Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: QVd7wJDwPkUn2C7e9ugVP+0w/KmkOPB4i71uNrgZlwM=
Subject key identifier: 10:31:90:DA:19:42:6B:BF:CE:BA:76:2B:96:DD:8C:31:17:C6:C1:A7
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 01988E1009EB81CF5169D669932F99BF6927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 162E
Signing time: Sat 09 Aug 2025 09:01:12 +0000
Manifest this update: Sat 09 Aug 2025 09:01:12 +0000
Manifest next update: Sun 10 Aug 2025 09:01:12 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: yOvShBnyxn4RRN/uag70pN2s1MBlMQWwu4NWefkfsv4=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:10:09:eb:81:cf:51:69:d6:69:93:2f:99:bf:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Aug 9 09:01:12 2025 GMT
Not After : Aug 10 09:01:12 2025 GMT
Subject: CN=103190da19426bbfceba762b96dd8c3117c6c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:2d:46:c2:87:3d:99:02:5f:2a:8e:68:bf:
c1:b2:0e:f4:35:7c:1c:06:42:da:fd:08:c7:90:10:
58:de:42:71:36:63:46:43:db:d5:ab:dc:77:9e:d7:
f0:f1:69:4f:39:16:fa:82:1c:38:5e:25:d1:f7:9c:
26:39:82:22:5c:00:cd:89:f7:be:e1:75:6b:26:08:
ff:b9:3b:51:9b:93:b6:38:f7:ee:1f:94:e9:bd:ec:
c2:a9:b8:a8:97:78:81:e7:a8:98:1a:5e:a3:ae:ae:
d3:31:34:2f:ff:04:53:1a:d9:be:d3:e8:47:68:22:
f5:79:fd:4a:11:c8:9b:04:ef:12:f0:49:1d:2c:b4:
24:2d:cd:41:8d:28:8e:89:d4:d8:df:7f:82:69:c8:
41:83:16:c3:56:ac:cb:6d:4e:bb:3b:1d:ea:c6:00:
05:5c:4f:78:46:88:e1:2c:a6:e9:c7:b4:ec:b6:8c:
79:06:ac:39:df:7f:fe:79:45:d1:51:bf:53:3d:d1:
7a:3a:68:28:78:c2:cc:78:b9:cb:dd:02:cf:1c:00:
06:7b:36:80:56:da:a3:b8:72:29:52:6f:91:85:82:
09:61:ce:4c:f6:8f:c3:15:4a:5d:0d:3d:94:ca:ae:
5f:b2:25:dd:e1:9d:2e:62:6a:36:b2:0d:d2:f5:5b:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:90:DA:19:42:6B:BF:CE:BA:76:2B:96:DD:8C:31:17:C6:C1:A7
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:43:07:45:e5:75:6f:ca:bd:51:ce:fd:83:33:1e:88:37:
a6:aa:c7:ee:36:82:25:c2:62:02:2e:51:ab:bd:07:e0:55:db:
28:31:fc:62:47:ef:a2:86:61:fd:a7:cf:13:55:cc:d9:b3:9d:
f7:a2:c7:57:79:ae:e5:ac:96:f3:1e:40:6d:06:c7:23:b6:24:
8d:08:ae:03:f5:e9:b4:1d:bc:5c:d5:6d:b8:5e:b2:4a:0b:ec:
bd:e8:82:08:dd:4d:af:04:3e:fe:64:5d:f7:3c:03:9b:95:cd:
22:97:ad:cb:e7:24:41:7d:89:ff:c4:3d:e8:84:ae:55:18:19:
3d:fa:33:49:8e:c4:dd:7e:57:bb:d8:1a:31:72:a9:27:9b:ca:
77:db:22:3f:11:36:4e:88:d4:76:d1:d9:92:40:29:65:7d:b7:
76:eb:36:c9:6a:5f:c3:e9:f8:fd:48:cf:4c:d4:45:60:b5:c4:
a6:67:36:fc:1c:d1:7e:e8:52:9b:0b:ac:22:db:d1:01:69:70:
20:63:d3:d1:72:60:cd:0d:10:ac:56:13:9c:bf:e5:2f:1a:29:
fb:00:35:f0:36:89:f0:de:87:48:6f:d4:2b:56:37:77:8f:09:
c7:f8:80:96:a7:2c:27:1e:3d:d8:22:d5:bc:eb:27:8f:7a:f3:
f7:e8:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:02 2025 by rpki-client