Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: t2cXAKYtlObE95wevjb3LuqH2Lhm7wj2ei8HJRvKhwI=
Subject key identifier: 05:92:CD:B0:4C:4A:E6:1B:0C:FB:40:EE:95:5F:A5:5B:5C:5D:9A:91
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 01975F13EF7CBF952508C9A24F39593D48A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 06FA
Signing time: Wed 11 Jun 2025 13:00:31 +0000
Manifest this update: Wed 11 Jun 2025 13:00:31 +0000
Manifest next update: Thu 12 Jun 2025 13:00:31 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: ZCxos70RfwdpuBxMBZWlAH5Q5v/SSHt2Pa5vSUO7ZqQ=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:13:ef:7c:bf:95:25:08:c9:a2:4f:39:59:3d:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jun 11 13:00:31 2025 GMT
Not After : Jun 12 13:00:31 2025 GMT
Subject: CN=0592cdb04c4ae61b0cfb40ee955fa55b5c5d9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:74:eb:85:72:b9:66:12:de:e9:67:e0:a4:
3a:7c:4e:d1:8d:e1:b3:ef:b0:98:fc:ea:f8:86:d1:
89:4c:92:77:b1:04:5c:c4:2c:83:27:30:b0:6f:8c:
db:7a:d3:87:ad:88:95:30:22:b9:de:80:3a:a7:76:
43:42:58:bf:1e:d0:91:13:75:8d:44:36:41:21:ad:
a4:98:0b:87:32:14:8e:a4:ae:2f:45:20:b5:fe:cc:
4f:7d:38:1a:3d:14:c7:13:df:43:03:4e:65:a8:e3:
6c:f5:43:dc:4c:d8:33:0f:9d:af:fc:2c:96:d2:cf:
48:23:4e:92:07:95:17:fa:63:25:4a:77:df:ac:45:
63:a0:a7:46:f5:66:6e:f7:8b:3a:51:0a:cd:ad:7d:
f1:f9:ef:9d:c2:bf:b6:82:20:74:75:b2:fe:d2:b6:
b1:aa:c6:0b:d8:4a:ec:b1:35:ed:9e:de:5a:3e:01:
e6:d5:9c:6d:6a:9f:4e:9f:a7:20:ac:b7:62:06:32:
47:b8:c3:b5:c0:e8:ed:21:e3:fa:fa:e2:b9:d2:c6:
a8:46:bf:e0:c3:98:99:20:c7:47:d4:bb:7c:01:1c:
e7:75:a7:a5:7c:8b:6f:5a:83:7c:9e:16:1b:50:63:
ee:99:e3:e5:be:06:b0:85:c1:14:e9:a9:a7:b6:a7:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:CD:B0:4C:4A:E6:1B:0C:FB:40:EE:95:5F:A5:5B:5C:5D:9A:91
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:1f:1d:fc:47:6b:ae:ac:90:7b:14:b1:3e:f9:4e:7b:b8:
9b:2b:8f:83:33:52:f1:b4:12:7a:61:2f:69:d8:90:1c:6b:cd:
d6:1f:d7:1c:14:71:9f:3e:25:7a:26:7f:ec:70:d0:55:ca:a6:
4c:2c:2d:a2:85:e2:9e:32:44:a2:53:89:57:5b:df:94:ec:04:
9f:ba:76:57:96:58:d2:07:8f:d4:58:17:13:f4:8e:83:73:6a:
ed:04:49:9d:7b:f5:43:2d:7d:99:42:ca:05:bc:2f:06:1d:ff:
1f:73:75:b6:97:b5:55:0f:0a:11:0b:8b:53:06:90:37:3b:39:
61:f5:d0:01:73:cc:52:e0:53:d7:5a:be:45:47:08:13:4d:ac:
83:46:2a:0d:5e:a0:77:4a:de:98:fc:85:0e:0b:75:c9:25:44:
c3:0b:1a:f5:02:0f:22:06:dc:1b:12:0e:b4:5c:c0:fc:b8:ac:
d0:86:a1:d9:54:55:f6:17:5c:30:d4:17:4b:b5:cd:f5:a3:56:
4c:bd:7a:84:2a:b7:75:d7:10:70:f1:6c:9f:19:d7:f1:f4:71:
ac:c1:1c:08:56:7d:46:a6:cb:4a:f3:75:1f:8a:81:fd:c0:a7:
94:68:85:32:45:ab:68:28:77:b3:19:e6:f9:fb:4c:76:df:f4:
3e:b2:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:28:46 2025 by rpki-client