Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: 6U0JAjOFS173awVRZbLElgfLGHiCCyZuvxlNNt3WiWs=
Subject key identifier: 3D:B8:8A:77:5D:F1:E0:A0:A9:09:16:FF:43:83:4E:66:5C:20:2C:6A
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 0198D698AAB6A831035361155D536637EB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0E1D
Signing time: Sat 23 Aug 2025 11:03:06 +0000
Manifest this update: Sat 23 Aug 2025 11:03:06 +0000
Manifest next update: Sun 24 Aug 2025 11:03:06 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: kOsL9mPW7Nl7LrsZZyMM7Q5VB9pMUC2KwxFaykw581Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:aa:b6:a8:31:03:53:61:15:5d:53:66:37:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Aug 23 11:03:06 2025 GMT
Not After : Aug 24 11:03:06 2025 GMT
Subject: CN=3db88a775df1e0a0a90916ff43834e665c202c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:05:3f:d7:8b:14:bd:8c:13:78:e2:8d:0e:
1e:c7:2e:98:74:73:37:67:36:d3:c2:6b:34:05:13:
f3:b7:0e:3d:55:fe:5e:8e:5f:66:a7:52:5b:38:44:
25:74:73:b0:7b:c9:93:81:4e:2d:80:b4:0b:47:f4:
0a:ed:53:d9:98:ea:d2:ed:44:72:b0:20:04:d8:40:
99:db:55:26:be:9e:24:bf:fe:fe:e4:30:fe:bc:7a:
42:d7:d5:90:2c:c6:a5:a3:f0:67:cd:c3:59:b8:da:
af:38:75:d8:42:93:3d:df:fd:2b:a4:02:09:ab:1c:
07:48:b5:be:cf:14:c0:e2:04:ba:4c:83:33:ee:13:
c5:bf:39:a9:c3:85:19:a5:54:e4:e2:bc:1b:a8:17:
f8:88:68:37:9d:b2:95:4c:90:10:d3:dc:a9:3a:b6:
01:60:90:ac:4c:17:f8:49:d5:3e:e2:8f:b0:f2:a5:
bc:ac:58:60:c2:43:64:e8:d2:0f:3e:62:b3:6e:ee:
70:d5:11:37:fc:58:f7:0a:2d:c2:e0:6f:15:08:6e:
21:46:b5:d6:61:ce:df:f9:59:3d:50:71:c4:e1:e1:
e4:95:f7:44:22:05:92:3f:fa:a8:65:d5:50:92:3b:
18:30:8f:6a:99:5b:7c:74:e3:da:ca:96:f2:88:07:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:8A:77:5D:F1:E0:A0:A9:09:16:FF:43:83:4E:66:5C:20:2C:6A
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e5:9a:25:d3:78:bd:38:e6:e8:3d:04:3e:04:e3:67:8c:74:
08:52:3f:d1:c9:1f:df:be:46:ee:d1:de:a7:88:c0:a2:f3:88:
f8:15:fe:b3:6d:4e:c7:2c:8b:3e:28:11:67:95:dc:db:72:5b:
2a:30:0e:c0:3d:4c:fd:fb:5c:11:0e:80:8d:32:22:90:48:e4:
f3:46:11:78:f1:17:a2:ef:9d:e5:66:7f:45:74:cc:8a:8e:31:
5d:23:1a:53:e9:c7:b9:8e:df:d2:5e:f9:69:f7:12:84:e9:93:
ce:a7:41:30:e6:37:11:3f:f3:8c:c3:78:88:94:b0:e4:db:35:
79:fe:bc:d4:9a:51:5a:b9:36:c3:c6:a6:25:ec:5c:7f:ae:8a:
ed:99:23:39:24:19:07:f7:37:79:ad:60:5f:8a:01:40:f4:42:
cb:77:8c:1c:4b:0a:9d:08:63:1d:f5:d6:06:be:c8:aa:1f:0b:
ed:73:ee:c8:6c:3d:14:be:19:22:17:6c:af:56:4d:91:82:13:
64:05:e8:d0:07:55:a0:3a:ad:39:0f:80:e1:0b:bc:d1:a7:f1:
2b:07:62:05:00:7b:45:28:b1:91:85:b7:9b:bb:7c:a2:a0:f3:
a4:43:1b:64:8f:0c:6b:17:5d:22:e0:02:a8:50:ec:39:11:18:
e1:1d:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:33 2025 by rpki-client