Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: gOsMVGyjt9i+F80h1D0QlTUddNaVmidq6/+uSj+lEcY=
Subject key identifier: 1D:83:68:81:91:AA:A8:4A:D5:4A:A4:EE:CD:05:6E:DE:47:4D:63:30
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 01991F1E38F55DC1B04D59BAA111D97EC5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0EF4
Signing time: Sat 06 Sep 2025 13:01:38 +0000
Manifest this update: Sat 06 Sep 2025 13:01:38 +0000
Manifest next update: Sun 07 Sep 2025 13:01:38 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: zlcoTyCmKmDtxbrwCF4mcHuNHhng3MiqMoMjxrhOuVA=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:1e:38:f5:5d:c1:b0:4d:59:ba:a1:11:d9:7e:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Sep 6 13:01:38 2025 GMT
Not After : Sep 7 13:01:38 2025 GMT
Subject: CN=1d83688191aaa84ad54aa4eecd056ede474d6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:4f:60:ce:a5:a2:fc:bf:81:72:88:fd:cb:
0b:b0:f3:44:1e:bf:82:64:cf:b2:3a:0e:0d:1e:de:
08:8c:75:ac:2d:91:dc:c6:7b:1d:ee:60:bb:7b:5a:
08:2d:eb:71:b3:ca:90:df:dd:dd:87:25:1c:a1:64:
49:53:4e:3f:6c:17:6c:4e:cc:2d:0b:de:63:e7:fb:
7b:3b:1e:3f:a6:8d:d5:ec:df:73:63:73:dc:c1:ef:
6e:fa:d6:5d:e1:99:c3:07:a1:12:e7:5e:a6:ee:4f:
0d:c1:9c:40:45:bc:49:08:97:3c:42:a9:42:67:1f:
d1:4a:a8:9e:9f:37:85:f8:0d:8d:00:00:56:9e:37:
3f:4e:84:b1:ef:14:67:e1:7b:02:d6:4f:d0:07:a9:
a4:84:78:7f:28:83:a2:79:10:69:49:5e:f9:b6:2e:
68:64:bc:be:29:58:a7:93:79:21:07:ed:14:a4:21:
c0:b2:43:58:66:4c:b1:cf:3d:e4:b4:a0:27:46:c4:
12:5b:92:c5:5c:17:8d:0b:b8:41:7a:d1:8b:a0:78:
94:03:04:b4:8d:ca:58:8e:86:00:60:8a:1e:20:05:
5c:7f:91:d0:be:1d:80:5a:b8:bf:2c:c9:4e:0a:0a:
54:17:0a:f2:4f:a6:23:73:2c:50:b9:4c:44:32:04:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:83:68:81:91:AA:A8:4A:D5:4A:A4:EE:CD:05:6E:DE:47:4D:63:30
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:4c:f5:46:54:27:04:e5:ca:8e:0d:53:60:76:db:cf:62:
d2:1c:b6:4b:e8:54:ae:19:9a:01:60:84:02:6a:cb:55:7d:2f:
32:cd:2f:db:7c:39:df:42:67:40:04:ab:66:e6:ed:96:2c:ba:
3e:10:bd:1b:5e:59:50:ac:72:12:6c:09:4a:d3:66:da:38:d9:
5d:38:73:36:17:29:95:08:14:88:e3:9a:49:88:14:49:9d:21:
56:46:a1:21:88:6a:bc:22:8e:09:c8:d4:04:7c:f0:63:96:c0:
1c:b6:25:2f:47:09:60:7f:f6:47:68:0f:8a:07:9e:2d:28:bf:
a0:d2:8d:6b:b7:0d:43:a3:4a:92:16:e8:4a:79:25:28:89:0e:
de:75:86:91:7c:bf:31:7d:28:81:b4:76:44:49:f4:27:5e:6f:
36:4f:6a:48:d2:80:66:f4:51:6b:5f:79:3a:21:37:86:5a:50:
b1:16:f8:99:28:5a:d5:a4:40:93:39:f1:cb:c8:e9:be:18:61:
1b:69:48:5c:d2:f7:2c:e1:d6:ae:65:6a:e0:f0:ba:b7:32:92:
f4:11:bf:29:62:e3:59:ca:e1:f3:59:b6:4b:e3:a2:ba:14:89:
47:ab:16:ec:6a:9b:c2:bc:2f:9e:62:4e:c1:04:2b:13:5b:29:
c7:4b:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:02:13 2025 by rpki-client