Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: BW7qyOiA5VFpNJlC4IPn2BbBQiZIfIEZYwC2ZBjhfpw=
Subject key identifier: 1C:EF:B1:3D:4D:19:F4:95:CF:1E:FD:B0:AC:56:0F:18:52:CF:23:71
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01984664AA1F645C20990C6B8A7B9965FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 132E
Signing time: Sat 26 Jul 2025 11:00:58 +0000
Manifest this update: Sat 26 Jul 2025 11:00:58 +0000
Manifest next update: Sun 27 Jul 2025 11:00:58 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: uyW64RkuK7frODP50W1ITfIEOLuV281vFUkcd2uqQ7c=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:aa:1f:64:5c:20:99:0c:6b:8a:7b:99:65:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jul 26 11:00:58 2025 GMT
Not After : Jul 27 11:00:58 2025 GMT
Subject: CN=1cefb13d4d19f495cf1efdb0ac560f1852cf2371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:19:f1:6e:af:19:55:31:32:7b:f8:d7:f9:
a8:03:fc:f4:8a:2c:fd:7d:a8:13:35:c2:4a:32:99:
4d:c4:e3:b2:34:7e:f5:49:90:58:10:70:12:32:73:
2a:a7:ab:32:2b:24:f3:71:58:4b:df:f7:11:d0:36:
dc:61:d5:38:6f:c7:48:04:b6:1e:ac:23:3b:ed:08:
ba:7b:1d:fb:df:b0:2c:4f:05:3c:e6:07:50:ac:af:
96:99:13:27:c7:96:12:cf:cc:94:3d:2f:ed:0f:b8:
14:60:a3:07:47:01:dd:79:8b:0d:1c:85:fa:83:95:
63:7f:7f:a1:9c:16:cb:f0:26:e2:8a:64:80:6c:bb:
4d:2d:95:4b:d9:69:42:e7:b5:b7:fc:c2:a7:08:c2:
86:47:92:2b:6f:5e:b9:7d:3b:78:f5:89:11:ac:80:
8f:f4:d5:aa:20:cd:e9:75:43:05:b5:69:3c:25:5c:
46:35:78:4c:56:57:68:2e:0e:31:46:e6:be:33:d6:
3c:ac:94:f4:87:93:11:5e:77:a7:f6:63:e4:23:7a:
14:f5:8c:ea:f4:6e:7e:ec:f7:d1:47:bc:e9:24:47:
2c:f3:87:ea:0d:68:31:dc:05:43:e6:58:fb:f9:d4:
77:e1:46:1c:4c:7e:70:7b:b7:73:02:3a:57:04:76:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:B1:3D:4D:19:F4:95:CF:1E:FD:B0:AC:56:0F:18:52:CF:23:71
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:03:75:2d:f9:a7:ce:d1:08:34:63:a6:18:10:c3:f1:2d:
8b:66:ac:e1:f3:5d:40:3d:c7:1b:b9:9b:8d:18:3f:7a:0a:89:
39:c5:f9:62:4c:9b:c0:72:64:a8:89:f7:f0:60:15:99:cd:f3:
38:1e:9f:dd:fc:b8:6e:f1:31:18:77:88:85:73:c5:7f:77:f0:
3e:ce:54:2b:e9:23:06:b2:db:1a:52:57:68:aa:f3:3f:83:5a:
04:7a:c3:53:65:53:aa:c6:ce:4b:78:b4:4c:b3:90:87:13:b0:
6a:8d:4c:eb:90:5b:66:85:1b:9f:60:c2:c6:85:52:07:02:12:
dd:85:ef:70:d9:4c:b3:4c:c7:b7:71:6a:c9:03:4b:8a:0d:6a:
a5:0f:8d:14:5c:72:5d:04:57:b7:e3:8c:2c:1c:b6:ac:83:a8:
db:5f:35:0d:4d:62:aa:c0:6a:96:2e:b3:48:29:5c:7a:02:50:
91:a9:02:f1:4c:b4:a7:ad:4c:95:9d:92:d8:d3:98:c1:a5:96:
1b:73:03:aa:b4:39:ef:de:1c:8c:dd:e9:1c:73:b6:58:b5:55:
89:8b:30:d4:da:21:f1:9e:c0:47:48:8a:88:7c:4c:6d:5a:f8:
18:61:97:eb:28:95:fa:3e:08:cc:83:a2:f7:aa:9c:34:b9:ab:
41:ab:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:47:16 2025 by rpki-client