Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: XvExh1GFOovZLUUjGy3rzEeVJTBWw5vMWAeZvPzodW0=
Subject key identifier: 59:8B:40:84:EE:33:00:05:D9:FF:FC:00:19:ED:3A:C8:AA:82:A4:D7
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 0198D84F758CDE1F97BB4CBAA39F6F77FD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 0100
Signing time: Sat 23 Aug 2025 19:02:22 +0000
Manifest this update: Sat 23 Aug 2025 19:02:22 +0000
Manifest next update: Sun 24 Aug 2025 19:02:22 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: BDIOtSZrn/TL0Q5i5NM5XpJHqGs9foI5/4k46E8l+uQ=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:75:8c:de:1f:97:bb:4c:ba:a3:9f:6f:77:fd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Aug 23 19:02:22 2025 GMT
Not After : Aug 24 19:02:22 2025 GMT
Subject: CN=598b4084ee330005d9fffc0019ed3ac8aa82a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:6f:41:7e:15:e6:65:fe:47:30:79:4c:11:
51:7b:8a:3d:3e:40:2a:ec:bb:55:67:29:9c:96:20:
86:2a:30:d6:ef:3c:76:e8:a7:47:93:5c:99:24:eb:
6b:00:a2:6f:ce:28:a7:f1:5e:f2:92:f9:31:bc:e6:
0f:6e:d6:b6:e3:29:fd:f2:d5:79:69:b0:ce:d1:d0:
68:73:b2:40:9d:2d:33:cd:5a:76:6f:51:d4:5e:52:
b3:bc:f5:d4:1c:6b:51:fd:54:50:d8:67:2e:0a:a2:
74:d7:c0:5f:2c:11:7e:ac:29:92:d1:ff:1f:21:18:
3f:49:3c:39:b8:11:da:bb:90:58:43:a4:02:82:b3:
0e:31:ea:6f:35:8f:cc:5d:86:fe:14:93:83:02:fa:
00:88:a6:46:48:15:ff:c1:0a:df:27:4d:69:ba:58:
77:1e:03:c5:8e:f6:52:c1:8c:8e:e3:1d:ad:27:20:
9d:6f:da:1c:29:f2:60:7c:9e:1a:70:f5:6a:d3:7b:
6e:b3:2f:dc:d2:76:a9:b7:77:ed:41:4c:2a:26:14:
83:a8:05:c7:2d:3a:fe:3a:16:fd:e5:e2:e4:9e:70:
1d:6d:dd:b7:25:ec:35:86:0b:17:12:ea:5b:c2:19:
0e:24:af:a0:3b:22:4f:fe:78:b5:4a:aa:df:ce:86:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:40:84:EE:33:00:05:D9:FF:FC:00:19:ED:3A:C8:AA:82:A4:D7
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:c4:d3:45:49:fe:08:0c:95:50:fc:6a:83:b6:63:f3:47:
44:ca:2e:a6:b1:2c:0d:97:e2:6e:dc:db:8f:d2:32:53:20:62:
8b:39:3c:1b:1f:85:3b:3d:ba:c7:89:e8:0f:2b:de:b5:c8:6c:
08:1a:d7:6a:00:09:bc:f4:65:23:44:86:1a:7d:4d:c4:bd:36:
da:15:d3:de:56:1c:ce:78:6b:db:0d:fb:5f:bb:63:f6:f4:29:
c8:8d:c8:e2:31:70:a9:4d:47:a6:0b:e4:a4:a7:74:be:16:70:
89:2b:53:1c:ef:d4:21:05:ec:4a:a0:85:41:e9:70:db:24:56:
68:d0:ec:57:d4:f8:01:85:d1:8c:aa:19:00:d7:20:d3:ca:e1:
ee:f5:21:5e:56:65:03:1a:89:e4:3e:69:34:28:4f:5d:d2:3a:
fe:9b:a0:5d:3b:f2:3f:5f:a7:dc:3b:66:74:19:98:2b:9e:17:
83:64:a9:03:8f:53:9a:d0:68:97:1b:bc:9c:b8:2f:ef:87:67:
98:63:2a:9d:e9:73:ef:ae:a3:33:aa:4d:21:d3:70:20:f9:1a:
32:dc:59:80:83:9e:8c:ba:89:46:12:4c:a2:8c:a1:9d:4b:24:
ba:28:35:8a:1d:74:41:bf:b5:4e:70:fd:f0:a3:c6:f5:07:9d:
bb:31:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:09 2025 by rpki-client