Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: aZ448yzKBc2DGLARKb17a06aTAwWvZaOBoPvUdmHklw=
Subject key identifier: D4:AE:08:C6:FE:0C:04:AD:F2:D4:2A:3A:66:EF:56:23:0B:85:05:10
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019A1BAB8540B8572491365AB7EFDC596815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1421
Signing time: Sat 25 Oct 2025 14:00:16 +0000
Manifest this update: Sat 25 Oct 2025 14:00:16 +0000
Manifest next update: Sun 26 Oct 2025 14:00:16 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: kDCaZoXSeqXcOxfOfGndGoAcr1S8gYHle3wSPNDSLkY=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:85:40:b8:57:24:91:36:5a:b7:ef:dc:59:68:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Oct 25 14:00:16 2025 GMT
Not After : Oct 26 14:00:16 2025 GMT
Subject: CN=d4ae08c6fe0c04adf2d42a3a66ef56230b850510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:66:02:3d:3e:61:ab:d7:7f:4d:88:19:c0:
f1:cf:fc:f5:8b:8a:3d:d8:ba:74:06:f3:da:9b:c3:
2e:2b:f3:3a:19:ce:6b:14:cb:fe:0d:66:02:1c:ac:
95:a4:c0:a1:eb:d0:e0:06:60:df:a0:79:e0:36:0b:
f9:c0:f5:a0:2d:3f:9e:9e:2b:c5:1b:e7:a1:dc:69:
e6:06:43:c1:90:bd:f9:6f:47:32:fc:07:4e:8c:11:
b5:a8:45:23:df:11:7d:5d:24:1f:c4:60:80:db:f7:
58:0b:98:30:5a:b4:74:86:6b:7a:c4:cc:ed:d9:ad:
1a:1d:1f:74:02:03:e0:6d:27:d7:fd:bf:b2:00:23:
91:ae:c6:fd:d1:28:3b:93:50:3b:31:38:25:d7:15:
04:8f:a4:b8:d7:66:86:88:49:ab:ab:d4:cf:33:84:
b8:0f:24:af:1b:18:cd:d2:f6:6f:33:bd:22:9b:74:
66:f3:f8:11:27:06:f1:54:eb:55:5c:5a:59:72:5c:
6f:b6:b5:1a:a6:e2:68:19:10:9f:85:42:66:de:d1:
05:79:6e:54:1b:37:e3:d5:e5:4d:b1:93:42:d6:aa:
73:26:7f:3e:f2:cc:b1:ab:2c:6f:3e:dc:7f:80:01:
d2:10:23:b6:fa:aa:93:7d:c6:40:7e:94:75:cd:d1:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:08:C6:FE:0C:04:AD:F2:D4:2A:3A:66:EF:56:23:0B:85:05:10
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:f5:a8:22:0d:35:de:e2:da:01:bc:0a:cf:39:09:54:6f:
80:59:19:f0:ae:e4:56:4e:27:f1:44:b4:ac:87:81:9d:24:65:
5a:ef:62:73:b1:f8:d5:bd:41:a9:e4:9d:d7:32:82:c8:2c:f6:
b8:af:a2:99:0c:a4:d1:0c:30:02:2e:a2:10:bc:35:10:97:95:
d4:58:85:f5:90:86:de:b9:fc:b1:43:3d:06:9f:56:de:7a:a5:
99:63:f8:28:24:ad:17:fb:57:88:ee:07:f5:5b:1e:c0:db:05:
66:28:db:8f:53:36:c6:84:b2:b7:f7:24:9a:c8:05:04:3d:be:
ba:57:8f:3f:bc:e3:7f:fa:7b:77:7a:b8:48:49:8f:95:2a:60:
19:af:89:22:2b:29:13:0c:1e:f1:1a:b6:80:e3:39:4f:94:1a:
63:0b:b7:34:4a:8b:10:fb:2f:17:c1:39:8b:26:81:46:ae:ad:
fe:94:3d:b6:71:3d:44:37:4b:1f:9d:a5:b8:1c:aa:51:0b:a1:
58:95:d3:84:72:47:26:21:25:fd:78:aa:dd:0b:5c:c8:d6:b6:
af:08:51:b9:ad:46:87:a6:d9:2a:04:76:dc:70:d6:71:c9:c2:
a6:b6:6b:e6:48:57:36:f1:48:70:80:75:a0:22:12:28:d1:1f:
fe:9c:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:56:59 2025 by rpki-client