Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: bomBLjkjdCVC190DYK1U82Fwden5tW6htBkJlJImvh4=
Subject key identifier: B6:8C:48:7E:5D:45:4A:9D:D3:0B:7C:B0:96:3B:A3:21:CD:45:F0:E2
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0199375CD96309AAD1D5A18A1B4DE63FD7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 064E
Signing time: Thu 11 Sep 2025 06:00:55 +0000
Manifest this update: Thu 11 Sep 2025 06:00:55 +0000
Manifest next update: Fri 12 Sep 2025 06:00:55 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: RsGl3MYam8a8mWQO1UB3QfMrlTvL68e4ZCZ5VJJVPi4=)
2: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (hash: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=)
3: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:d9:63:09:aa:d1:d5:a1:8a:1b:4d:e6:3f:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Sep 11 06:00:55 2025 GMT
Not After : Sep 12 06:00:55 2025 GMT
Subject: CN=b68c487e5d454a9dd30b7cb0963ba321cd45f0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:ae:12:98:1b:64:cc:14:2f:ed:0d:04:9d:
73:bf:c1:df:60:9f:02:85:76:5a:a7:c9:d4:b4:75:
20:0a:28:8c:41:53:9f:cc:61:5a:a8:d7:b9:7a:59:
eb:ab:7d:e7:2a:32:97:4d:78:35:bd:fd:86:c7:3e:
86:48:30:4a:01:bd:2b:91:34:1c:44:aa:ff:5a:af:
02:83:53:cd:f8:3b:2e:1e:fa:28:5a:32:a0:29:07:
cd:d1:b3:13:fd:dc:7d:51:c4:1e:96:4c:b4:a6:4b:
f7:26:b2:a8:61:cd:e3:45:43:40:1b:e5:91:7a:bb:
0e:f3:b3:5e:04:58:43:5a:08:ac:0e:c6:6b:39:cc:
c6:4f:b0:94:fd:f3:c7:98:e0:cc:bb:c9:ca:4a:ca:
28:f2:9d:88:2b:3d:ab:05:7c:b0:09:95:67:60:23:
b7:ec:66:95:40:2e:30:4e:fd:35:46:fe:53:45:97:
ec:de:f2:59:df:e6:0b:65:04:15:b4:fa:c6:db:aa:
b9:fb:66:ba:62:27:d5:3e:0d:d5:fd:6b:20:9a:e4:
b0:49:04:10:23:b5:a1:9e:c9:36:fb:e7:32:72:64:
a1:74:89:73:31:ee:38:22:47:16:ab:42:5e:7b:31:
21:b6:9d:e9:7b:69:c2:b9:90:45:be:7e:86:97:57:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:48:7E:5D:45:4A:9D:D3:0B:7C:B0:96:3B:A3:21:CD:45:F0:E2
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:a9:dd:fd:0b:49:1d:8f:ca:8a:fa:59:74:ca:a8:06:e4:
86:57:e4:6b:5b:98:7e:6c:19:4c:3e:be:9d:54:a2:a8:c2:32:
17:13:fa:48:d5:e7:e4:8c:45:ae:6f:e1:10:bf:06:71:a9:ef:
14:d8:c1:92:0a:df:1b:c3:4e:06:ca:6c:f4:5e:b9:f5:89:9f:
86:83:a7:8c:62:20:73:20:b6:d1:69:13:c7:4f:ed:b3:cd:db:
fd:97:28:90:58:48:9e:b8:61:98:65:76:74:ab:03:0f:4c:87:
7c:28:4c:fd:27:dc:81:b0:81:88:96:79:56:06:2b:c7:c6:e8:
64:aa:7f:91:76:af:ec:5e:5f:0c:4d:bf:9d:b6:d7:25:5c:b9:
77:86:86:dd:bf:87:7b:76:22:c1:5f:66:da:e1:7b:46:32:b6:
b6:d0:f2:6a:88:2b:20:6f:94:40:a0:0d:8a:42:5d:8a:ee:e2:
5e:c8:80:8c:2a:78:30:93:10:6d:96:3c:e2:79:d0:5c:50:a3:
bb:0d:12:8a:1f:21:8c:1a:52:64:4d:09:11:bf:7b:71:00:4a:
79:4c:4a:30:d1:6f:44:99:fb:69:89:49:40:8f:f8:44:a4:5e:
91:c3:ec:74:e2:3d:a5:3f:58:b8:90:3e:bf:0c:04:77:61:9d:
b3:03:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:38:51 2025 by rpki-client