Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: 5nWL7jGx2FPtuYDsJLK1i2rmraaNmfhU8LReAhdCjlA=
Subject key identifier: E6:55:5E:94:78:2F:D0:64:BB:F9:96:68:AE:58:7B:9F:72:9E:E9:7B
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0197499F6B1E135BA2ECB348EFCA59D582EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 09:01:13 +0000
Manifest this update: Sat 07 Jun 2025 09:01:13 +0000
Manifest next update: Sun 08 Jun 2025 09:01:13 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: n9eLHhQ1Lqac0i1nrkBllGUUMf1w9NnPnEE7FbG4glc=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:6b:1e:13:5b:a2:ec:b3:48:ef:ca:59:d5:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jun 7 09:01:13 2025 GMT
Not After : Jun 8 09:01:13 2025 GMT
Subject: CN=e6555e94782fd064bbf99668ae587b9f729ee97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:97:ee:66:67:98:d7:0b:89:9e:24:de:1c:
a2:e2:b8:bd:c7:45:30:32:c9:9b:b6:92:14:24:30:
31:b6:54:c8:c2:8b:40:63:56:1b:19:4c:d5:1d:4e:
4e:0d:2b:17:2c:97:45:14:fa:6d:3e:9e:7a:2f:ca:
52:fc:5a:80:9d:c0:8b:2a:76:81:cd:05:37:65:cb:
c8:00:0a:40:10:be:a3:8e:ab:3d:fd:69:82:33:93:
3c:cb:36:b6:53:b4:cb:b8:d6:94:b4:bf:0d:b2:ce:
fb:f2:1b:af:23:b3:85:43:a1:b0:49:55:47:bf:38:
06:0d:7b:bb:67:60:8b:1f:63:7d:9b:b1:6e:47:89:
9b:c5:04:5c:67:5d:2e:e5:03:d5:c8:ad:c9:79:26:
73:f3:61:a7:ad:07:69:c7:e7:f4:12:41:34:6e:4c:
6a:e6:4f:3b:f4:0b:c6:93:7b:12:36:10:6f:d7:0a:
46:2f:6f:8e:84:4f:93:df:7f:8d:c7:5e:aa:9f:28:
09:81:28:0d:bb:2a:2d:91:a0:db:f5:05:3c:73:8d:
11:f6:15:dd:e0:4a:76:d1:b0:83:f7:c6:f8:d2:6e:
cf:53:3a:27:42:cd:7c:00:43:87:e0:a0:c1:c2:7d:
28:4f:58:ed:c0:c7:a5:8a:65:af:8e:6a:dc:30:45:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:5E:94:78:2F:D0:64:BB:F9:96:68:AE:58:7B:9F:72:9E:E9:7B
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:89:e7:67:31:02:ac:41:b9:79:ac:eb:c3:44:be:d2:fe:51:
87:85:1c:56:1e:74:ff:ca:07:9c:12:a2:32:8c:63:83:f7:6c:
26:7c:f2:4f:49:01:f2:e3:b8:a7:65:e2:03:cc:9f:6d:bc:53:
21:ad:d1:ee:c4:8c:17:86:14:1c:21:63:80:94:32:4b:03:a1:
29:2e:be:d2:7e:3b:eb:28:80:33:1b:85:be:32:a2:64:20:74:
9b:3a:52:98:cb:01:ff:b2:2b:14:92:91:e7:43:06:c7:a2:96:
98:62:b4:3d:56:cf:50:00:0f:b6:8b:b8:aa:98:40:87:ab:f6:
e4:bd:16:74:f0:e0:b1:33:63:12:fa:a8:92:96:30:ed:b0:23:
8f:20:09:42:4c:2f:b0:3d:33:75:de:bc:3b:17:6b:82:c0:22:
f0:d0:8e:87:ae:3e:cd:c3:b7:f3:39:d4:53:95:32:6f:ae:be:
77:a3:38:20:22:a7:eb:87:74:9b:13:8e:fc:0b:f4:b2:74:b3:
98:7b:27:1b:dc:f3:a3:40:ef:12:12:15:9c:9e:56:95:db:69:
c9:9a:72:ce:a5:17:d3:da:a5:73:0b:cf:8f:c2:be:52:f8:1f:
4d:69:1b:66:66:a9:03:9d:a2:c0:62:f1:aa:11:d6:dd:af:88:
c2:4c:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:59 2025 by rpki-client