Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: +ALgLDOcOkbWLXUWlqf46so1Ie5n7S8N2uS/flUk4p0=
Subject key identifier: C5:C9:A7:75:07:9F:70:83:1B:5F:9C:E3:F1:22:17:63:71:2E:4F:BC
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01987E65C05D4FF5E5B455D68D6D98386638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 02E4
Signing time: Wed 06 Aug 2025 08:00:54 +0000
Manifest this update: Wed 06 Aug 2025 08:00:54 +0000
Manifest next update: Thu 07 Aug 2025 08:00:54 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: 9D9O0EDONXAtYdW2Zi+0iI/SN7e6flR6Nxb3cKUnaps=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:c0:5d:4f:f5:e5:b4:55:d6:8d:6d:98:38:66:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Aug 6 08:00:54 2025 GMT
Not After : Aug 7 08:00:54 2025 GMT
Subject: CN=c5c9a775079f70831b5f9ce3f1221763712e4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:7f:e4:b9:24:1c:54:f5:cf:bc:2f:e0:61:
6e:a2:c3:d6:37:0d:a7:09:0d:12:ec:ef:78:b4:e9:
62:c5:c0:4d:9a:c7:39:85:7a:6d:ec:41:59:93:59:
d0:6d:e7:f6:17:9c:89:83:16:dd:1f:59:b8:fa:1c:
c4:3e:6f:76:c0:0f:3a:8c:83:90:4a:81:a8:d6:6b:
ac:35:6b:24:fd:41:a6:e6:24:8c:9c:96:f0:36:1e:
fe:f4:13:51:64:9e:dc:48:23:eb:ec:a6:f2:06:68:
82:03:b3:03:b2:cc:f9:46:cb:04:18:08:18:a6:b8:
dd:d7:a6:34:20:53:4d:ca:d3:a1:98:cf:44:55:c9:
3f:12:67:24:98:8d:04:53:07:17:4a:b0:dc:f0:ee:
0c:23:43:35:e0:88:5d:d9:e1:51:7d:6f:74:41:e2:
93:5c:e8:26:48:33:f1:05:5b:19:99:4f:6c:8b:76:
50:31:44:bc:84:e7:4d:6d:38:39:e6:67:c0:e7:f9:
1a:6c:08:33:41:7d:93:d5:1d:77:8b:51:bd:05:18:
28:de:01:e6:e8:5b:52:81:7d:50:da:6c:65:eb:fc:
ae:42:8b:0b:fa:bb:20:eb:38:78:b1:89:26:8c:a1:
3a:ab:a4:14:fa:44:11:db:11:5c:97:1b:0f:6e:0c:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:A7:75:07:9F:70:83:1B:5F:9C:E3:F1:22:17:63:71:2E:4F:BC
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:c9:1e:a0:c3:15:ec:e3:79:57:96:c9:95:93:87:75:5e:
79:8e:5d:1d:59:98:36:77:31:4e:e7:26:b9:2d:63:04:4b:bc:
79:41:cf:3b:78:60:32:6a:74:02:f7:63:e3:18:48:f6:78:75:
8f:69:fc:b0:7e:75:57:c0:36:64:c4:74:59:8c:07:05:88:8d:
f4:59:30:a0:d1:14:50:fc:22:18:cb:1a:ab:5f:05:16:1e:20:
ed:cb:48:01:30:8d:7b:4b:b8:6d:fb:03:14:d3:f1:c7:e3:f8:
e7:a8:09:3d:88:fe:35:4b:3f:09:3c:9b:71:af:00:22:fe:5f:
02:2b:e0:bd:56:2c:f7:8f:e8:07:66:07:92:84:73:2d:95:4b:
2d:d0:e6:f9:47:30:1d:0b:cb:37:ee:7d:06:7a:87:a3:c7:fe:
4a:9f:17:6c:88:f1:2a:8a:2b:27:73:d8:bf:4b:26:63:a9:31:
8e:03:ba:42:41:19:6f:95:58:17:c6:e9:5e:84:8c:60:28:d8:
ab:cd:04:05:61:05:28:bc:51:49:d9:71:cf:e1:d4:2f:b1:5c:
f5:e8:92:88:aa:2b:47:19:04:42:d9:75:fe:78:fe:ca:93:ea:
2e:a0:d1:92:92:8b:11:b3:42:93:f2:73:15:fe:69:0f:ce:e0:
5f:c8:79:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZcBdT/XltFXWjW2YOGY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm
OTRkY2EwHhcNMjUwODA2MDgwMDU0WhcNMjUwODA3MDgwMDU0WjAzMTEwLwYDVQQD
EyhjNWM5YTc3NTA3OWY3MDgzMWI1ZjljZTNmMTIyMTc2MzcxMmU0ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yh/5LkkHFT1z7wv4GFuosPWNw2n
CQ0S7O94tOlixcBNmsc5hXpt7EFZk1nQbef2F5yJgxbdH1m4+hzEPm92wA86jIOQ
SoGo1musNWsk/UGm5iSMnJbwNh7+9BNRZJ7cSCPr7KbyBmiCA7MDssz5RssEGAgY
prjd16Y0IFNNytOhmM9EVck/EmckmI0EUwcXSrDc8O4MI0M14Ihd2eFRfW90QeKT
XOgmSDPxBVsZmU9si3ZQMUS8hOdNbTg55mfA5/kabAgzQX2T1R13i1G9BRgo3gHm
6FtSgX1Q2mxl6/yuQosL+rsg6zh4sYkmjKE6q6QU+kQR2xFclxsPbgznHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXJp3UHn3CDG1+c4/EiF2NxLk+8MB8GA1UdIwQY
MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt
NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll
LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgfJHqDD
FezjeVeWyZWTh3VeeY5dHVmYNncxTucmuS1jBEu8eUHPO3hgMmp0Avdj4xhI9nh1
j2n8sH51V8A2ZMR0WYwHBYiN9FkwoNEUUPwiGMsaq18FFh4g7ctIATCNe0u4bfsD
FNPxx+P456gJPYj+NUs/CTybca8AIv5fAivgvVYs94/oB2YHkoRzLZVLLdDm+Ucw
HQvLN+59BnqHo8f+Sp8XbIjxKoorJ3PYv0smY6kxjgO6QkEZb5VYF8bpXoSMYCjY
q80EBWEFKLxRSdlxz+HUL7Fc9eiSiKorRxkEQtl1/nj+ypPqLqDRkpKLEbNCk/Jz
Ff5pD87gX8h5+g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:04 2025 by rpki-client