Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier: E5CgPjLZzu5w4M1m2Lubsidv8IqKbDZ0fnf/90llCbg=
Subject key identifier: 58:5E:05:A2:8F:EF:59:9B:30:E4:D3:41:CC:36:61:7A:66:F7:1D:8B
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer: /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial: 019875D1603211778525738AE1B7D93903BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number: 027C
Signing time: Mon 04 Aug 2025 16:01:52 +0000
Manifest this update: Mon 04 Aug 2025 16:01:52 +0000
Manifest next update: Tue 05 Aug 2025 16:01:52 +0000
Files and hashes: 1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: VsSkfp0x7m9qmfJPPU6QyA5Z9iZCyYVUQSM700AGcik=)
2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:60:32:11:77:85:25:73:8a:e1:b7:d9:39:03:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
Validity
Not Before: Aug 4 16:01:52 2025 GMT
Not After : Aug 5 16:01:52 2025 GMT
Subject: CN=585e05a28fef599b30e4d341cc36617a66f71d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:8e:d1:22:38:87:d9:13:e4:5d:d6:69:13:
e9:bb:6e:7d:15:70:b0:d0:f0:02:9f:a9:43:8a:62:
27:bb:4a:04:e7:60:e7:2f:6f:36:7e:b8:4b:fb:cc:
b6:b7:7b:c5:9e:a1:6c:8b:0e:f2:ac:0c:52:08:45:
bd:52:c9:d9:a9:68:b6:a8:a1:81:6d:54:c5:44:8b:
72:9f:aa:04:e7:2b:a4:44:49:6f:15:fb:52:1a:99:
d3:84:4d:92:16:4e:91:d1:20:44:48:84:25:6f:cb:
88:bd:22:7c:fc:2b:d9:a5:cb:18:4b:3a:36:b7:cc:
b5:29:6a:0c:b5:f1:02:f5:27:e6:5e:7d:97:5f:91:
7f:57:b8:d8:05:c5:e2:66:e4:1e:4b:16:b3:e2:12:
94:c0:3d:b7:5b:af:ad:e3:ca:67:b3:df:a5:78:00:
be:d8:a8:4e:70:38:95:df:87:2e:c3:18:8a:a3:8d:
2c:8f:af:a6:fb:e1:c9:41:f2:42:3d:39:e5:ba:e1:
70:93:3e:2d:be:b7:dc:82:63:8a:84:14:ea:8b:7a:
22:e6:d7:69:a9:a7:d5:05:d5:3b:31:24:82:30:22:
1b:5e:ea:5f:e0:0c:c8:d0:3c:f0:1d:a2:78:ec:2e:
10:d2:57:0d:92:2c:6b:62:c1:ef:06:d6:d2:a0:81:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:05:A2:8F:EF:59:9B:30:E4:D3:41:CC:36:61:7A:66:F7:1D:8B
X509v3 Authority Key Identifier:
keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:09:7d:e6:ab:ce:7f:e9:a2:ea:c1:21:b1:b2:87:b4:c1:
aa:49:10:cc:69:e7:73:e4:97:92:01:4e:bd:7e:97:47:89:40:
39:50:2f:cf:b5:97:25:24:8b:1f:79:9c:e5:c4:b3:cf:67:80:
ff:30:37:42:65:73:3b:d8:34:e2:d1:0a:ab:9b:33:3e:e9:5a:
a2:b1:1b:65:de:8e:64:db:b8:3b:c7:d7:6d:9d:4e:a3:a2:89:
0b:7a:98:6e:1d:35:b1:f4:62:ac:ba:5f:ba:45:ed:1a:e0:80:
70:0d:5a:73:b3:b9:ae:7d:7f:8a:f4:93:23:66:d1:3a:11:b1:
8c:72:4d:96:e0:ba:f0:82:88:a0:2a:8e:3f:ed:97:ec:0a:ce:
f8:8f:c8:19:a0:d3:8d:fd:34:c9:65:96:5c:3d:4b:55:86:fb:
32:de:41:89:f4:45:89:f9:1d:84:12:87:6a:fc:fc:f6:1e:55:
66:72:54:cd:60:6a:08:1e:82:d4:bb:ed:d5:84:5f:83:a3:39:
82:4a:71:8e:0f:1b:b4:db:a3:d1:23:ed:db:a5:5c:3b:13:f2:
95:9d:7e:9e:7c:0d:b2:12:eb:a1:2a:9a:a1:56:bf:f3:a7:67:
66:e2:51:ce:45:ea:f7:be:81:34:e5:b0:40:b1:f5:07:34:dd:
14:c9:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:26 2025 by rpki-client