Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File: N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier: msonQWFejvCgwhROkl4HhDVWZLka5OW+xUdgVQk3KRs=
Subject key identifier: 69:B9:B6:91:B1:F5:3D:C5:55:3D:92:4F:EF:1D:7C:E1:5F:D5:0D:F3
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 0199FB7CAC8127A9B92245C004B7A4BEBB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number: 05CD
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: 2pKus4eObhStWUEVX5uucCRyppeeVWYCScsbONIHwtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ac:81:27:a9:b9:22:45:c0:04:b7:a4:be:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=69b9b691b1f53dc5553d924fef1d7ce15fd50df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:7f:65:e0:3e:c2:6d:3c:74:79:4c:3d:3c:
47:23:b5:4e:e6:61:10:6b:e8:eb:f6:d4:f6:df:1c:
cb:ab:38:02:10:83:05:ce:a2:a4:a9:cb:a0:d0:43:
f2:6f:3c:45:ed:2a:27:86:cd:47:26:af:a4:de:b3:
84:26:68:4a:47:3f:34:9c:28:84:b0:7a:68:e8:00:
19:98:74:63:29:d8:fb:2f:e5:85:8b:ca:3c:e7:81:
8f:d2:ef:3e:23:55:ba:6b:c9:ec:e3:08:33:ac:0e:
ac:e6:f6:43:e1:e2:1f:af:f4:5d:5f:a3:6f:97:06:
3e:ec:3c:1c:92:f7:59:86:e8:51:fd:83:06:c1:a6:
3c:11:03:7c:d7:ee:c7:cb:7d:e5:6f:86:bf:cc:5d:
57:10:6e:b0:0f:f0:64:77:54:94:f6:78:00:91:97:
50:c5:7a:87:0d:47:1a:55:cb:9c:3e:9e:78:25:65:
4c:a9:e4:dd:81:c1:10:ac:64:bf:85:94:3b:2f:45:
a5:31:2b:22:7a:99:20:3f:13:90:02:85:46:49:d6:
0a:e2:03:bf:4b:33:18:70:e2:44:d1:e5:ac:0f:18:
48:db:c2:07:a4:a1:1a:9b:7d:12:3c:6d:49:fe:5a:
0a:05:05:51:aa:cf:81:d3:19:df:54:69:a9:61:84:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:B6:91:B1:F5:3D:C5:55:3D:92:4F:EF:1D:7C:E1:5F:D5:0D:F3
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:24:28:95:73:45:ca:8b:d8:41:d2:32:bd:55:e4:64:81:e1:
fe:2d:86:29:87:c9:da:43:df:78:28:ac:40:bf:60:76:7a:13:
94:43:a3:4c:77:66:88:4e:03:ee:9a:dd:d2:88:63:6e:88:7c:
43:23:02:5e:d4:5d:0a:56:01:07:3b:5d:80:34:c4:29:27:06:
50:37:3b:f2:09:6e:60:0c:62:37:f2:2c:c7:90:9e:47:e3:b1:
3f:25:c0:e3:50:c6:22:e0:0d:97:bf:c0:29:df:f9:85:5b:64:
2a:9c:fd:85:ba:7a:35:1d:bf:bd:20:29:a3:35:f3:fc:b4:3d:
42:77:72:b6:96:0b:b4:37:75:dd:04:56:d4:b9:04:5c:0b:1d:
41:2f:be:3b:80:04:17:24:97:a1:9b:2b:82:8b:43:d8:c2:99:
ce:18:8e:e2:49:f0:8b:46:b5:11:1c:48:6f:0d:7c:a7:b9:99:
a3:fb:5f:a6:54:44:4e:7d:d4:11:51:68:7a:39:67:6a:0b:b4:
e1:6c:81:65:a2:ce:28:88:5c:84:87:67:81:df:a0:f0:b3:28:
0d:53:5a:1b:90:99:52:0f:0d:64:60:03:2e:15:c6:8a:a7:47:
e9:e5:49:bc:7c:4d:fa:7a:42:4a:45:93:d7:15:f8:fd:34:14:
49:fb:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:40 2025 by rpki-client