Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: Ag3oxlTdtE9I+CBjITshVj/sn9Erc2ofm6pFPaGBQug=
Subject key identifier: BE:86:08:2E:6A:BD:9B:0A:32:63:30:D5:C5:CA:BF:79:3D:35:AD:21
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0197469ED1796A32C0EB69EC2183B12FD045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 06C5
Signing time: Fri 06 Jun 2025 19:01:42 +0000
Manifest this update: Fri 06 Jun 2025 19:01:42 +0000
Manifest next update: Sat 07 Jun 2025 19:01:42 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: 7//5xA56K7wtnHvzTnuQcvGqVqaO+dtdjWrYc9ts634=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:d1:79:6a:32:c0:eb:69:ec:21:83:b1:2f:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jun 6 19:01:42 2025 GMT
Not After : Jun 7 19:01:42 2025 GMT
Subject: CN=be86082e6abd9b0a326330d5c5cabf793d35ad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:fd:46:89:b3:69:f1:17:71:95:01:65:1d:
12:44:9b:76:5b:91:39:05:10:d0:b1:35:cf:8f:fb:
bc:95:fc:ac:d4:ec:50:6a:9d:1e:21:a8:96:25:73:
16:bc:fe:57:0b:bf:ed:b8:b2:d3:b6:c3:da:16:61:
14:6c:2f:95:9f:d5:53:39:18:6c:ec:c3:ec:c1:0c:
dc:76:a3:c0:b2:36:11:41:7c:c0:5b:bb:62:a7:21:
ab:58:34:40:61:2a:2a:68:22:0e:a2:66:83:7c:10:
cd:5f:e0:6e:89:7e:0a:32:71:a5:08:d7:0c:10:86:
18:a1:57:82:82:fb:ca:cc:5b:81:49:ec:e7:08:83:
87:fa:fd:e6:0e:92:90:08:bf:e4:9a:5b:6d:7c:7a:
03:b2:e4:9d:79:66:26:0f:1b:25:48:58:bb:e4:6a:
fa:0a:3c:3a:b1:1a:6e:c9:a3:dd:a5:87:7c:a5:b8:
37:2c:94:6f:cd:a4:22:a8:f0:6b:a1:c9:12:ad:9a:
18:e3:89:46:d0:ec:ab:87:8c:9c:b6:cc:1d:b9:12:
fa:a0:7e:d9:2e:57:a9:5d:5b:b7:48:64:b2:fa:dd:
85:d7:26:53:3f:6e:d2:13:7b:12:9e:4f:81:b7:fd:
fb:c1:ec:d9:c2:5b:5f:e2:3e:9b:e9:c4:84:60:e1:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:08:2E:6A:BD:9B:0A:32:63:30:D5:C5:CA:BF:79:3D:35:AD:21
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:f8:47:f9:aa:bd:bd:5b:19:82:56:9e:8f:c5:8f:02:b7:
6b:54:a9:87:1d:e7:41:22:5d:16:a3:66:f9:aa:1c:b7:9e:e7:
57:da:71:fd:2d:a7:ae:75:55:41:df:b6:85:7c:60:49:32:65:
9d:fd:25:b4:62:e2:32:c1:e0:92:1f:25:5c:d8:13:8c:47:e3:
60:06:a2:36:16:92:07:b4:27:2d:88:d9:ee:97:08:5d:0a:e8:
04:05:cf:13:a4:3b:51:3a:08:2c:6f:72:d2:0d:e2:be:b3:0a:
60:5f:6a:04:65:58:9a:38:ad:29:14:df:71:de:35:60:eb:95:
33:5a:ff:6e:f0:24:6f:bd:d1:73:b4:64:30:c2:c5:24:78:cb:
ef:89:57:64:f5:e2:23:cf:6f:f3:af:03:b9:d9:e5:96:23:6c:
8e:cd:97:fc:03:65:85:05:de:c2:f9:92:f9:37:bb:e5:4c:19:
53:89:7f:0c:3a:b0:23:59:39:cd:b3:82:d9:51:78:6e:ee:37:
be:bf:42:75:89:e9:2b:76:9f:3a:62:d7:e0:af:7a:89:b7:24:
cc:44:81:25:45:43:59:06:92:90:46:cf:41:00:ea:e8:e4:16:
d9:3d:31:47:70:7e:b5:54:5b:22:3e:1c:41:bd:75:48:b8:aa:
26:a1:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:28 2025 by rpki-client