Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: sq6jN/Vd7pPt4k+EIDsFPW+0Di+Ni1jmI5SiUxEMe8Q=
Subject key identifier: DE:7C:8B:8B:39:6A:88:66:E3:5F:5A:F0:6C:79:52:A1:3B:3B:F9:C5
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019A21ADDE2BB57476BB0EEEEF1929EA0A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 16FF
Signing time: Sun 26 Oct 2025 18:00:33 +0000
Manifest this update: Sun 26 Oct 2025 18:00:33 +0000
Manifest next update: Mon 27 Oct 2025 18:00:33 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: ky1VI9MOsgJyK9mFCCbkIwDuDjt3tqY3ANJU879NBGw=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:de:2b:b5:74:76:bb:0e:ee:ef:19:29:ea:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Oct 26 18:00:33 2025 GMT
Not After : Oct 27 18:00:33 2025 GMT
Subject: CN=de7c8b8b396a8866e35f5af06c7952a13b3bf9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:1e:06:e6:ad:f8:94:f9:18:08:25:e1:7b:
06:dd:4b:99:d9:ba:0e:b3:42:f7:f8:79:1b:66:8a:
2d:30:fc:36:4d:7e:58:73:6a:7f:dd:83:26:59:63:
db:83:5b:ad:54:ec:57:11:e5:88:65:36:cf:25:25:
eb:e2:4b:f6:61:20:f4:75:71:3b:e8:6e:f7:c2:e5:
71:f0:a8:60:f1:59:62:91:2c:55:ee:fd:e6:ab:f5:
85:1e:70:08:71:60:b6:1b:86:39:7e:8c:1d:b5:4d:
8c:6d:96:65:65:83:73:54:64:e8:e0:80:61:12:79:
a5:8b:ab:46:b2:c7:22:0e:76:0c:9d:c7:f6:10:c6:
58:21:df:e1:6b:f7:ed:70:9b:2a:f6:59:87:6b:66:
2b:cc:17:2d:de:54:e3:3e:e3:e9:b1:d5:8f:20:3a:
f6:5c:da:42:4f:5f:c0:6c:23:e8:52:3a:cb:58:a3:
f1:7d:cc:f5:6a:56:10:79:2c:12:b3:07:e8:a9:79:
4b:61:e5:0b:32:8e:3a:65:8e:29:f1:6b:fc:0a:f3:
62:90:fc:54:e4:1a:49:74:0c:c5:7c:b9:aa:3e:ab:
6f:dd:43:d6:cd:ee:62:b0:20:3f:bd:fb:0b:79:f6:
95:2e:06:1d:81:03:c4:79:89:fd:18:50:fb:32:65:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:8B:8B:39:6A:88:66:E3:5F:5A:F0:6C:79:52:A1:3B:3B:F9:C5
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:e8:51:32:7f:ec:08:81:2c:bf:d9:ed:09:6c:58:c5:1e:
c6:ae:7b:88:77:bc:a6:76:c3:cd:19:8d:5d:09:8c:8c:0f:94:
40:cf:3a:ac:5b:df:35:e2:8f:ee:6f:f2:95:c3:af:14:b9:c8:
db:50:a9:44:3d:b7:1b:07:59:e4:79:61:6d:5d:c0:88:8a:d9:
59:27:81:91:f6:da:cb:6d:28:46:77:65:16:87:43:dc:46:bc:
a7:ec:e0:a7:d5:95:89:55:15:e6:fa:b2:d3:30:f5:e4:c0:d1:
92:1d:c9:35:50:55:3e:3f:b4:53:12:8f:d2:0b:48:6f:42:16:
85:7b:f0:9e:f6:9d:7b:93:c2:ae:e3:7b:1c:4e:dc:6e:45:52:
bd:34:97:87:fa:74:8d:2b:36:d9:be:48:fb:75:04:29:1a:0e:
2f:b2:dd:1d:0e:f1:e6:69:9d:8e:f4:7a:5a:9f:86:48:5f:50:
07:80:dc:e3:2a:45:94:8d:74:26:77:aa:2a:5f:b3:ee:77:ae:
a0:a1:04:bb:3a:ae:5b:6c:4f:58:6e:56:66:b7:9e:0e:52:87:
e6:b4:8a:1e:f3:90:3d:db:e0:c3:02:98:f6:20:22:6a:70:c1:
f3:35:a8:76:25:0b:2f:ce:4c:35:77:02:75:72:50:d9:7e:65:
f9:e9:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:30 2025 by rpki-client