Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: L51T973bbOZt7ny6EXax4xWDTTwjCC3vEUnMgF/Of00=
Subject key identifier: 98:D6:91:F7:25:41:AC:62:DB:FF:D8:FD:E4:D9:5A:10:3A:26:EB:E8
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 0198960004A8B471365C46AB333EBADD7CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 079B
Signing time: Sun 10 Aug 2025 22:00:40 +0000
Manifest this update: Sun 10 Aug 2025 22:00:40 +0000
Manifest next update: Mon 11 Aug 2025 22:00:40 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: EV0/I4+oLDsAnRq+qBFpYmKChZlk+dOxpRBAJxUpLos=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:04:a8:b4:71:36:5c:46:ab:33:3e:ba:dd:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Aug 10 22:00:40 2025 GMT
Not After : Aug 11 22:00:40 2025 GMT
Subject: CN=98d691f72541ac62dbffd8fde4d95a103a26ebe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:94:fa:93:ef:65:85:a0:a8:e8:75:39:27:
da:ac:1c:48:71:89:75:c2:da:6f:13:09:4e:7b:2d:
df:08:ff:12:70:54:9e:09:5d:5a:25:b0:40:9c:b0:
7a:26:ed:72:ad:b5:aa:5a:9c:ea:91:af:cf:a6:4b:
da:e2:6a:7b:32:b4:d5:ff:48:36:35:cc:c3:41:52:
e2:03:8f:6a:ae:32:3d:bd:48:cd:48:99:50:ff:ef:
22:85:47:3d:a6:a9:e0:e9:ce:78:65:a0:66:2c:ef:
08:9d:50:8f:48:9b:b5:53:2f:7f:31:be:e3:3c:bf:
bc:29:10:39:e1:49:44:9a:e9:0e:e1:1a:28:8e:2d:
f4:16:86:13:c7:e7:7e:7a:4d:a6:04:c8:d2:a0:e6:
7a:5d:8e:a9:45:1b:6c:e0:ed:8d:19:c9:2e:8d:be:
f4:26:24:a8:ed:51:5d:ed:27:fc:ee:7c:ee:b5:7c:
ed:c4:35:e2:93:4b:34:39:74:92:c8:c0:ea:7e:28:
44:78:e2:fc:f0:74:42:76:e5:09:33:68:8a:be:5e:
5e:cd:e4:f5:e4:35:fd:92:54:ca:46:cc:1a:3a:5b:
38:ab:9d:f5:9f:10:f0:af:9c:cf:c7:da:ed:9e:60:
e8:79:f0:6b:55:9d:6e:6b:4e:7b:86:e0:4e:13:ae:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:91:F7:25:41:AC:62:DB:FF:D8:FD:E4:D9:5A:10:3A:26:EB:E8
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8d:c0:67:be:fe:d9:a9:28:8c:cf:b8:c4:b7:ec:27:a4:a1:
66:c7:05:1d:0d:0f:cc:45:3e:7a:82:69:fc:f4:69:ae:6c:0e:
ac:d3:f1:cc:bd:4b:a5:39:20:be:46:c4:3f:69:4a:0e:32:f0:
7f:8e:49:0a:0d:e0:15:74:9f:c8:d8:9f:d6:b6:75:2e:8e:90:
db:e3:35:92:14:cb:ea:f3:96:c5:73:1c:a7:fe:e0:83:2a:37:
51:45:bb:6b:91:ad:e4:1f:cc:92:b8:1e:6e:ee:ce:9f:be:bd:
06:4c:7a:ea:0a:b2:30:e2:bc:98:1b:aa:4b:6c:56:99:17:02:
cc:f7:3d:7e:51:24:91:5c:42:ed:3c:c6:53:33:90:7d:a1:71:
7e:31:28:ee:52:98:32:e6:32:a4:b9:e2:de:e1:11:6d:62:c0:
bd:63:4e:ea:4e:53:d6:1a:83:61:60:fa:86:71:7f:b1:c1:b7:
17:8d:9a:68:28:a0:f5:21:97:e2:70:94:15:a5:55:c4:e4:f0:
82:f4:ce:97:3a:21:41:51:6a:61:f3:4b:c8:ce:0a:12:6b:56:
31:bd:b3:ef:7d:42:95:d7:42:45:ec:e2:fa:86:f2:02:4c:17:
36:0a:c5:37:a3:40:21:c7:73:0f:5a:6b:e1:2f:25:3b:a2:0b:
fb:c3:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:30 2025 by rpki-client