Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: cWuO7eS8k+0Zm+7C7QqzAxoFOOsN2TeONhgHXJTjXBA=
Subject key identifier: 46:8B:E1:43:84:5E:2C:F8:F1:D3:C2:B8:AE:50:29:7B:34:D7:2D:3E
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01984C9D18628305BE42D555DED831249EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 05D4
Signing time: Sun 27 Jul 2025 16:00:20 +0000
Manifest this update: Sun 27 Jul 2025 16:00:20 +0000
Manifest next update: Mon 28 Jul 2025 16:00:20 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: 6Wb1f+aYwv4NGwLxzxJixGPIX80QQnlWqjM4wfEODqw=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:18:62:83:05:be:42:d5:55:de:d8:31:24:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jul 27 16:00:20 2025 GMT
Not After : Jul 28 16:00:20 2025 GMT
Subject: CN=468be143845e2cf8f1d3c2b8ae50297b34d72d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:a8:04:e9:39:2c:88:ad:c7:34:49:ad:42:
83:cf:02:e1:26:65:cb:fd:33:4f:c3:58:e1:c8:bc:
e1:2c:fc:f9:d7:d2:ba:db:9f:e5:c7:b6:3d:e9:c8:
99:35:d0:73:b3:9b:39:3e:08:a5:13:4e:1b:41:3b:
7d:d1:20:77:2a:c5:58:e4:46:6c:ac:0b:75:78:19:
d7:ff:f1:2d:d9:b1:c1:d5:96:f7:79:0a:96:66:2a:
a5:8a:63:bd:83:20:fe:e0:25:27:27:f6:2a:02:e0:
28:66:1f:05:66:11:df:21:e9:a4:40:18:6a:31:47:
23:f0:7e:45:93:2f:f2:f8:97:fe:8c:48:9e:64:2f:
09:04:0c:15:16:a6:86:17:c6:aa:1b:1a:f6:bd:fa:
c0:0b:75:f6:84:4a:ea:c2:3f:1c:13:55:19:6f:ce:
6d:f4:9b:d3:01:4d:2a:e8:d9:08:00:cc:62:ab:20:
de:8b:4e:4b:c7:0f:75:c4:33:39:6b:76:c1:b6:22:
f3:79:5b:ac:df:76:e8:52:63:fa:90:a9:40:60:9a:
6d:a6:0f:04:3d:16:e4:44:01:da:63:1f:4c:7c:a5:
a8:75:9d:2b:12:5a:d3:46:fe:32:ae:62:fa:ad:98:
1b:1f:85:18:41:f0:d4:26:70:8a:57:4e:68:62:ef:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:E1:43:84:5E:2C:F8:F1:D3:C2:B8:AE:50:29:7B:34:D7:2D:3E
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:64:ab:05:cb:58:49:8b:13:d3:86:f6:5f:67:d8:f2:9f:1b:
39:50:3e:0b:b0:5b:fa:d8:68:41:5c:2d:85:44:4e:29:34:3a:
64:1c:19:8c:9d:c4:8a:e9:b0:fc:13:bf:5e:e8:e3:91:7f:ab:
52:37:98:18:c6:b8:9b:9d:8b:aa:34:9c:75:27:92:45:89:cd:
bb:4b:39:1e:87:8a:07:e7:72:0a:1e:43:69:58:7d:8a:6f:98:
bd:b9:db:b3:71:e9:9e:fe:70:34:62:b3:84:fe:4f:cf:f6:80:
52:33:b6:7a:84:ef:39:6d:b9:6e:59:2c:da:5e:f8:cb:04:c7:
2d:21:d7:58:e2:b3:a4:2d:1b:e5:c6:e2:d9:d9:75:03:2d:b6:
1b:9c:79:a9:63:04:59:87:d9:8f:fd:58:91:7c:82:66:85:5b:
19:7e:a9:b1:e4:ed:46:c6:14:71:34:c0:9a:2c:80:1c:15:1d:
f5:aa:5f:e0:5a:64:bd:7a:ad:bb:57:e0:f1:ff:0f:c6:c7:3c:
66:25:3c:fa:cf:5d:f7:af:ec:44:bc:c0:c0:88:c8:a5:45:80:
dd:ca:45:c7:3b:10:24:48:8d:88:44:36:45:0a:ed:b7:88:9b:
16:53:18:1a:01:e1:e4:bf:98:8a:6b:a5:8a:1f:bf:86:ac:32:
89:a2:84:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnRhigwW+QtVV3tgxJJ69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjUwNzI3MTYwMDIwWhcNMjUwNzI4MTYwMDIwWjAzMTEwLwYDVQQD
Eyg0NjhiZTE0Mzg0NWUyY2Y4ZjFkM2MyYjhhZTUwMjk3YjM0ZDcyZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8SoBOk5LIitxzRJrUKDzwLhJmXL
/TNPw1jhyLzhLPz519K625/lx7Y96ciZNdBzs5s5PgilE04bQTt90SB3KsVY5EZs
rAt1eBnX//Et2bHB1Zb3eQqWZiqlimO9gyD+4CUnJ/YqAuAoZh8FZhHfIemkQBhq
MUcj8H5Fky/y+Jf+jEieZC8JBAwVFqaGF8aqGxr2vfrAC3X2hErqwj8cE1UZb85t
9JvTAU0q6NkIAMxiqyDei05Lxw91xDM5a3bBtiLzeVus33boUmP6kKlAYJptpg8E
PRbkRAHaYx9MfKWodZ0rElrTRv4yrmL6rZgbH4UYQfDUJnCKV05oYu//mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaL4UOEXiz48dPCuK5QKXs01y0+MB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWSrBctY
SYsT04b2X2fY8p8bOVA+C7Bb+thoQVwthUROKTQ6ZBwZjJ3Eiumw/BO/XujjkX+r
UjeYGMa4m52LqjScdSeSRYnNu0s5HoeKB+dyCh5DaVh9im+Yvbnbs3Hpnv5wNGKz
hP5Pz/aAUjO2eoTvOW25blks2l74ywTHLSHXWOKzpC0b5cbi2dl1Ay22G5x5qWME
WYfZj/1YkXyCZoVbGX6pseTtRsYUcTTAmiyAHBUd9apf4FpkvXqtu1fg8f8Pxsc8
ZiU8+s9d96/sRLzAwIjIpUWA3cpFxzsQJEiNiEQ2RQrtt4ibFlMYGgHh5L+Yimul
ih+/hqwyiaKE6g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:43:05 2025 by rpki-client