Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File: N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier: GBo0+GKOHSrwyKpNzTq54meSbekJUl8qwhEjEzwXjiI=
Subject key identifier: 8E:28:B8:07:AC:3B:E9:4D:2F:78:51:21:B6:EF:9A:38:17:66:5F:80
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 019A7149DD13D333E7FF7858B42670A510AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: SvT9gshokoZou2Gf9pQDR8l6plFjH296rX+RUO1cpmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dd:13:d3:33:e7:ff:78:58:b4:26:70:a5:10:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=8e28b807ac3be94d2f785121b6ef9a3817665f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:a5:24:ab:eb:68:6b:59:dd:59:ed:8e:01:
cf:fe:5f:1b:dc:62:46:54:e7:63:ac:5c:d0:0f:af:
13:5e:8d:da:5b:bb:2e:dd:53:8e:44:97:e5:65:c4:
e1:16:77:e0:7a:dd:4b:73:79:d0:fe:08:e0:56:3e:
d7:33:66:7e:9d:4e:f1:9a:1a:8d:f5:ff:6c:60:2f:
dc:ac:c1:44:86:4e:af:5d:ff:dc:0d:93:46:41:da:
92:54:48:75:1a:a5:6b:2b:3a:ed:ec:60:44:78:df:
11:be:2f:a4:7e:db:50:26:07:33:1f:cd:a1:5c:4a:
a8:d8:15:63:c5:03:48:4c:4a:c8:f5:52:15:53:2f:
d1:87:d6:df:77:f1:90:03:bf:b1:cc:5b:ec:6d:a8:
9e:70:1d:31:8d:21:e8:d8:ac:c8:3a:18:d9:29:ce:
7c:45:8e:4f:e9:4e:19:87:23:cf:9b:48:10:16:c1:
34:07:99:dd:e7:5a:d3:ed:58:cb:25:73:97:ed:f2:
b8:16:06:e9:b3:22:85:30:10:da:a5:02:83:be:41:
d1:a6:6b:3b:9a:ba:48:b1:61:28:45:e7:92:87:ca:
ec:9d:f4:f1:15:57:f7:00:6e:d9:e3:df:9e:c6:76:
bc:09:6d:9d:94:1e:90:52:00:95:d9:5e:fb:16:9b:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:B8:07:AC:3B:E9:4D:2F:78:51:21:B6:EF:9A:38:17:66:5F:80
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c3:f5:7c:95:77:0d:d8:38:64:c4:b7:a4:5f:72:13:39:7d:
bf:ad:ac:8b:b0:91:69:b5:ed:1d:86:7c:dc:cf:38:fa:1a:56:
e7:74:bf:15:cf:cc:09:78:03:17:1a:1f:a8:ef:ce:d2:9f:17:
56:b4:99:f5:1e:1d:2e:ee:1d:f9:80:12:98:72:be:40:7a:48:
88:40:02:5a:da:1c:ef:7b:4f:da:82:0a:3b:8a:78:77:5d:00:
21:25:bf:f5:e8:60:1b:28:0b:7d:c2:6a:24:21:76:80:0f:b7:
3d:67:1a:8c:60:93:80:93:23:9b:b8:08:aa:9a:a2:e0:42:71:
2a:9c:a1:13:e5:8a:b3:c5:f2:9c:a0:07:d0:82:09:d0:08:24:
59:94:c4:11:e4:56:18:e4:0a:9a:fc:d3:66:09:81:0e:98:cd:
b6:b5:b8:d5:52:82:fc:d9:f3:5c:c8:d0:f5:a6:48:79:51:38:
29:d0:02:c0:84:2f:76:e6:35:ce:9b:b7:47:0b:a4:b5:fe:48:
09:31:89:70:15:0b:e7:1a:ec:18:74:92:ea:29:ff:4d:a8:6c:
b1:4f:c8:64:0a:cd:c5:0a:d2:6a:8f:9c:4c:6e:be:1a:eb:05:
41:85:b3:ef:65:ab:87:26:4a:03:d8:7b:68:56:83:b2:4d:22:
77:c9:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:15 2025 by rpki-client