Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: DYpUZOzInhE3nqJ1SwweOWIRjFNYz63klf5pukKpbCM=
Subject key identifier: 66:2F:57:9C:CE:B7:28:1A:70:20:A8:36:EC:45:EF:A4:F2:56:49:5A
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 0198526826F81EDEA96D201683C0C0E75189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0778
Signing time: Mon 28 Jul 2025 19:00:14 +0000
Manifest this update: Mon 28 Jul 2025 19:00:14 +0000
Manifest next update: Tue 29 Jul 2025 19:00:14 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: XQhCxS3+XMC3lcjAo3jRFuuE+OcQHDEQrpjAQghobPo=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:26:f8:1e:de:a9:6d:20:16:83:c0:c0:e7:51:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jul 28 19:00:14 2025 GMT
Not After : Jul 29 19:00:14 2025 GMT
Subject: CN=662f579cceb7281a7020a836ec45efa4f256495a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:b6:3c:cf:dd:0e:7e:48:9e:6d:10:33:e8:
c1:1b:c7:76:52:35:f2:3c:fc:61:46:60:49:0c:81:
c5:df:4a:72:56:44:bc:8f:35:65:79:f1:04:56:6b:
01:82:f8:48:35:72:38:2f:21:bc:b2:a4:30:69:33:
6f:d5:82:5c:54:f5:5f:57:60:37:a1:3c:d1:6e:8a:
f4:6c:4a:13:b7:45:6c:46:26:ff:ff:de:f0:40:2f:
0d:07:79:eb:db:7d:c7:d0:ca:71:6f:b2:02:b0:44:
0a:a1:cb:86:b3:1d:0c:d5:c3:d9:52:93:39:a7:59:
b7:81:41:07:b1:45:34:32:1b:de:5f:da:c1:d0:2e:
68:1e:b6:67:13:0a:48:e9:52:16:39:76:d5:66:61:
26:71:82:36:7b:d2:17:90:2a:ea:5d:97:70:82:c5:
47:c7:9e:15:ea:34:1c:e4:6f:f4:67:70:f5:61:c3:
d5:c0:87:d8:3d:eb:cd:35:16:d3:11:94:5b:7f:a2:
79:c5:91:c7:20:ac:94:75:d9:59:59:3f:57:d5:5e:
1f:b5:c0:4d:a4:0a:1d:67:44:e3:c6:d2:88:aa:a9:
c7:5c:5d:a4:59:7a:8f:40:d6:94:07:f1:67:5f:5d:
29:2e:6d:21:77:48:29:cb:9b:97:71:c4:fc:2c:37:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2F:57:9C:CE:B7:28:1A:70:20:A8:36:EC:45:EF:A4:F2:56:49:5A
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:7b:ef:fd:3b:8e:99:e4:68:79:46:c9:54:8f:77:27:5b:
6e:aa:0b:dc:7d:83:95:44:30:14:09:a7:91:3c:ad:18:db:81:
b2:8a:33:9d:de:74:e1:cb:2d:d3:74:dc:ad:4d:00:b9:0a:20:
ca:7a:32:c3:52:cb:19:83:69:2a:f7:7c:7e:2d:ba:3c:5e:3c:
ae:b2:68:aa:56:4f:f8:f1:19:89:a0:c8:d8:6d:af:38:3f:bc:
ad:d4:4b:29:f7:6b:83:c9:17:08:a0:b8:42:25:35:73:f2:ec:
61:5b:25:93:67:e5:f4:a2:67:84:b5:d3:e6:1c:34:22:9b:27:
81:8e:ae:68:e5:78:a1:da:60:4f:6c:86:21:7b:96:22:e7:12:
6b:55:9f:72:3f:82:91:22:d7:5c:19:3c:e1:68:e7:9c:80:63:
3b:87:6f:9f:a2:c6:86:77:a3:b1:32:6f:69:ff:89:f8:df:32:
8a:55:a8:5a:50:75:c0:ce:3c:2d:a4:1a:9b:4f:5c:b3:27:14:
d8:e5:fa:b6:de:c3:00:8d:34:a5:e9:c9:53:12:59:4c:f4:a6:
14:e0:2f:8a:00:69:e1:ce:78:15:ce:9e:e7:d3:42:7f:7b:cc:
63:c4:77:59:74:fa:27:a6:91:36:4c:3e:38:76:65:05:c8:40:
95:f9:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:08:28 2025 by rpki-client