Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File: N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier: FTkL/p/Es5CVg2hq+kzRzhTD3xgb1zPUvEpm2VxfK+w=
Subject key identifier: 7C:9F:06:E5:A8:E7:10:AF:FE:CE:EA:8B:33:5D:9A:C6:57:A5:19:CE
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 019656B84000309F06E76E799644AE276D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number: 03EA
Signing time: Mon 21 Apr 2025 05:00:37 +0000
Manifest this update: Mon 21 Apr 2025 05:00:37 +0000
Manifest next update: Tue 22 Apr 2025 05:00:37 +0000
Files and hashes: 1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: 6l0aszma5IX9DJEuxW9GbNxm2LSGpksU9ahZAsT7qsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:40:00:30:9f:06:e7:6e:79:96:44:ae:27:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Apr 21 05:00:37 2025 GMT
Not After : Apr 22 05:00:37 2025 GMT
Subject: CN=7c9f06e5a8e710affeceea8b335d9ac657a519ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:96:aa:9d:7a:34:58:83:48:cb:90:ee:24:
9c:f1:e6:9d:e1:1b:91:6c:fc:c2:d6:79:b8:64:2a:
26:f7:c6:44:48:78:c5:42:94:c0:49:27:d3:c7:ed:
c8:08:78:36:ac:09:21:64:7a:4c:80:4f:35:60:60:
35:a2:28:1d:ac:a4:a1:38:0d:41:7a:6e:30:62:43:
e9:a8:2c:53:f8:c1:a7:b0:f8:d8:bf:14:b5:2c:b6:
dc:f2:51:f7:32:86:5b:ce:5e:98:2f:22:dc:1d:14:
25:0e:ba:d5:96:0f:f0:f5:ab:77:aa:ff:0c:9a:7b:
c7:62:00:16:66:8f:71:db:a9:05:2b:8a:3b:d5:76:
d6:f4:31:72:24:39:0e:f5:91:ea:b1:9e:14:8f:c8:
25:22:4e:4d:05:df:03:cb:25:cf:c6:38:ee:de:17:
dd:cd:ec:cf:e0:4e:9a:a0:7d:0f:74:6b:10:04:8c:
82:f6:41:ca:42:2a:1a:ce:a8:fe:4d:dc:72:e5:66:
f9:0a:5f:be:cf:a2:ea:d2:a7:c0:bb:f5:63:bc:b2:
61:8b:02:df:3e:b0:3b:34:fc:15:1f:13:e2:d9:77:
e2:23:e2:ab:18:06:94:b5:f3:f4:40:48:76:ef:4e:
a4:d0:66:8e:aa:6f:ad:b9:d2:1a:4d:eb:4a:9e:33:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:06:E5:A8:E7:10:AF:FE:CE:EA:8B:33:5D:9A:C6:57:A5:19:CE
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9d:ef:08:99:b3:79:61:b7:5e:5e:bd:8f:88:5e:2a:e1:6f:
21:07:d9:53:06:95:b6:b0:dd:30:e4:b9:e2:43:04:b4:a8:72:
dc:3d:ef:30:31:39:06:a3:fa:ad:b0:32:a3:13:68:a3:87:ff:
1d:25:11:79:3e:6a:e8:12:ec:0c:55:a8:b2:ed:0a:26:cc:cf:
77:67:3a:c3:d2:7d:87:2e:c7:81:22:20:aa:6d:7f:31:6d:fe:
9b:11:72:52:ac:d2:55:38:7c:80:b2:76:13:9c:91:6d:95:96:
3c:16:b8:cf:eb:28:82:33:01:9d:60:90:0c:3d:6b:ad:88:aa:
a0:1f:ee:0f:02:13:f1:f1:0c:7e:19:6a:92:34:c2:d7:2d:5b:
e2:ab:56:4c:7e:96:04:22:bc:b6:70:89:e6:57:25:b0:07:b9:
99:49:1a:0b:2d:99:d2:bd:f3:0b:30:f4:b6:e1:52:35:e8:3f:
9e:86:8f:aa:e3:6d:92:e9:da:73:ae:40:f7:1a:08:a7:1e:e7:
a5:6e:84:19:2b:c8:4e:5e:34:5a:90:e5:e2:14:cc:a7:a1:00:
0b:62:09:ec:77:6e:e5:f9:96:14:2c:cb:72:8e:17:9d:df:35:
05:ad:90:bc:27:33:18:8c:cf:53:8e:8f:54:27:98:3e:83:cf:
93:08:c8:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWuEAAMJ8G5255lkSuJ21ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGQ3NDk4ZTdkOWUyYTFiYTE0OTEzMjM0MTZhOWQ5NWYw
ZTlkOWEwHhcNMjUwNDIxMDUwMDM3WhcNMjUwNDIyMDUwMDM3WjAzMTEwLwYDVQQD
Eyg3YzlmMDZlNWE4ZTcxMGFmZmVjZWVhOGIzMzVkOWFjNjU3YTUxOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfqWqp16NFiDSMuQ7iSc8ead4RuR
bPzC1nm4ZCom98ZESHjFQpTASSfTx+3ICHg2rAkhZHpMgE81YGA1oigdrKShOA1B
em4wYkPpqCxT+MGnsPjYvxS1LLbc8lH3MoZbzl6YLyLcHRQlDrrVlg/w9at3qv8M
mnvHYgAWZo9x26kFK4o71XbW9DFyJDkO9ZHqsZ4Uj8glIk5NBd8DyyXPxjju3hfd
zezP4E6aoH0PdGsQBIyC9kHKQioazqj+Tdxy5Wb5Cl++z6Lq0qfAu/VjvLJhiwLf
PrA7NPwVHxPi2XfiI+KrGAaUtfP0QEh2706k0GaOqm+tudIaTetKnjMOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyfBuWo5xCv/s7qizNdmsZXpRnOMB8GA1UdIwQY
MBaAFDeNdJjn2eKhuhSRMjQWqdlfDp2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NDM5MTktZDQwOS00MGU5LWIwYzIt
NzViOGFlNjA0ZTU2LzEvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NDM5MTktZDQwOS00MGU5LWIwYzItNzViOGFlNjA0ZTU2
LzEvTjQxMG1PZlo0cUc2RkpFeU5CYXAyVjhPblpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp3vCJmz
eWG3Xl69j4heKuFvIQfZUwaVtrDdMOS54kMEtKhy3D3vMDE5BqP6rbAyoxNoo4f/
HSUReT5q6BLsDFWosu0KJszPd2c6w9J9hy7HgSIgqm1/MW3+mxFyUqzSVTh8gLJ2
E5yRbZWWPBa4z+sogjMBnWCQDD1rrYiqoB/uDwIT8fEMfhlqkjTC1y1b4qtWTH6W
BCK8tnCJ5lclsAe5mUkaCy2Z0r3zCzD0tuFSNeg/noaPquNtkunac65A9xoIpx7n
pW6EGSvITl40WpDl4hTMp6EAC2IJ7Hdu5fmWFCzLco4Xnd81Ba2QvCczGIzPU46P
VCeYPoPPkwjIsg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:28 2025 by rpki-client