Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: QzFvOY2fqGNMSc/2haE839Wwo5Z3av17m5FGAazaSvw=
Subject key identifier: 76:7B:F8:BF:7A:B3:66:CC:96:17:42:AA:24:31:CC:B1:08:EF:56:0C
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 0197B6D7AA0FD66AC1EA0C54C265E78EFF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0D88
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: gs1DeeK0SPwEKh5zUb8MfZ4R+NLAzHqTNpZa2Fo1DKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:0f:d6:6a:c1:ea:0c:54:c2:65:e7:8e:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=767bf8bf7ab366cc961742aa2431ccb108ef560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:d0:cc:cc:9e:89:9d:a6:ca:8e:ac:22:73:
4c:ec:69:35:8d:19:9a:15:3e:8d:a9:5f:61:16:05:
e4:d2:fa:6d:e6:be:05:20:a4:0e:a2:fa:3b:f0:34:
3b:df:06:47:d8:7e:be:23:01:09:ce:47:54:8f:0e:
0a:9d:21:c2:b5:5e:dd:1e:ee:8d:43:4a:a2:4f:e6:
bd:f0:4b:0f:b4:05:f8:9d:ac:d6:a9:63:15:0a:11:
d6:32:25:4d:c2:80:17:78:46:37:cd:96:52:27:9d:
df:fa:11:ba:3e:28:45:f2:93:f7:a8:a0:fa:a5:ba:
ec:88:cd:f8:9d:a8:bf:c6:2e:44:61:af:4b:f6:6d:
28:50:ab:b5:13:0f:16:38:d2:f8:26:6e:d8:be:1c:
10:bd:f5:99:77:0f:53:0f:30:b2:91:eb:20:02:b6:
97:84:a1:02:59:f1:11:1c:55:c6:01:1e:0f:b5:3a:
5d:38:4b:13:8b:3a:5b:41:a2:37:2a:9d:88:b3:d4:
c0:3e:45:16:a4:5a:1d:f2:18:d0:58:85:09:74:82:
cb:e9:31:28:bd:7e:c5:76:bd:9f:59:7c:89:dc:00:
2c:84:23:04:2d:ed:8f:64:e9:0b:8a:9d:19:aa:12:
28:66:cc:c8:9b:a0:bc:d0:e3:b9:9c:96:9f:d1:d8:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:F8:BF:7A:B3:66:CC:96:17:42:AA:24:31:CC:B1:08:EF:56:0C
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:39:1f:94:ad:3a:08:08:7f:6d:bf:6e:59:2e:54:80:c6:
d3:a7:00:96:ef:31:5b:f8:f3:0b:ab:96:4b:ef:aa:da:62:fa:
b4:c2:8d:1d:2c:6f:54:75:e6:59:5c:ef:40:30:21:96:56:37:
85:f2:f0:e2:86:60:38:58:64:17:9e:8c:66:3c:2f:41:cf:4a:
7b:ee:0d:c8:72:cd:07:fd:cc:cd:91:88:67:a6:f9:84:78:2f:
db:3d:1b:a3:09:70:5b:bd:20:55:e4:af:9f:f6:b4:84:e6:59:
85:7e:8a:96:9f:b9:9e:d2:1e:e9:93:f1:c6:52:c3:ef:d4:a2:
da:dd:d6:76:68:a7:e2:fc:a3:f6:46:c0:73:72:6c:21:ad:fc:
5f:3b:f5:15:cb:62:df:dc:b6:63:dd:c5:85:66:4b:20:4d:d6:
56:bb:95:2c:9b:49:f4:20:9e:e8:18:e3:a9:25:fa:93:c2:85:
1a:1f:5e:2a:b2:b4:7a:e7:5c:56:ed:66:92:23:3e:2e:d9:68:
3c:4d:6f:81:36:91:fb:a4:97:1e:4a:5e:aa:f9:a0:df:ea:f3:
8c:95:f7:35:ea:b7:61:50:36:79:13:a7:18:5a:e1:1d:d3:e6:
ac:f1:6c:2c:f2:c7:97:63:4a:49:72:1b:d6:7f:d5:de:a2:04:
fc:99:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client