Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File: N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier: 6Pn2ZRBya7mTo/4pNvMNnKFaDY6nQI+MuOgthWRpa4w=
Subject key identifier: 71:0D:77:F8:1A:15:8A:7E:52:94:81:33:63:7C:86:EE:D6:45:4E:D8
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 0198D4047A8962A2C86FE1AEBC3CDEEB6A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number: 0534
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: qb03kNG93v86HAERXnRlAD3oXUGao+fDneruA5OobRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7a:89:62:a2:c8:6f:e1:ae:bc:3c:de:eb:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=710d77f81a158a7e52948133637c86eed6454ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:88:57:8d:20:a6:8d:9d:6a:ed:f7:93:a9:
36:3a:e5:ea:08:ed:3e:71:6c:ee:f3:e8:af:50:f9:
85:67:e9:70:90:30:f3:4a:f9:57:3a:92:74:90:66:
27:2b:ae:88:af:1d:a6:43:08:c3:59:3c:32:0c:9e:
60:6b:02:7c:99:aa:09:09:be:68:72:28:3e:fd:7b:
b7:ad:ef:3b:76:a6:f0:da:e8:a9:71:2d:c7:50:92:
3d:3e:bf:f4:2c:77:bb:a4:22:fe:b0:25:76:27:78:
03:22:21:50:da:a3:a7:67:ef:02:8c:7a:09:62:f1:
ec:85:8a:44:ba:49:e1:a3:18:7c:10:f5:db:f2:c9:
03:0b:5c:f3:90:0c:56:f0:47:ed:6e:c9:8c:54:a7:
8d:f7:a1:33:33:b1:d4:47:b5:4e:49:95:4e:a3:9c:
f2:7b:a1:09:a1:ac:10:51:ac:6a:29:c1:1f:ac:82:
cd:f1:08:c1:ff:6f:40:20:36:84:55:74:89:db:e6:
30:f3:4e:11:47:9d:92:13:ab:85:61:93:45:99:c5:
e5:48:b5:49:70:66:f6:65:e5:af:de:a5:04:7e:f2:
31:82:58:30:ae:02:4c:10:1c:c8:42:3c:48:e1:1d:
1e:98:ff:34:c2:42:b4:64:3e:a3:07:af:82:36:c9:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:77:F8:1A:15:8A:7E:52:94:81:33:63:7C:86:EE:D6:45:4E:D8
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:25:5d:20:78:36:ec:ff:91:b1:73:d4:a0:54:32:56:10:
c7:4c:91:ad:19:6f:05:43:b5:c3:d8:a2:36:7a:75:64:ee:27:
ed:f5:9b:7c:f5:8d:55:ad:55:7a:65:35:de:85:4d:ed:0c:7e:
ae:a0:85:46:10:e1:66:e7:10:a2:3c:4a:5a:cd:0a:b8:3e:14:
c5:63:65:ff:85:c9:79:1b:88:d6:9f:30:02:09:56:af:a4:75:
75:9d:d7:f3:0a:42:c7:2f:25:4b:0b:06:a7:64:37:d0:f8:3e:
44:1e:ab:10:2e:60:bb:f4:fb:d3:66:d9:f6:99:d1:b0:26:53:
7c:f8:96:7c:8d:61:8d:99:90:3e:0e:31:5d:67:29:67:a6:22:
f9:62:04:32:3c:8d:be:33:96:14:b2:ac:00:b4:e6:68:f0:eb:
27:d7:5d:15:7e:c2:7e:59:0c:a1:75:50:2a:5d:b4:11:f7:76:
7b:87:35:01:bd:d9:f5:0e:10:15:d4:55:a7:06:5a:e7:a8:72:
62:36:1a:90:a3:56:72:fa:39:d1:28:68:59:ae:8c:49:60:c3:
50:f8:60:d9:cc:d5:91:a7:8f:87:a0:8d:9c:ed:32:df:05:30:
6c:dc:7b:dd:0d:73:0d:ff:66:6c:9e:05:23:9b:48:c8:08:2e:
a8:38:02:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBHqJYqLIb+GuvDze62oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGQ3NDk4ZTdkOWUyYTFiYTE0OTEzMjM0MTZhOWQ5NWYw
ZTlkOWEwHhcNMjUwODIyMjMwMTU5WhcNMjUwODIzMjMwMTU5WjAzMTEwLwYDVQQD
Eyg3MTBkNzdmODFhMTU4YTdlNTI5NDgxMzM2MzdjODZlZWQ2NDU0ZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJaIV40gpo2dau33k6k2OuXqCO0+
cWzu8+ivUPmFZ+lwkDDzSvlXOpJ0kGYnK66Irx2mQwjDWTwyDJ5gawJ8maoJCb5o
cig+/Xu3re87dqbw2uipcS3HUJI9Pr/0LHe7pCL+sCV2J3gDIiFQ2qOnZ+8CjHoJ
YvHshYpEuknhoxh8EPXb8skDC1zzkAxW8EftbsmMVKeN96EzM7HUR7VOSZVOo5zy
e6EJoawQUaxqKcEfrILN8QjB/29AIDaEVXSJ2+Yw804RR52SE6uFYZNFmcXlSLVJ
cGb2ZeWv3qUEfvIxglgwrgJMEBzIQjxI4R0emP80wkK0ZD6jB6+CNsl4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHENd/gaFYp+UpSBM2N8hu7WRU7YMB8GA1UdIwQY
MBaAFDeNdJjn2eKhuhSRMjQWqdlfDp2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NDM5MTktZDQwOS00MGU5LWIwYzIt
NzViOGFlNjA0ZTU2LzEvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NDM5MTktZDQwOS00MGU5LWIwYzItNzViOGFlNjA0ZTU2
LzEvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvUlXSB4
Nuz/kbFz1KBUMlYQx0yRrRlvBUO1w9iiNnp1ZO4n7fWbfPWNVa1VemU13oVN7Qx+
rqCFRhDhZucQojxKWs0KuD4UxWNl/4XJeRuI1p8wAglWr6R1dZ3X8wpCxy8lSwsG
p2Q30Pg+RB6rEC5gu/T702bZ9pnRsCZTfPiWfI1hjZmQPg4xXWcpZ6Yi+WIEMjyN
vjOWFLKsALTmaPDrJ9ddFX7CflkMoXVQKl20Efd2e4c1Ab3Z9Q4QFdRVpwZa56hy
YjYakKNWcvo50ShoWa6MSWDDUPhg2czVkaePh6CNnO0y3wUwbNx73Q1zDf9mbJ4F
I5tIyAguqDgCFA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:06 2025 by rpki-client