Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: fbqqGKfxPTIIfSoEZIiIa7om78EO/Hue1KaX4f3Hpuc=
Subject key identifier: F3:44:1E:54:04:AA:A0:BC:5C:45:F8:90:15:3E:B9:27:B2:C8:C9:89
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019A4E18DFB5C3AC18D02C7E1B472A6E60DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: 3kPiV3wmZjZm+EEtNSXt0qDkrT0gQ+bo/O+bw1S76NA=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:df:b5:c3:ac:18:d0:2c:7e:1b:47:2a:6e:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=f3441e5404aaa0bc5c45f890153eb927b2c8c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:eb:40:e0:d8:d8:5e:a9:4b:8e:84:f7:1c:
3f:40:ce:ad:1f:e4:7a:e3:e2:66:4c:e2:62:aa:c8:
7c:eb:40:c4:ea:b8:e7:07:2a:aa:24:23:f1:bc:70:
f5:8a:e6:c4:37:3d:31:2d:9e:40:9e:df:62:d5:5c:
8e:92:cc:0f:94:56:92:17:29:7d:aa:13:27:79:d2:
f8:5f:bc:0c:e8:58:4d:18:91:ce:17:e7:0e:e3:de:
9b:9b:c8:93:29:36:00:5e:47:3c:4a:ae:6c:10:80:
22:e6:9f:c2:2e:ee:b5:4b:74:ca:db:c2:e8:d6:f9:
e2:09:16:13:4b:cb:0f:95:5a:10:68:ea:5a:2d:e9:
f0:3e:9d:8e:0a:15:08:f2:ef:64:73:d5:cc:61:db:
07:50:3b:c1:23:ec:05:e0:49:06:0e:ee:a0:cc:6f:
ec:51:b5:10:7d:9a:f9:3d:93:26:34:d5:29:a1:64:
f6:9b:81:37:ab:71:1e:4b:58:1e:03:90:2a:76:b0:
88:d9:6d:a4:75:31:f7:b8:82:4c:25:44:7e:55:2c:
5b:a5:1b:24:f5:ba:88:06:22:90:a9:9c:6d:eb:00:
23:26:d2:91:16:81:7a:86:18:87:06:c0:97:db:2a:
7e:1a:23:c8:3f:29:4b:82:0e:a2:63:c0:a1:81:35:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:1E:54:04:AA:A0:BC:5C:45:F8:90:15:3E:B9:27:B2:C8:C9:89
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:d4:ad:00:8b:64:9f:b6:b1:c2:55:70:7f:9f:7d:5b:b2:
7e:ab:19:47:23:20:56:42:25:f1:32:91:60:0e:d3:63:ad:31:
59:05:6b:f0:45:30:64:b0:82:bd:17:c6:a8:45:4b:6b:36:fd:
85:d8:da:a9:75:a3:9a:37:e6:24:24:1b:18:80:2e:b8:dc:c4:
15:e8:d9:7f:bd:68:12:a2:d1:ec:16:68:fc:42:84:72:8d:3c:
95:d4:9a:7e:62:e2:f2:ac:d2:79:8d:66:71:cf:eb:b6:e5:7d:
1f:24:7a:db:d2:62:a4:72:54:26:01:da:08:00:51:da:da:cb:
49:3a:af:27:83:a0:63:0d:1a:e1:65:c4:ba:5d:f8:60:f1:2a:
b1:80:e3:60:a4:c4:03:47:91:25:e9:1e:72:ff:3e:4c:82:cc:
90:86:b5:91:9c:ca:dd:93:8b:cc:e1:dd:07:68:a0:d0:ea:d1:
8f:41:45:47:da:b8:45:f1:37:00:91:76:9d:3b:8b:32:ae:cd:
b2:eb:0d:eb:11:ac:42:fe:cc:9e:3c:54:1d:10:6d:6a:51:02:
cb:cd:3e:97:f5:57:60:61:1a:a6:ec:97:c5:3c:aa:3d:45:c7:
97:e1:82:8b:12:f1:c5:ca:ea:ed:d7:6f:38:19:6b:b1:85:d5:
ad:fb:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:13 2025 by rpki-client