Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: EzOCq2yCU5EbSazixQNVK2i4Pucgg6fwz6QJPLC5w34=
Subject key identifier: A2:12:1F:F0:07:0C:63:A8:1C:C2:31:EA:7E:12:C3:93:C7:4F:71:CB
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 0199FE102C25A16ED50F54C1927CE170FF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0EB6
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: jsFpenY13B3NljQl4KvB4yORRhkLcr5PEg4snBDJCN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2c:25:a1:6e:d5:0f:54:c1:92:7c:e1:70:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=a2121ff0070c63a81cc231ea7e12c393c74f71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:5e:aa:c6:71:05:1f:03:7d:e9:d2:4d:82:
c0:4a:f3:56:ee:a4:3d:5b:70:64:01:af:43:d3:f8:
11:11:15:68:cc:4b:28:9d:ab:b6:5c:09:a5:50:af:
b2:67:38:47:bb:72:e8:6b:57:10:c2:33:b0:e6:02:
57:44:65:57:cc:2e:30:8e:b6:3c:59:5e:78:0b:f2:
c6:00:14:57:84:31:2a:48:d0:80:46:f8:00:1b:73:
1d:ea:81:9b:3e:f5:c8:9f:91:06:c3:8e:d7:63:00:
c4:ee:f3:10:76:cb:ea:b6:4b:bc:e0:65:aa:c2:c4:
af:52:c2:ed:5d:97:a9:8a:ef:30:0d:1d:31:4f:cf:
04:3f:53:c0:84:f6:04:ff:40:71:04:aa:18:fe:8c:
6f:e0:17:4a:86:96:3a:1e:4d:40:46:40:69:0f:b4:
66:87:95:2e:52:58:2b:36:02:54:76:10:57:4f:0b:
a0:57:1f:0d:02:9f:c3:4b:15:f9:c5:55:3c:99:23:
be:0f:59:3d:d9:bf:bf:c4:5a:0d:7a:23:12:df:27:
6f:78:d4:4f:cf:cf:a3:57:84:32:9f:c4:dc:ed:18:
8d:e1:9f:2b:2f:2d:bd:4e:bf:98:8d:75:50:71:21:
e6:4f:c9:9a:27:f4:b1:94:8a:26:4f:1c:43:6e:18:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:12:1F:F0:07:0C:63:A8:1C:C2:31:EA:7E:12:C3:93:C7:4F:71:CB
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:22:a8:58:83:94:46:97:4c:bb:8e:0b:29:5e:87:aa:69:
4c:9f:03:83:9a:19:d2:e5:9c:3a:f0:03:c4:e9:e9:0d:2f:10:
ad:fe:86:d5:af:f6:f6:0c:02:6a:eb:f5:ee:3e:44:5a:d3:ad:
af:6a:ab:ed:68:bc:11:1a:c3:3d:65:58:cc:fe:ba:c4:c9:3b:
77:0e:7b:9d:bd:cf:a2:e6:62:6a:d0:25:01:7c:57:37:c8:31:
88:c0:ad:bd:99:d8:74:9c:17:9c:d3:dc:84:5b:3a:9a:48:79:
cc:ce:96:84:ae:16:d6:39:5f:f9:e9:52:ae:7d:11:b1:42:0c:
91:58:ab:4a:c3:3e:1d:4b:66:4e:55:67:11:b7:52:78:5e:75:
68:0b:db:d1:b6:74:17:d8:8c:c4:2c:ad:cd:bc:35:2f:c3:4e:
b9:ef:95:a5:9e:27:07:0f:cc:6c:0d:93:7d:d1:35:06:f3:10:
f9:66:ac:0e:2a:e3:fe:09:d6:aa:80:de:5d:cb:c4:b6:41:e2:
e8:ba:96:ee:f0:94:da:9b:46:6b:67:d7:50:8b:c2:81:c6:1f:
c8:f2:8f:d7:a0:5b:f9:0f:09:9d:bb:77:dc:61:48:91:01:25:
01:ad:75:b5:eb:36:57:dd:f9:52:fb:da:17:bd:07:5a:bf:59:
c1:e7:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:32 2025 by rpki-client