Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: twHBCVs7W6U0Y6YMeCQWqQZCMTE+Ip64fP0Naaz1SfE=
Subject key identifier: 05:20:25:FB:8B:BF:5B:60:85:26:5A:F7:43:3A:50:3D:DF:73:C4:04
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019768BC1B19F5969953BD4C08E74C6D5A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 055E
Signing time: Fri 13 Jun 2025 10:00:47 +0000
Manifest this update: Fri 13 Jun 2025 10:00:47 +0000
Manifest next update: Sat 14 Jun 2025 10:00:47 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: cPxyD49y34IbUhqrklkFDDiB7ZlXy/F9gx8LmKp38FA=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:1b:19:f5:96:99:53:bd:4c:08:e7:4c:6d:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jun 13 10:00:47 2025 GMT
Not After : Jun 14 10:00:47 2025 GMT
Subject: CN=052025fb8bbf5b6085265af7433a503ddf73c404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:b0:b1:65:79:f1:ba:d1:b1:6a:9d:1e:0a:
f8:cb:1d:39:98:d7:c4:00:dd:e4:ba:40:49:27:aa:
86:8c:60:98:bb:9a:23:9e:f0:82:c1:bb:a2:ae:46:
ed:bb:c6:79:99:5d:35:47:0b:45:fc:ad:66:93:5f:
59:43:59:70:3d:ed:c2:3c:1f:54:06:07:fc:1c:87:
93:ce:54:b6:d0:d4:05:2e:16:b0:33:15:aa:4e:c8:
40:83:a7:cb:7c:63:68:da:09:45:8a:9a:5a:2e:c8:
46:17:fd:d8:ce:8e:72:53:b5:2c:77:39:1f:95:93:
dd:9c:3c:f8:73:6e:ee:df:08:26:4b:82:9a:5a:0a:
1e:e6:b1:f8:06:a3:10:4d:d5:6c:9d:1c:73:b4:d6:
99:43:5e:c3:35:be:3e:67:c3:f9:57:5b:e9:5b:e2:
9b:36:52:fc:37:3d:a2:0c:37:27:06:74:fe:f3:a1:
32:17:9a:c7:b4:76:9e:c5:80:20:c8:75:a5:87:64:
e4:19:1d:74:af:e3:36:e0:5c:a3:a6:4f:c0:5b:7d:
e1:6f:a7:d2:c9:81:30:50:86:05:ed:e4:20:b9:bc:
a4:20:d9:4c:92:71:4d:06:d1:27:6a:60:8a:4e:32:
88:0e:df:e3:e8:3f:20:7b:9d:6d:94:12:87:f3:9f:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:25:FB:8B:BF:5B:60:85:26:5A:F7:43:3A:50:3D:DF:73:C4:04
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:63:69:19:7e:0c:e0:51:29:6a:bd:67:42:09:00:61:19:
9a:c5:20:89:a9:46:9c:ab:80:e6:52:95:ee:3c:4d:67:ec:74:
be:96:df:65:db:09:99:e2:b5:6c:d0:05:83:89:72:93:12:ca:
63:f3:ee:64:f0:c6:38:f4:4a:77:28:cf:46:07:25:fd:80:78:
c8:e1:6e:00:6d:7d:ca:6d:c4:f4:d6:36:91:cc:7a:61:c9:49:
77:05:18:22:19:5a:79:95:cf:40:9a:25:20:2b:5c:33:c5:c2:
78:96:b1:c2:a9:20:ac:4c:cd:e2:c4:a6:38:17:a0:b4:88:20:
f9:23:3d:29:3e:d3:c0:d3:e5:71:1e:b4:5d:f5:a3:ea:6d:74:
cd:3d:8e:b0:4b:16:38:13:ac:b0:bd:c3:2d:0b:a4:0a:48:97:
46:89:ec:ca:40:6f:9b:f2:95:17:1a:51:e0:58:ff:06:69:05:
29:e0:8b:44:ff:e0:d5:85:d0:9d:ba:5b:74:ae:f0:d9:92:f3:
46:d8:55:84:45:42:2e:f6:c9:f2:ac:95:75:58:a8:3a:99:d2:
f5:a5:ae:a4:7e:85:7d:36:8d:8e:29:18:dc:6a:11:a3:64:12:
e6:42:e7:38:72:8d:a1:1b:65:f0:bc:d2:d8:21:11:52:46:d9:
68:5f:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:02 2025 by rpki-client