Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: LsAOb2xaa2fm3O92Z9OHFw23lfBa0Qtr5WNwfH1gzrQ=
Subject key identifier: 72:6E:6D:CA:45:3C:E4:6E:00:20:80:7B:0A:A9:3D:C1:10:62:03:A4
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019682B4EDBF8511BB32778D027D56411B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 151F
Signing time: Tue 29 Apr 2025 18:00:17 +0000
Manifest this update: Tue 29 Apr 2025 18:00:17 +0000
Manifest next update: Wed 30 Apr 2025 18:00:17 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: eCeRtmzblV/rfFY+gAisRIMkLy2+KWHPaW/I4MV2JaI=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:ed:bf:85:11:bb:32:77:8d:02:7d:56:41:1b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Apr 29 18:00:17 2025 GMT
Not After : Apr 30 18:00:17 2025 GMT
Subject: CN=726e6dca453ce46e0020807b0aa93dc1106203a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:39:5c:02:c7:53:47:24:ad:58:a4:d5:30:
c2:6b:a4:e2:2e:18:5e:0f:32:d4:e2:fc:92:4f:04:
0e:01:f5:a8:2a:90:e2:3c:82:8c:a5:d1:6b:11:59:
85:54:2a:5c:66:51:44:ae:22:ef:db:11:db:2a:da:
e8:32:94:15:eb:12:46:9b:22:35:23:a1:2e:65:8a:
1d:22:14:70:52:3c:6f:7c:24:1f:67:6e:4b:f4:f0:
29:4e:21:d4:90:08:f8:b7:ba:a0:65:e8:e4:25:1e:
94:8b:30:e4:ba:77:4a:06:8f:8b:ee:e7:54:be:be:
92:cc:2b:c2:7b:2a:aa:5f:f6:9f:d7:9e:a1:2f:e1:
39:d1:37:92:94:77:ba:4f:cf:07:c0:48:c3:c9:63:
34:ad:23:3d:f8:db:cb:36:73:c5:27:2f:b6:c6:7f:
69:74:b1:f4:b1:a6:20:02:d8:32:03:62:59:c1:33:
be:15:f2:5e:99:ce:7d:8e:82:0d:41:97:e9:e0:ac:
0b:f0:8f:8b:2e:6b:96:0a:fd:ce:97:e7:b9:74:41:
3d:61:15:df:b2:54:9d:f6:ad:3c:6c:72:4e:27:46:
ec:f3:8a:76:c4:67:1e:f4:7b:b5:03:38:a4:4c:e0:
e1:0e:89:46:4f:d1:d9:e7:6b:ef:d6:fa:69:9e:b6:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:6D:CA:45:3C:E4:6E:00:20:80:7B:0A:A9:3D:C1:10:62:03:A4
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6c:3c:3f:76:05:ae:6d:df:d7:3f:d6:6e:95:f1:ed:f6:f1:
51:9a:63:a9:af:2b:8a:cb:45:ce:4b:06:3e:1e:a4:69:75:ee:
f9:e6:27:5f:02:28:8a:2a:74:b6:10:ff:0f:32:b9:dc:2d:cb:
d6:3d:f6:4d:c9:3f:c1:4e:f2:35:09:79:b2:ad:d9:2f:53:2c:
de:60:c2:d8:71:35:92:73:e3:d2:61:d0:e5:5f:b4:19:8f:f0:
4b:46:e5:8e:5f:92:96:fd:5b:1c:51:e5:eb:24:4b:f8:19:60:
1d:2b:8d:22:aa:aa:66:69:bd:89:22:80:d6:94:fd:06:76:5e:
10:1a:37:92:bc:6e:4e:bb:48:eb:33:cd:b0:88:b9:3d:b8:3a:
2e:84:b0:e0:f0:ae:20:d4:f3:43:79:c3:16:ae:d9:fb:36:60:
80:5c:d9:f4:84:37:46:00:80:5e:b7:5b:37:bb:a6:8d:79:4b:
eb:bc:a7:22:8b:6d:a9:ca:f7:d6:6c:06:67:42:df:66:e0:cf:
39:01:78:bf:99:23:70:51:f8:40:31:5e:f2:72:dc:ba:af:ba:
5d:7f:2a:7b:77:49:6b:ac:65:b9:e2:4e:d6:0a:3d:ff:2d:f6:
fc:21:2c:d6:c8:26:cb:4c:0d:5c:da:25:81:f8:af:8c:7f:44:
cd:1e:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:27 2025 by rpki-client