Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: KuD53Fpht4ApdHb9lvQhSABDksW3/WSvB0vTVgqYOEs=
Subject key identifier: 00:DA:AF:A5:93:94:AC:4D:A0:E2:17:4E:5D:50:F7:2A:87:1D:40:1A
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01974779F7E163CBC883AB5F342AA16EA5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 12AA
Signing time: Fri 06 Jun 2025 23:01:04 +0000
Manifest this update: Fri 06 Jun 2025 23:01:04 +0000
Manifest next update: Sat 07 Jun 2025 23:01:04 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: tHlh0+rHQE7cejln+QtzsCq4qX6Kwyij8s6+accn+Mg=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:f7:e1:63:cb:c8:83:ab:5f:34:2a:a1:6e:a5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jun 6 23:01:04 2025 GMT
Not After : Jun 7 23:01:04 2025 GMT
Subject: CN=00daafa59394ac4da0e2174e5d50f72a871d401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:76:06:d8:9c:03:87:80:b3:99:23:97:f2:
87:5b:3d:b3:48:36:16:f2:67:3f:bf:5a:45:e3:10:
38:46:89:8c:ef:67:60:51:e9:21:38:b9:9b:8f:86:
b6:0b:c5:04:1a:6d:d1:eb:ed:06:fc:6d:39:b5:fb:
94:04:ff:c6:34:c6:be:4f:78:64:37:ec:6e:6c:ee:
01:a1:6d:14:ad:2f:51:20:ad:a9:39:88:11:3e:d6:
b5:41:00:12:0d:03:63:38:40:f1:92:b0:50:65:3c:
95:ba:c9:4c:fb:b8:c6:12:04:3c:d5:ab:b0:e7:b1:
63:5b:4d:6b:6f:eb:45:e5:04:da:49:d8:1d:12:ef:
11:e7:38:68:f7:f1:48:36:2b:ed:1a:c1:3d:03:9d:
08:a7:65:11:17:1a:c2:84:8c:28:b7:46:9a:d0:2d:
44:e8:d3:8f:40:ed:d9:e8:6c:28:b2:15:df:e3:f4:
90:d1:47:3c:c5:41:a9:0f:1c:82:4d:af:d3:6d:6d:
09:04:60:6b:45:6e:3c:29:b5:d3:51:ba:48:5a:8f:
4f:45:bf:23:38:47:ba:cc:aa:30:e8:b3:25:cb:43:
de:86:22:93:dd:82:6e:8a:3f:a3:d8:b3:53:a5:db:
fa:dd:20:c8:bc:5e:56:cb:9c:d8:17:78:81:9d:16:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:AF:A5:93:94:AC:4D:A0:E2:17:4E:5D:50:F7:2A:87:1D:40:1A
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:0b:b7:85:75:9b:8c:a1:54:b7:03:b5:09:0a:fe:ea:aa:
14:c0:50:eb:d7:70:07:75:db:4f:ed:59:83:fd:c4:b4:f5:27:
9f:34:28:4d:1a:89:9f:12:5d:85:62:06:85:76:9e:d2:62:bc:
c3:27:9e:d9:62:62:7c:68:03:ad:5f:c7:25:bc:c8:76:ca:9d:
77:d5:b4:1b:fc:e8:4c:2f:eb:06:8c:c6:06:71:9f:ca:22:83:
ab:73:fc:51:b3:72:da:58:60:a7:03:3e:38:d6:d0:d5:41:62:
0b:2d:3a:2e:53:8d:7e:97:07:17:3a:79:8d:1f:40:22:8b:ef:
e7:8b:77:e2:ce:47:0d:0b:71:c9:5d:5a:5e:d3:b0:3f:7e:8a:
24:51:14:24:93:8c:6b:0e:4f:48:b1:bd:c6:aa:ec:8a:8e:8d:
54:eb:be:14:7c:d4:bf:f1:6a:fb:84:a1:a6:0b:5d:95:db:ee:
36:98:f1:b3:25:65:6f:3a:54:68:33:27:4e:de:66:db:d1:8b:
ed:19:09:93:58:69:44:47:e6:25:bf:84:75:86:b5:11:8a:58:
67:c6:95:9a:7d:e3:bc:66:52:45:fc:fd:93:25:3c:66:f0:5b:
f0:ce:bf:32:bd:7f:cd:84:92:62:8b:50:79:c7:3f:5a:74:a2:
8c:79:b2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeffhY8vIg6tfNCqhbqX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew
M2UzYjEwHhcNMjUwNjA2MjMwMTA0WhcNMjUwNjA3MjMwMTA0WjAzMTEwLwYDVQQD
EygwMGRhYWZhNTkzOTRhYzRkYTBlMjE3NGU1ZDUwZjcyYTg3MWQ0MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw752BticA4eAs5kjl/KHWz2zSDYW
8mc/v1pF4xA4RomM72dgUekhOLmbj4a2C8UEGm3R6+0G/G05tfuUBP/GNMa+T3hk
N+xubO4BoW0UrS9RIK2pOYgRPta1QQASDQNjOEDxkrBQZTyVuslM+7jGEgQ81auw
57FjW01rb+tF5QTaSdgdEu8R5zho9/FINivtGsE9A50Ip2URFxrChIwot0aa0C1E
6NOPQO3Z6GwoshXf4/SQ0Uc8xUGpDxyCTa/TbW0JBGBrRW48KbXTUbpIWo9PRb8j
OEe6zKow6LMly0PehiKT3YJuij+j2LNTpdv63SDIvF5Wy5zYF3iBnRYGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADar6WTlKxNoOIXTl1Q9yqHHUAaMB8GA1UdIwQY
MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt
MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0
LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewgLt4V1
m4yhVLcDtQkK/uqqFMBQ69dwB3XbT+1Zg/3EtPUnnzQoTRqJnxJdhWIGhXae0mK8
wyee2WJifGgDrV/HJbzIdsqdd9W0G/zoTC/rBozGBnGfyiKDq3P8UbNy2lhgpwM+
ONbQ1UFiCy06LlONfpcHFzp5jR9AIovv54t34s5HDQtxyV1aXtOwP36KJFEUJJOM
aw5PSLG9xqrsio6NVOu+FHzUv/Fq+4ShpgtdldvuNpjxsyVlbzpUaDMnTt5m29GL
7RkJk1hpREfmJb+EdYa1EYpYZ8aVmn3jvGZSRfz9kyU8ZvBb8M6/Mr1/zYSSYotQ
ecc/WnSijHmyeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:30:55 2025 by rpki-client