Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: MYJvVvMqkjSId7o6VyqlRT/6w/0UyAFIfYuqTUgxakA=
Subject key identifier: 03:68:20:47:AF:CD:4E:51:08:63:F7:92:17:D5:3A:05:50:FE:6E:AA
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 01977DFA12A2C61CED058D6C7EB41DD235B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 15A0
Signing time: Tue 17 Jun 2025 13:00:30 +0000
Manifest this update: Tue 17 Jun 2025 13:00:30 +0000
Manifest next update: Wed 18 Jun 2025 13:00:30 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: x06zePtLNr+8wWcZoSM5IaYqdJ+Rmw5Zf9R75vrGt3o=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:12:a2:c6:1c:ed:05:8d:6c:7e:b4:1d:d2:35:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jun 17 13:00:30 2025 GMT
Not After : Jun 18 13:00:30 2025 GMT
Subject: CN=03682047afcd4e510863f79217d53a0550fe6eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:33:19:9b:c3:4f:31:4a:4b:a3:fd:a9:d9:5c:
c9:60:d3:9b:e9:99:52:4c:cc:9c:23:05:18:22:31:
63:28:c7:ac:72:3c:df:af:38:05:97:23:27:51:b9:
1a:d4:0d:61:2c:63:a8:5b:5b:35:54:8e:41:a8:2c:
f1:c8:5c:b3:33:01:72:28:7e:db:35:5a:1b:d9:77:
89:81:c9:d2:3b:0a:ae:40:23:8f:19:a8:d3:91:7d:
26:3b:72:aa:27:6d:ff:8b:95:e2:f1:66:a6:0d:dc:
bc:23:83:eb:ad:3a:22:88:1d:34:c3:10:41:90:2d:
2f:aa:99:5e:24:b6:e0:bb:a3:89:02:ff:0d:47:25:
6a:bd:e2:ef:c0:c6:40:e2:b0:2c:f5:08:31:ef:b4:
53:79:21:35:89:52:7c:17:57:f0:ad:af:73:ac:22:
e3:d6:2a:82:8c:c8:16:7c:90:98:fb:5f:b8:eb:f0:
f8:4b:ba:da:93:73:e4:e8:a1:98:eb:b2:04:91:3e:
e3:93:05:8e:f3:38:9b:19:0a:8d:d6:37:19:66:7d:
34:e2:36:1f:01:26:7b:99:80:f7:e2:ee:b3:d4:4f:
7c:8a:92:a4:9a:18:a5:ca:b5:45:ec:69:38:7e:87:
fc:08:dd:ef:b3:64:f8:87:93:b6:81:78:96:fc:45:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:20:47:AF:CD:4E:51:08:63:F7:92:17:D5:3A:05:50:FE:6E:AA
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:54:d4:b4:6c:cb:d7:cb:f4:3e:02:40:89:3e:45:8f:55:0e:
bf:64:e9:01:ce:b1:96:7d:d0:eb:9e:79:ec:e4:b9:a9:9b:ee:
81:a9:84:cf:ac:00:d8:cc:d3:75:ca:9b:e5:2d:36:c1:b8:18:
4b:29:9f:ab:aa:ef:9b:ac:fd:1f:8c:45:18:c5:63:41:d7:9a:
5a:40:82:92:7b:a1:f7:d8:d6:1b:87:06:e8:72:5c:df:c2:d6:
30:3d:fa:b1:29:e5:0c:3e:66:92:f5:44:27:26:68:7c:67:40:
41:2f:ea:8e:5b:4c:7b:77:25:a1:95:b2:4b:d5:b0:48:ea:03:
b1:6f:05:b4:83:cd:73:6a:b1:17:9b:55:9a:ba:22:07:63:89:
df:45:81:1a:87:31:62:58:90:cc:7b:86:6a:98:25:eb:76:dd:
92:d8:ea:ec:e1:28:a4:73:68:d2:bc:80:7f:5a:98:24:81:b7:
74:79:70:9b:86:44:1e:7d:25:86:c7:6f:d7:a1:1f:c2:67:c9:
f8:08:56:26:b7:63:55:07:04:b7:d3:b2:76:50:39:22:03:17:
2a:ab:73:dd:a2:20:20:99:c2:8a:43:b3:70:8a:b7:fc:cc:4d:
bf:a4:05:60:f1:d9:2f:52:d0:16:3a:5f:36:65:5d:34:cd:05:
af:bf:d8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9+hKixhztBY1sfrQd0jWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz
ZmZhZjQwHhcNMjUwNjE3MTMwMDMwWhcNMjUwNjE4MTMwMDMwWjAzMTEwLwYDVQQD
EygwMzY4MjA0N2FmY2Q0ZTUxMDg2M2Y3OTIxN2Q1M2EwNTUwZmU2ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DMZm8NPMUpLo/2p2VzJYNOb6ZlS
TMycIwUYIjFjKMescjzfrzgFlyMnUbka1A1hLGOoW1s1VI5BqCzxyFyzMwFyKH7b
NVob2XeJgcnSOwquQCOPGajTkX0mO3KqJ23/i5Xi8WamDdy8I4PrrToiiB00wxBB
kC0vqpleJLbgu6OJAv8NRyVqveLvwMZA4rAs9Qgx77RTeSE1iVJ8F1fwra9zrCLj
1iqCjMgWfJCY+1+46/D4S7rak3Pk6KGY67IEkT7jkwWO8zibGQqN1jcZZn004jYf
ASZ7mYD34u6z1E98ipKkmhilyrVF7Gk4fof8CN3vs2T4h5O2gXiW/EVInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANoIEevzU5RCGP3khfVOgVQ/m6qMB8GA1UdIwQY
MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt
MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx
LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1TUtGzL
18v0PgJAiT5Fj1UOv2TpAc6xln3Q65557OS5qZvugamEz6wA2MzTdcqb5S02wbgY
Symfq6rvm6z9H4xFGMVjQdeaWkCCknuh99jWG4cG6HJc38LWMD36sSnlDD5mkvVE
JyZofGdAQS/qjltMe3cloZWyS9WwSOoDsW8FtIPNc2qxF5tVmroiB2OJ30WBGocx
YliQzHuGapgl63bdktjq7OEopHNo0ryAf1qYJIG3dHlwm4ZEHn0lhsdv16EfwmfJ
+AhWJrdjVQcEt9OydlA5IgMXKqtz3aIgIJnCikOzcIq3/MxNv6QFYPHZL1LQFjpf
NmVdNM0Fr7/Y1w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:43:22 2025 by rpki-client