Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: 9be3a6axPHwtPZW6N6FsUXyLEFxbEZm3NY47xKH7sD8=
Subject key identifier: B5:48:27:D9:4E:4D:C2:AE:88:7C:C9:AB:91:49:01:2A:04:43:E1:5B
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019A0AB86407819EF248791F6E9B5B7993B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 16F2
Signing time: Wed 22 Oct 2025 07:00:47 +0000
Manifest this update: Wed 22 Oct 2025 07:00:47 +0000
Manifest next update: Thu 23 Oct 2025 07:00:47 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: XIT4XyFGpnz9HvhztcYPUnXxP94Dg5t93x5Ve2KFv3k=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:64:07:81:9e:f2:48:79:1f:6e:9b:5b:79:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Oct 22 07:00:47 2025 GMT
Not After : Oct 23 07:00:47 2025 GMT
Subject: CN=b54827d94e4dc2ae887cc9ab9149012a0443e15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:2b:89:ea:e8:73:50:f7:75:04:dc:5b:cb:
17:e0:fa:ee:01:71:3d:6e:b1:77:cf:02:b8:4e:c2:
b8:c9:a1:3e:a9:4c:28:fb:fd:27:3a:8c:90:1a:31:
29:f6:ef:1c:6e:b5:c4:ca:9d:ad:e2:6f:a9:b8:9d:
dc:c2:39:af:9d:8d:60:9e:0a:b3:3d:09:1c:9f:81:
be:70:3d:e5:79:82:4e:08:fd:1a:53:a9:90:99:58:
ae:f9:81:e5:c1:24:8b:c9:91:00:9a:9c:31:d1:94:
b3:27:f2:ec:b5:4e:d3:6d:6b:86:27:ba:6f:4a:c1:
ed:b8:40:7a:3b:83:c2:8a:de:b7:d9:77:69:86:62:
4f:22:65:f5:c5:74:1a:73:6d:d9:6c:9d:ec:f8:d4:
61:9c:b3:d0:9c:59:79:65:89:21:5b:b8:e3:e7:99:
fc:bb:0e:e5:73:8e:64:4c:39:8a:ce:ca:86:bc:fd:
df:2b:b9:bf:28:41:47:47:7a:ca:97:78:05:b2:f7:
56:8d:14:e9:ca:16:ae:bf:39:78:c6:8e:bc:68:6c:
0c:60:8d:c9:f9:18:01:3c:19:92:5f:ec:94:ee:45:
c2:b5:38:7e:56:e3:2e:b5:14:fb:c5:f9:de:17:08:
ac:ce:e1:88:7b:c2:b9:de:1c:33:5a:e2:9d:ca:e4:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:27:D9:4E:4D:C2:AE:88:7C:C9:AB:91:49:01:2A:04:43:E1:5B
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:91:10:aa:38:62:85:2f:2a:98:96:04:f6:72:61:61:43:
b2:d3:9b:8e:d7:b3:86:0a:89:27:d1:ec:f1:6c:8e:16:ab:80:
47:2b:73:a3:a0:18:45:9c:af:63:d3:0c:a2:84:df:f2:3a:3a:
ca:00:93:11:e6:70:d3:e6:a9:5c:3c:76:f0:c7:52:4a:cc:9c:
ae:1d:69:84:0a:d2:dc:7f:f6:13:6b:1a:56:9e:d4:63:28:da:
86:04:a1:d7:77:66:dd:2e:d8:39:f5:46:db:0a:af:4d:1b:39:
3a:81:e7:c7:4b:d8:7a:98:07:d2:0b:d8:51:81:a0:9c:13:ae:
56:85:d7:ef:2a:29:74:d4:2d:2e:56:d5:b7:a4:ec:4d:88:e7:
88:2d:ac:15:5d:53:93:a7:69:17:0c:6e:4f:5e:89:b0:5d:e2:
7e:ef:80:f7:6d:aa:65:d5:d1:61:5b:e8:d0:97:3b:c3:9e:34:
09:6e:fa:a6:f4:da:13:91:d3:85:02:dd:30:fd:d2:27:53:8d:
dc:f5:7a:fa:9e:2e:b8:67:70:87:b4:2a:93:e9:14:c5:6b:98:
9e:1b:2f:7d:9a:92:8a:ba:db:db:6a:23:8e:0b:cb:91:55:d5:
e1:15:c1:04:83:7e:b4:88:f9:5a:19:5a:c8:f9:8e:af:81:14:
05:fd:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:15:30 2025 by rpki-client