:18:e8:a3:6f:e7:e2:e4:42:0a:8d:9b:90:36:
c2:48:a5:d3:c5:8f:3a:7e:15:92:fc:4e:1b:90:28:de:cc:ee:
1b:8c:b6:98:3a:a1:48:8d:60:d0:86:42:c5:62:53:21:88:74:
d6:33:1b:5c:d3:5b:26:bb:a0:66:97:90:6e:96:0f:45:12:f3:
2a:ab:db:26:ea:6d:9b:66:9a:d0:90:07:42:e0:da:ea:ce:b2:
3a:43:12:e1:7f:b6:10:bc:57:92:57:f4:16:5e:e8:5b:81:7f:
53:45:88:82:89:74:7e:c5:ca:b2:44:39:fd:15:5f:dc:2e:40:
70:61:c2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+1BTvGwK8e2v6/regi13CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0
ZWE5OGQwHhcNMjUwODA2MTAwMTI0WhcNMjUwODA3MTAwMTI0WjAzMTEwLwYDVQQD
Eyg1Y2U1NTkxNWYzYjg4Y2FjMzdlNmY2ODdkYjMxZWU0OTk2Y2VkZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWOzrxYAoyHzu5EvjjehbHOnB49
Z8W51qPK0Wm+cBMHgk0OrpzAb+r12UGs5UoJPe+spwBIvaUU5srTKGubkwUlx6OV
9xGTQCbzeCdkzSSMbHgOJyTvfJfAIjvxoS2gSHjHzxKPyYicK7mXS4CGwPAwGhoc
Yehgti5RWhK7BwtI41bnZYxIdPEBJ6Co+zmfskjrgn5/qHlZJHvDR83G+VZZHOcS
FIsEJkL8v3TxYtI0PZ8YJQS2lD+EPp7L18B5ztAlh2pLlwE05h+7MWcA1dknT7BF
oOqwJ2oHNzevJqN6a64Tf694vQqnJIyrL/dDHNXNIyXkvNJ9Csj6J7iWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzlWRXzuIysN+b2h9sx7kmWzt0nMB8GA1UdIwQY
MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt
NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx
LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/LqVIv+
YRrwEEtrd8IKy6vux5uqwBMh2aXNUwX/7F57dJzgdt00vnCmQlvM2rjxO1Ef7DZ6
TfC4a1Rv47cU/OGedW7J3zk8GivHTQ2IuYzlr2qcCTvQUoQe95eOu2kyWREFcYuS
ivZiSHz7c/FepWFceJkutIuTIbOiatZ8QswnRB0Y6KNv5+LkQgqNm5A2wkil08WP
On4VkvxOG5Ao3szuG4y2mDqhSI1g0IZCxWJTIYh01jMbXNNbJrugZpeQbpYPRRLz
KqvbJuptm2aa0JAHQuDa6s6yOkMS4X+2ELxXklf0Fl7oW4F/U0WIgol0fsXKskQ5
/RVf3C5AcGHCaA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:41 2025 by rpki-client