
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File: N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier: v08FEYU54lOM1AdmHHQKwDWg+Y24W3qXdP36wvf1FAA=
Subject key identifier: AC:5A:17:A8:B0:32:DE:29:BF:F3:E9:C7:AF:AF:BA:CF:B4:29:7C:1E
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer: /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial: 01988B104C047D8216C19FB1DD1AFA59A0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number: 0E7F
Signing time: Fri 08 Aug 2025 19:02:37 +0000
Manifest this update: Fri 08 Aug 2025 19:02:37 +0000
Manifest next update: Sat 09 Aug 2025 19:02:37 +0000
Files and hashes: 1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: Rn89gwDI9rY79ZTOezIlZuPEqOF1895fHU+rLpUDV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:4c:04:7d:82:16:c1:9f:b1:dd:1a:fa:59:a0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
Validity
Not Before: Aug 8 19:02:37 2025 GMT
Not After : Aug 9 19:02:37 2025 GMT
Subject: CN=ac5a17a8b032de29bff3e9c7afafbacfb4297c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:6b:59:ba:b4:90:81:4d:f8:a0:27:22:95:
b0:95:20:97:78:09:4f:f1:24:87:2a:bf:26:a1:77:
08:6f:29:7d:64:0d:2b:bd:59:d5:db:be:20:f1:96:
22:2d:76:92:af:ba:db:4d:29:20:9b:40:91:9f:49:
68:19:e5:ca:5a:9c:69:64:11:44:f9:b9:aa:b8:18:
ed:24:ef:c8:27:89:7a:75:2b:a0:40:08:f7:b8:2b:
24:56:0c:e2:9e:8c:c3:9c:32:95:ea:aa:d9:2e:62:
a8:b7:c1:c4:53:78:e7:3a:29:72:b7:b8:80:40:d3:
f2:ba:9a:58:ce:28:54:b9:77:39:22:88:1f:76:ad:
e8:23:c2:59:59:1c:96:2e:7d:90:59:3d:70:81:ec:
3e:15:01:eb:60:c2:d3:d2:52:26:bc:f7:79:98:32:
7c:9f:c3:9e:a2:2a:96:f9:04:a1:94:c9:0d:2c:3e:
85:1d:a0:34:b9:92:ce:49:c6:06:b4:59:4d:40:e0:
05:59:35:3b:b8:f5:11:cf:c1:d4:b0:fc:e3:62:92:
07:16:83:7c:03:ca:2f:6a:87:ec:c6:64:a9:c0:4e:
5f:d5:f8:bb:7f:cb:ef:68:dd:e3:35:b3:45:28:4c:
1c:68:be:01:1c:67:d1:1c:12:7a:16:8b:b4:c9:a2:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:17:A8:B0:32:DE:29:BF:F3:E9:C7:AF:AF:BA:CF:B4:29:7C:1E
X509v3 Authority Key Identifier:
keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:28:19:b8:a6:ff:3b:bf:54:7e:04:d3:57:a7:f9:08:f9:
15:79:1c:3b:dd:68:12:30:df:12:97:ab:8f:be:bf:9a:af:ba:
89:1b:8d:d8:29:3e:dd:61:e9:30:29:92:50:bf:2c:78:6d:1f:
ab:91:10:88:b7:6f:ef:03:3c:47:20:02:10:99:07:1c:03:7d:
61:24:eb:9e:1c:b2:d8:e8:43:f0:fd:82:49:52:d3:ef:62:56:
f5:10:a8:7d:fc:8c:b9:8a:20:22:7f:1e:16:4f:d8:cf:be:7c:
20:c5:b7:bf:4f:b1:7a:68:a2:dd:cc:6b:af:ad:4b:5b:e1:8f:
15:71:cc:f3:73:6b:8e:07:4b:f0:c4:b9:1a:15:e3:6d:51:31:
9d:97:f3:aa:20:5d:13:61:7c:25:db:d2:85:9b:fc:25:58:b0:
2b:f8:c0:9c:a9:0d:25:b1:ec:37:c3:f4:d0:e1:e6:d8:b7:59:
4b:30:e9:22:24:73:5e:66:25:be:4a:a2:c2:51:c3:03:42:cb:
00:59:e0:d7:ef:e2:26:0c:9c:2c:f3:16:ab:b0:a1:56:29:fe:
aa:06:e4:e0:28:5e:fb:f9:29:43:01:53:43:20:2c:10:41:ac:
22:95:21:27:9e:5e:dd:77:e3:31:e8:20:b4:75:a6:12:b7:8b:
af:f6:7a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEEwEfYIWwZ+x3Rr6WaD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njk4YjRmMzdkODA4MWMzNTA1YWRhMGJhYTg1MjIxOTM0
MzQxYmUwHhcNMjUwODA4MTkwMjM3WhcNMjUwODA5MTkwMjM3WjAzMTEwLwYDVQQD
EyhhYzVhMTdhOGIwMzJkZTI5YmZmM2U5YzdhZmFmYmFjZmI0Mjk3YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvFrWbq0kIFN+KAnIpWwlSCXeAlP
8SSHKr8moXcIbyl9ZA0rvVnV274g8ZYiLXaSr7rbTSkgm0CRn0loGeXKWpxpZBFE
+bmquBjtJO/IJ4l6dSugQAj3uCskVgzinozDnDKV6qrZLmKot8HEU3jnOilyt7iA
QNPyuppYzihUuXc5Iogfdq3oI8JZWRyWLn2QWT1wgew+FQHrYMLT0lImvPd5mDJ8
n8OeoiqW+QShlMkNLD6FHaA0uZLOScYGtFlNQOAFWTU7uPURz8HUsPzjYpIHFoN8
A8ovaofsxmSpwE5f1fi7f8vvaN3jNbNFKEwcaL4BHGfRHBJ6Fou0yaKQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxaF6iwMt4pv/Ppx6+vus+0KXweMB8GA1UdIwQY
MBaAFDdpi0832AgcNQWtoLqoUiGTQ0G+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJtTFR6ZllDQncxQmEyZ3VxaFNJWk5EUWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xMGJmM2QtNGViNS00YTEzLTgzYjct
MmJiODFkOTlkNWYxLzEvTjJtTFR6ZllDQncxQmEyZ3VxaFNJWk5EUWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xMGJmM2QtNGViNS00YTEzLTgzYjctMmJiODFkOTlkNWYx
LzEvTjJtTFR6ZllDQncxQmEyZ3VxaFNJWk5EUWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkigoGbim
/zu/VH4E01en+Qj5FXkcO91oEjDfEperj76/mq+6iRuN2Ck+3WHpMCmSUL8seG0f
q5EQiLdv7wM8RyACEJkHHAN9YSTrnhyy2OhD8P2CSVLT72JW9RCoffyMuYogIn8e
Fk/Yz758IMW3v0+xemii3cxrr61LW+GPFXHM83NrjgdL8MS5GhXjbVExnZfzqiBd
E2F8JdvShZv8JViwK/jAnKkNJbHsN8P00OHm2LdZSzDpIiRzXmYlvkqiwlHDA0LL
AFng1+/iJgycLPMWq7ChVin+qgbk4Che+/kpQwFTQyAsEEGsIpUhJ55e3XfjMegg
tHWmEreLr/Z6Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:52 2025 by rpki-client