Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: MGE1aHqf13Y/O9UdlzasrnuxfJ0ckv7LZBe8DMgZ/mE=
Subject key identifier: 78:60:BC:0A:46:BD:AE:BE:F3:B6:E9:F3:69:5C:52:83:C6:A3:28:6C
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019849D3A6E13E19E1EE82357061B7BA646B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 03:01:04 +0000
Manifest this update: Sun 27 Jul 2025 03:01:04 +0000
Manifest next update: Mon 28 Jul 2025 03:01:04 +0000
Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: 95HTr2FAbmR7vES1eln+VH2GvrYqE2r+kuP/G4P3xRk=)
7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a6:e1:3e:19:e1:ee:82:35:70:61:b7:ba:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jul 27 03:01:04 2025 GMT
Not After : Jul 28 03:01:04 2025 GMT
Subject: CN=7860bc0a46bdaebef3b6e9f3695c5283c6a3286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:ea:8c:c4:a7:2f:44:a2:b9:78:36:47:5e:
2b:a6:69:d0:e2:ec:7b:db:25:d8:13:e3:d4:62:a0:
32:76:5d:25:f6:10:49:2d:d2:e3:f0:45:33:94:e4:
43:5e:b0:1e:e0:48:5c:b0:0c:c5:25:9c:77:f7:29:
20:52:14:2e:70:af:8b:7f:54:c6:db:07:44:b1:63:
28:b0:29:f5:6e:38:17:d1:8c:e8:6b:5f:13:62:86:
bf:d0:6c:b7:73:9a:ba:6e:82:2c:6e:bf:80:51:f7:
98:99:0f:38:14:b5:3d:a6:06:31:53:b3:ce:32:46:
ba:07:a5:89:5f:88:42:54:40:4d:5d:8a:b2:65:81:
0a:9b:36:14:03:d0:b7:d7:10:d5:78:2c:b8:1a:70:
ce:0a:81:a2:e0:72:d5:40:28:60:d0:a3:29:27:78:
f6:37:c7:47:4e:5f:9c:9b:05:c5:79:fe:ca:37:7f:
8e:99:20:02:1a:4c:3e:b5:d2:f9:09:72:28:e8:a3:
8d:29:4f:d4:3c:5f:c8:a4:68:ba:d1:ec:c1:20:4f:
09:51:eb:8b:b6:1d:f1:dc:9b:f4:a0:48:77:00:87:
cd:32:0b:73:41:68:76:1c:d9:cf:3c:e3:e1:ae:cc:
b7:6d:b7:a1:cb:69:a2:d0:8f:bb:56:1f:c9:b2:09:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:BC:0A:46:BD:AE:BE:F3:B6:E9:F3:69:5C:52:83:C6:A3:28:6C
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1e:97:62:f6:03:76:6b:54:bd:ba:37:44:8a:f7:ef:4c:5c:
fe:5b:51:93:3e:eb:74:04:31:b8:54:c3:ed:7f:83:b8:78:aa:
5d:67:60:ad:b8:25:ed:b9:4c:e6:ef:25:2a:ad:82:81:77:88:
52:ba:d2:b8:57:ae:6a:15:0b:37:8b:1c:0d:12:9d:bc:3c:66:
e3:c9:ed:92:6e:1b:1a:dd:b0:5d:41:cc:29:35:67:5a:78:98:
af:7a:dd:88:46:0e:cd:b3:b8:b3:ed:11:07:a1:8c:05:64:a0:
63:ef:5b:a2:e0:6e:54:45:ed:5c:46:c0:90:f1:9a:ac:46:aa:
1d:d6:b0:b5:8b:9a:8c:68:1d:c9:2f:31:d1:93:c1:a8:7d:4b:
1e:e5:71:85:ab:d8:9e:99:63:5a:38:0e:1b:fe:2d:92:cf:57:
b9:18:83:a9:7f:6a:09:93:48:f2:84:5b:e0:44:1b:6b:6b:69:
99:5c:a5:ef:43:10:4e:bd:02:90:d2:2e:aa:40:71:de:fc:f7:
b9:5a:6d:73:cf:50:42:52:71:5e:7e:03:29:b6:7e:48:0c:57:
e7:b9:7d:cd:8e:94:ad:b4:ef:a3:7e:cf:b4:c0:96:b6:54:ff:
6a:b2:dd:27:bb:56:86:f1:e8:73:a0:8e:9e:00:2a:3d:47:42:
4c:8a:4e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ06bhPhnh7oI1cGG3umRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm
NzY0ZmEwHhcNMjUwNzI3MDMwMTA0WhcNMjUwNzI4MDMwMTA0WjAzMTEwLwYDVQQD
Eyg3ODYwYmMwYTQ2YmRhZWJlZjNiNmU5ZjM2OTVjNTI4M2M2YTMyODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RvqjMSnL0SiuXg2R14rpmnQ4ux7
2yXYE+PUYqAydl0l9hBJLdLj8EUzlORDXrAe4EhcsAzFJZx39ykgUhQucK+Lf1TG
2wdEsWMosCn1bjgX0Yzoa18TYoa/0Gy3c5q6boIsbr+AUfeYmQ84FLU9pgYxU7PO
Mka6B6WJX4hCVEBNXYqyZYEKmzYUA9C31xDVeCy4GnDOCoGi4HLVQChg0KMpJ3j2
N8dHTl+cmwXFef7KN3+OmSACGkw+tdL5CXIo6KONKU/UPF/IpGi60ezBIE8JUeuL
th3x3Jv0oEh3AIfNMgtzQWh2HNnPPOPhrsy3bbehy2mi0I+7Vh/Jsgk5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhgvApGva6+87bp82lcUoPGoyhsMB8GA1UdIwQY
MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt
YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy
LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB6XYvYD
dmtUvbo3RIr370xc/ltRkz7rdAQxuFTD7X+DuHiqXWdgrbgl7blM5u8lKq2CgXeI
UrrSuFeuahULN4scDRKdvDxm48ntkm4bGt2wXUHMKTVnWniYr3rdiEYOzbO4s+0R
B6GMBWSgY+9bouBuVEXtXEbAkPGarEaqHdawtYuajGgdyS8x0ZPBqH1LHuVxhavY
npljWjgOG/4tks9XuRiDqX9qCZNI8oRb4EQba2tpmVyl70MQTr0CkNIuqkBx3vz3
uVptc89QQlJxXn4DKbZ+SAxX57l9zY6UrbTvo37PtMCWtlT/arLdJ7tWhvHoc6CO
ngAqPUdCTIpOFQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:42 2025 by rpki-client