Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: 2S5WxYn0LcEMIuvRq8iVUDyFLria5geEoMHWVlZXPf0=
Subject key identifier: 0C:18:C3:19:EE:8C:4F:C1:8F:8A:CF:F3:5A:80:8C:B5:0D:0D:3B:1F
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019787A22FA6E06951BECEEEDA921AF29E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 070F
Signing time: Thu 19 Jun 2025 10:00:42 +0000
Manifest this update: Thu 19 Jun 2025 10:00:42 +0000
Manifest next update: Fri 20 Jun 2025 10:00:42 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: dAXh2G9T9u3Mc4F/USgBWoN7UyAF7CAqTnTHTFrViNM=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:2f:a6:e0:69:51:be:ce:ee:da:92:1a:f2:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jun 19 10:00:42 2025 GMT
Not After : Jun 20 10:00:42 2025 GMT
Subject: CN=0c18c319ee8c4fc18f8acff35a808cb50d0d3b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:91:43:4b:29:73:ab:7a:f6:d3:12:bf:37:
12:11:e0:89:b4:95:91:f9:2b:98:2c:3a:9d:cb:b3:
1f:b4:62:56:43:2e:06:e6:51:5f:98:91:0d:88:44:
df:49:16:7d:f8:0e:8b:2d:4e:39:dd:3e:f1:e9:56:
fd:55:9a:19:9d:35:1e:c6:c3:cf:71:4d:fb:b7:79:
f2:16:7c:9d:55:a0:56:c9:27:7a:f6:ed:b8:0b:31:
0c:93:95:8c:d1:d7:c2:f8:6e:d2:9c:f4:89:2e:a1:
cd:9b:96:11:47:3a:41:25:3a:e1:2b:b6:e9:48:27:
4a:26:7e:dd:a1:91:f6:8d:1e:f9:e2:45:02:e7:40:
05:a2:57:9a:30:70:a6:ee:30:4f:6b:13:41:40:b5:
89:af:f3:5d:01:71:8a:40:97:ff:c3:ab:a7:4c:08:
73:85:b5:b1:fe:a3:56:f8:47:aa:27:d3:71:41:77:
4e:7e:6d:4a:af:fa:5b:11:28:12:ad:3d:a7:7c:fe:
16:ce:a0:40:8a:e0:ce:3e:2f:69:d6:d7:bf:7f:3d:
3d:86:cd:93:ce:c8:de:cf:64:9f:cb:2f:f7:4b:b2:
f9:e3:6c:5e:97:67:06:ef:79:c0:d9:2e:dc:39:65:
5b:15:4a:e8:d0:b1:3c:b5:45:13:54:0a:83:55:a1:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:C3:19:EE:8C:4F:C1:8F:8A:CF:F3:5A:80:8C:B5:0D:0D:3B:1F
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:60:58:d0:9c:80:aa:80:9c:59:6f:d2:55:76:18:51:e2:
3d:23:d0:03:14:c4:0b:57:01:1e:62:5f:6c:8c:49:fc:0a:92:
6f:45:fe:4d:cd:d2:53:c3:0e:06:f2:96:64:a1:fe:1d:3f:6f:
c7:fb:19:41:4a:7d:48:fd:ca:fb:ec:13:69:55:1b:f7:22:be:
3d:10:2c:54:3e:79:9d:5e:65:af:b0:07:d7:97:55:02:10:d6:
80:04:4c:29:c0:a6:05:4d:49:98:73:36:78:e4:61:37:54:8f:
26:03:9a:b7:4b:c3:70:12:93:52:86:67:fc:60:55:66:11:f8:
f1:73:d5:38:ec:f7:2f:ad:b1:cc:ec:22:86:e6:6e:3e:b4:0f:
05:24:93:82:d8:20:da:7d:95:9c:8e:15:de:81:f2:e9:4d:c3:
97:2d:d3:82:93:d3:5a:32:1c:32:eb:f4:08:3b:ac:0e:d5:04:
75:ff:30:c3:1e:93:f5:38:8e:df:69:b1:3a:2e:42:ba:0b:3c:
05:15:d0:68:f3:93:96:1f:41:2c:0e:c8:6e:3b:4f:df:74:77:
f0:14:d8:21:3b:c9:8d:79:f0:d4:ad:a8:f6:6e:ca:03:cb:c1:
b2:48:2e:1a:dd:2e:71:ba:18:16:8a:43:45:e5:c6:46:b2:57:
f7:68:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:25:59 2025 by rpki-client