Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: Z1PDUsfRIMl7abg1HeXkdBlJKozu0jyOD3g26DP6Nu8=
Subject key identifier: 84:17:4F:BB:01:1B:93:6A:5E:EA:9B:FB:08:6E:EA:50:9E:58:19:2A
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019A4E4FDE70F3B83BEB0D4F2DE4B5F8A334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: R2C/bsF1KoY5QK7g57GKRs7uY587nU47X4wbholWiYY=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:de:70:f3:b8:3b:eb:0d:4f:2d:e4:b5:f8:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=84174fbb011b936a5eea9bfb086eea509e58192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:f2:e5:9f:93:fa:a8:eb:0e:d0:92:85:9a:
ea:bf:bf:36:da:a1:e6:25:df:4d:af:f6:a6:be:1a:
73:b2:7b:99:85:de:c8:f4:ce:13:58:d5:8b:84:62:
98:69:9a:26:89:ba:01:e7:ba:85:56:11:10:cd:2f:
67:53:c5:9d:1c:50:6e:26:39:d4:25:86:2d:ba:cf:
7d:0b:84:51:f3:a3:4c:bb:98:2d:04:33:28:ae:86:
b4:c8:f6:e5:42:21:ca:d5:46:fe:72:d5:82:21:49:
85:4a:79:5a:cf:4b:63:15:44:4d:c5:d8:58:54:4a:
71:ee:1e:dc:00:36:3f:ce:89:5f:62:ee:c7:39:0a:
91:f8:9a:34:25:84:1e:d2:e1:f0:84:d0:3f:f4:a2:
5f:0f:d4:a9:5e:6d:30:16:28:63:c1:c0:df:51:aa:
89:0b:2c:80:59:b5:fd:90:ca:a9:7f:fc:9a:24:43:
e0:df:56:01:69:ef:2a:a1:fb:ba:69:6c:89:54:e4:
ca:56:ff:63:be:e1:0a:e7:8f:21:e1:b3:dd:eb:f6:
85:62:11:59:29:ec:ff:b7:93:5e:d5:f3:35:76:bf:
8c:6c:6a:00:a7:dd:d7:1f:7d:70:d7:70:c1:4e:61:
28:9e:75:64:29:fe:42:bb:3d:cf:58:6e:b6:a4:08:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:4F:BB:01:1B:93:6A:5E:EA:9B:FB:08:6E:EA:50:9E:58:19:2A
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:44:2c:66:89:6c:e0:3a:ef:99:ad:05:c4:b1:0b:3b:78:
c2:04:c8:6d:c4:38:6c:1f:bc:b0:2e:4e:41:e4:fa:24:f4:79:
0e:9e:48:c8:2e:dc:3f:1d:da:fd:b0:30:48:af:55:64:c7:c5:
c2:2a:18:f6:4c:63:b0:74:4e:e9:7a:82:5a:00:ea:2e:dd:25:
88:76:4e:f6:9f:ee:e2:69:04:4b:07:a5:87:67:a2:47:2c:84:
ba:b7:69:8a:4e:91:b1:f1:b5:9e:fb:ec:a4:92:22:7f:e5:5f:
2b:47:1d:95:cf:43:ef:c3:5c:91:d4:d4:af:14:fd:c7:43:87:
e3:a1:52:37:e3:0f:38:5c:63:87:d3:39:ed:02:49:22:30:76:
bd:e2:33:28:a6:b0:be:b9:4d:a3:fd:5d:83:d5:cd:15:b1:4b:
8f:6b:36:25:98:ec:b1:4e:87:75:75:49:fd:06:a3:9e:8a:6a:
0b:35:3a:1b:7d:9a:7e:35:5d:11:76:71:de:a8:49:53:e4:d6:
da:47:32:3d:2c:f1:17:be:3a:9f:bb:e5:85:ce:1c:76:08:a3:
24:67:94:29:d3:90:12:8a:7e:84:0d:7c:2e:07:00:23:18:73:
c0:57:e7:82:c9:8f:d8:8b:83:28:58:76:4b:cd:f2:b7:3d:d9:
37:88:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:32 2025 by rpki-client