Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: v6MtbwyDqi6APltYIRJaJfngsDFrXAgifRGTQJYSFZU=
Subject key identifier: C1:36:F3:FC:E7:5A:9B:CA:C7:D5:36:D1:D5:58:22:53:02:1F:49:A7
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0197518F58C0FE2B80E8581EC1231BDBD6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 22:00:38 +0000
Manifest this update: Sun 08 Jun 2025 22:00:38 +0000
Manifest next update: Mon 09 Jun 2025 22:00:38 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: lgd/FCCGlGZ2G03XCbJIdwBD7JQE7OV/CtsaMT6vO54=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:58:c0:fe:2b:80:e8:58:1e:c1:23:1b:db:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jun 8 22:00:38 2025 GMT
Not After : Jun 9 22:00:38 2025 GMT
Subject: CN=c136f3fce75a9bcac7d536d1d5582253021f49a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:88:5d:ca:79:26:a2:8e:25:9b:05:4a:8c:
57:1e:a7:3a:36:13:1a:55:7c:b5:11:18:2e:ff:b9:
0d:f8:a2:2c:8a:ad:99:7a:97:5d:d4:82:9b:d2:ba:
2a:65:3b:08:8c:6b:fe:c6:0e:62:20:21:80:f0:d4:
9a:d4:d9:96:63:6e:1f:a2:9c:2d:a9:1e:24:c3:6f:
c8:09:c0:bf:1e:af:b8:89:99:e4:93:82:06:67:23:
e7:00:1a:9e:85:1c:0b:d5:12:93:23:b7:e3:5d:c2:
a5:a1:ec:d5:60:a1:d9:4f:1b:0a:7a:b3:ad:1d:52:
e5:ad:52:be:77:e7:d7:cb:0b:8c:68:cc:08:9e:09:
4d:78:ce:93:45:da:95:2b:cc:0b:6e:20:2b:f0:bd:
a7:d7:a8:6c:40:13:6d:96:84:07:d3:83:8d:00:43:
64:35:2d:b6:30:58:a5:a8:b9:b3:39:98:45:e7:18:
63:9d:aa:61:e6:ec:41:1f:26:c6:57:2d:75:59:36:
c4:0d:1c:94:2b:3e:6e:2b:3a:dd:ea:44:1a:e2:03:
8d:25:89:94:e5:44:c0:f2:fe:4f:46:f9:a7:82:33:
0d:cc:3f:5e:33:1d:71:22:d3:a6:89:79:57:20:6a:
c4:20:ab:00:58:0a:6d:24:f9:c1:39:51:75:f0:7e:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:F3:FC:E7:5A:9B:CA:C7:D5:36:D1:D5:58:22:53:02:1F:49:A7
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0f:d2:ff:3e:fb:0b:fe:46:96:9e:ed:70:e8:af:87:2a:7b:
cb:49:f7:74:29:cd:cd:08:a6:06:fd:37:08:99:7f:c4:51:c2:
67:f0:45:9c:ee:7c:25:a8:60:52:29:4e:a5:18:e1:b6:96:a2:
0d:53:a4:77:bc:ee:ae:82:f5:bc:8b:f8:9b:4b:ed:9c:6c:74:
83:1a:7b:16:b0:ef:84:e6:b5:39:6b:50:df:34:62:b3:26:cb:
6a:16:22:24:3e:2d:7c:dc:af:ac:34:27:f8:0e:9c:9d:18:f6:
d8:09:bc:e4:8b:cd:c3:93:4b:98:84:f6:31:cf:51:ae:dd:03:
12:cf:7e:48:09:2c:df:d9:6e:f1:74:00:43:4f:0e:03:4c:7d:
a0:81:9f:cb:94:99:02:f2:94:aa:e9:e4:e8:a8:b2:f3:c5:5e:
6f:fb:21:55:15:b9:d6:55:72:4a:5b:b4:31:86:6f:89:cb:60:
ab:54:95:50:ce:de:ab:da:01:52:18:02:fd:e6:e5:52:74:47:
7f:8a:64:2e:d9:fb:e6:f7:6c:2b:a4:e0:3a:12:dd:b8:65:04:
4c:c4:25:c7:2a:31:d5:76:7b:b1:9f:c7:d2:a1:09:42:da:f7:
19:21:44:04:08:b7:00:f2:fb:43:cb:8f:fc:ea:fc:7c:6a:f6:
35:b0:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:36 2025 by rpki-client