Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: U645hRcd0pf9c2pNZnNaeT9Orr8RqZ6OGHdO2WYkdT0=
Subject key identifier: 56:15:C4:69:BF:3C:4F:AC:03:E7:D1:29:35:9C:38:C7:74:C2:E3:CD
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019673790AA9A6E7F3DD4EF2E420258579CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1516
Signing time: Sat 26 Apr 2025 19:00:34 +0000
Manifest this update: Sat 26 Apr 2025 19:00:34 +0000
Manifest next update: Sun 27 Apr 2025 19:00:34 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: LUd/gWy0GKvyewWLpeDhqEW/Fp3GJKDnl35oHICKg6M=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:0a:a9:a6:e7:f3:dd:4e:f2:e4:20:25:85:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Apr 26 19:00:34 2025 GMT
Not After : Apr 27 19:00:34 2025 GMT
Subject: CN=5615c469bf3c4fac03e7d129359c38c774c2e3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:f3:b5:b6:4d:e6:4a:fd:e2:5d:4f:a7:94:
56:ce:a6:d1:dd:47:60:70:6c:e2:10:80:6a:0c:46:
1a:c8:f9:d9:2a:92:99:2b:8e:10:8c:c8:30:7c:50:
49:e7:0c:12:70:df:2a:6b:4d:d4:ec:88:1a:26:16:
de:be:a3:d1:a9:4a:59:93:f8:b4:e1:14:64:30:7a:
e1:fb:fc:08:a4:8e:eb:af:4c:87:88:22:78:f2:10:
50:66:bb:b9:86:0b:1f:39:23:02:db:48:01:50:1c:
60:28:80:62:66:70:bf:68:80:94:57:fb:f4:8e:da:
2b:13:ee:d5:a8:3b:78:a3:cc:11:ab:58:51:79:23:
72:f0:8a:14:60:2f:5f:55:65:3c:61:b5:f8:66:54:
f8:1f:14:ec:fa:00:84:c9:88:fc:9a:1a:a5:09:c6:
b8:03:1d:5b:22:54:3e:67:cb:d1:fc:f9:ac:de:b3:
42:3f:ee:57:d5:48:de:17:fe:3a:92:ea:36:e5:5b:
1b:74:fb:a4:9a:73:6d:15:ba:58:7c:fa:a0:87:cc:
87:27:7f:ce:78:ed:8d:5a:9f:bf:fe:fa:86:dd:31:
b5:7a:b2:01:33:44:00:67:a3:77:07:37:75:cd:ae:
4f:de:6f:62:72:ce:a1:76:5e:ed:73:04:f1:6f:8f:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:15:C4:69:BF:3C:4F:AC:03:E7:D1:29:35:9C:38:C7:74:C2:E3:CD
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ec:b0:30:09:cd:5f:2c:6f:53:21:f0:30:6a:b1:d9:c6:fe:
03:0a:e7:2b:a5:29:24:e9:0e:9a:7a:13:83:84:95:d5:5c:e3:
c8:c1:72:f2:d6:15:20:e6:51:d0:50:66:11:96:50:70:eb:ee:
36:b2:93:75:20:62:25:b2:2f:d6:86:f3:96:91:11:63:d7:71:
39:b2:9c:50:ec:86:39:11:c0:7a:f0:fb:f2:60:99:15:12:a7:
42:e3:f9:9d:52:32:bf:b8:ba:5b:0f:db:c4:f4:a5:fa:71:9d:
6f:cd:60:ce:fb:bb:86:11:8a:64:73:67:36:f3:16:3a:46:39:
4f:12:5a:b5:ac:2f:15:db:04:cf:08:44:35:bd:9e:17:1c:f9:
bd:48:c5:75:91:08:7c:f6:e9:e5:4d:b8:da:5d:4a:b0:df:4f:
ee:79:d4:74:a5:1b:4a:6b:40:9c:ac:9a:75:47:cd:85:51:0f:
40:2a:0c:13:1d:ca:28:56:d6:c2:e6:63:1a:2a:e1:3e:89:12:
23:46:2c:4a:df:d9:4c:5f:f9:fd:4c:f1:1f:4e:bf:40:1e:17:
a4:f2:7c:aa:8d:6d:a5:7f:a3:ed:59:a2:29:a7:ad:28:60:7f:
0f:b1:27:6c:77:26:63:6a:4f:90:a7:33:fc:87:fa:d6:b1:43:
8a:78:ae:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeQqppufz3U7y5CAlhXnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz
ZmZhZjQwHhcNMjUwNDI2MTkwMDM0WhcNMjUwNDI3MTkwMDM0WjAzMTEwLwYDVQQD
Eyg1NjE1YzQ2OWJmM2M0ZmFjMDNlN2QxMjkzNTljMzhjNzc0YzJlM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/nztbZN5kr94l1Pp5RWzqbR3Udg
cGziEIBqDEYayPnZKpKZK44QjMgwfFBJ5wwScN8qa03U7IgaJhbevqPRqUpZk/i0
4RRkMHrh+/wIpI7rr0yHiCJ48hBQZru5hgsfOSMC20gBUBxgKIBiZnC/aICUV/v0
jtorE+7VqDt4o8wRq1hReSNy8IoUYC9fVWU8YbX4ZlT4HxTs+gCEyYj8mhqlCca4
Ax1bIlQ+Z8vR/Pms3rNCP+5X1UjeF/46kuo25VsbdPukmnNtFbpYfPqgh8yHJ3/O
eO2NWp+//vqG3TG1erIBM0QAZ6N3Bzd1za5P3m9ics6hdl7tcwTxb4+XEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYVxGm/PE+sA+fRKTWcOMd0wuPNMB8GA1UdIwQY
MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt
MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx
LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+ywMAnN
XyxvUyHwMGqx2cb+AwrnK6UpJOkOmnoTg4SV1VzjyMFy8tYVIOZR0FBmEZZQcOvu
NrKTdSBiJbIv1obzlpERY9dxObKcUOyGORHAevD78mCZFRKnQuP5nVIyv7i6Ww/b
xPSl+nGdb81gzvu7hhGKZHNnNvMWOkY5TxJatawvFdsEzwhENb2eFxz5vUjFdZEI
fPbp5U242l1KsN9P7nnUdKUbSmtAnKyadUfNhVEPQCoMEx3KKFbWwuZjGirhPokS
I0YsSt/ZTF/5/UzxH06/QB4XpPJ8qo1tpX+j7VmiKaetKGB/D7EnbHcmY2pPkKcz
/If61rFDiniuFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:23:10 2025 by rpki-client