Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: 1d3PIvresrqm77ESpUXq/Vta1V1UqQqrk8YyGHuBf80=
Subject key identifier: 6F:A9:B6:2B:64:DA:DD:B8:66:14:22:1A:84:D1:A1:DF:22:62:0E:8B
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019844AC8B7CF9424046567623649B3620F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 03:00:15 +0000
Manifest this update: Sat 26 Jul 2025 03:00:15 +0000
Manifest next update: Sun 27 Jul 2025 03:00:15 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: hqwuqvSURNEmvzosllPNOGMetQG4R2nFVgfKh9cOCuU=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:8b:7c:f9:42:40:46:56:76:23:64:9b:36:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jul 26 03:00:15 2025 GMT
Not After : Jul 27 03:00:15 2025 GMT
Subject: CN=6fa9b62b64daddb86614221a84d1a1df22620e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:79:f5:47:97:1a:b4:2a:c4:58:83:93:2c:
90:19:0a:7e:3a:60:81:01:62:09:f0:46:c7:f5:38:
ed:0b:78:80:73:a7:f2:33:bc:8e:7b:03:d7:ee:3b:
55:a0:9f:87:2e:2c:dc:ac:60:cf:ed:a1:cd:fa:cc:
8f:02:77:cb:04:75:6f:60:9a:9e:22:8d:51:3c:2f:
49:61:42:16:8f:8f:e4:87:fd:c2:7a:42:78:19:a7:
85:68:84:54:97:fc:39:43:ee:2a:16:2b:fd:5f:e6:
0b:f3:98:9e:97:df:d0:ef:30:d5:60:ef:63:ec:8a:
d4:a8:1f:9f:5f:2a:b5:84:bc:16:cf:6d:f2:c2:24:
f9:09:1f:67:1a:e5:e3:9e:0a:0f:91:47:33:90:b8:
74:c5:64:ac:09:90:dd:06:f1:44:a7:ff:4b:46:c6:
75:36:3f:1a:24:1f:eb:e4:3f:23:ae:e9:ad:7b:63:
15:d8:a4:ba:53:69:50:b6:51:29:16:7d:95:01:4d:
4e:93:45:d6:a7:12:53:0a:36:2e:0d:cf:ed:45:09:
ec:2b:8e:e3:64:86:13:1d:69:61:af:10:bc:7b:f3:
b1:4e:a1:8e:6c:7c:e4:6d:5c:f1:c0:8a:fa:31:35:
4e:cb:db:d6:26:8d:ba:f4:68:5a:34:9f:59:c6:9b:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:B6:2B:64:DA:DD:B8:66:14:22:1A:84:D1:A1:DF:22:62:0E:8B
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:95:7e:c1:2d:8e:1f:19:c7:92:24:95:05:d1:5a:97:39:
c3:33:a1:30:21:73:a4:e2:96:cf:06:9a:56:45:b9:2d:27:e8:
c4:af:b8:36:ed:71:53:a7:09:21:ca:79:e4:03:83:de:39:91:
12:28:88:3a:35:7d:11:18:98:a7:65:4e:af:78:90:c2:ba:59:
ee:1c:4c:41:0a:eb:be:2d:49:49:35:e0:cb:f7:72:78:9d:14:
59:b5:90:52:ec:65:1d:02:da:1b:e0:2e:d4:b8:88:61:f4:f7:
75:6a:73:d5:cd:de:da:99:26:89:64:d5:c9:b3:d7:35:3b:04:
14:ae:31:5f:4a:5c:ab:df:09:51:42:66:1d:69:bb:8d:ad:27:
d9:9e:c9:81:e8:9c:ca:e0:ea:7c:04:b5:15:d7:b3:b5:85:da:
9f:f8:dd:bd:2a:e8:82:a5:8b:74:92:7b:3f:38:60:56:b7:7a:
14:30:bf:52:5c:f1:a6:47:41:31:8d:76:2f:9d:41:f6:d1:23:
3c:24:12:62:50:85:0e:b6:24:68:33:21:61:41:ea:aa:7f:95:
cb:fd:43:b8:bf:ec:c2:88:f6:a6:4e:58:3d:b9:fa:49:05:a0:
be:49:30:1a:f2:a6:4f:9a:4b:d0:3c:02:76:fc:5b:cc:b7:04:
ae:5f:7c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErIt8+UJARlZ2I2SbNiD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjUwNzI2MDMwMDE1WhcNMjUwNzI3MDMwMDE1WjAzMTEwLwYDVQQD
Eyg2ZmE5YjYyYjY0ZGFkZGI4NjYxNDIyMWE4NGQxYTFkZjIyNjIwZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtet59UeXGrQqxFiDkyyQGQp+OmCB
AWIJ8EbH9TjtC3iAc6fyM7yOewPX7jtVoJ+HLizcrGDP7aHN+syPAnfLBHVvYJqe
Io1RPC9JYUIWj4/kh/3CekJ4GaeFaIRUl/w5Q+4qFiv9X+YL85iel9/Q7zDVYO9j
7IrUqB+fXyq1hLwWz23ywiT5CR9nGuXjngoPkUczkLh0xWSsCZDdBvFEp/9LRsZ1
Nj8aJB/r5D8jrumte2MV2KS6U2lQtlEpFn2VAU1Ok0XWpxJTCjYuDc/tRQnsK47j
ZIYTHWlhrxC8e/OxTqGObHzkbVzxwIr6MTVOy9vWJo269GhaNJ9ZxpsDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+ptitk2t24ZhQiGoTRod8iYg6LMB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBaVfsEt
jh8Zx5IklQXRWpc5wzOhMCFzpOKWzwaaVkW5LSfoxK+4Nu1xU6cJIcp55AOD3jmR
EiiIOjV9ERiYp2VOr3iQwrpZ7hxMQQrrvi1JSTXgy/dyeJ0UWbWQUuxlHQLaG+Au
1LiIYfT3dWpz1c3e2pkmiWTVybPXNTsEFK4xX0pcq98JUUJmHWm7ja0n2Z7Jgeic
yuDqfAS1FdeztYXan/jdvSrogqWLdJJ7PzhgVrd6FDC/UlzxpkdBMY12L51B9tEj
PCQSYlCFDrYkaDMhYUHqqn+Vy/1DuL/swoj2pk5YPbn6SQWgvkkwGvKmT5pL0DwC
dvxbzLcErl981A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:42 2025 by rpki-client