Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: N15w3aCGpR15HrgBN+ybf7SoEv7z8gDi6TvIK5nXwxQ=
Subject key identifier: 93:A9:32:3C:59:41:D5:BE:1B:85:9D:CC:5B:92:A2:87:5B:4E:2E:0C
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 0198D54E3B9D8FA24A9E0A7D8F7480ECB003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0311
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: +Unyq2ZCgNfy1PvAW56fjWbtBpKOYaAVwK2ivinhUlI=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3b:9d:8f:a2:4a:9e:0a:7d:8f:74:80:ec:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=93a9323c5941d5be1b859dcc5b92a2875b4e2e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:6c:a7:b6:3a:63:f5:57:e5:52:06:7c:39:
24:53:6f:a3:f1:db:31:e0:bc:e0:12:83:ce:bb:6c:
73:4e:19:c3:9a:9c:b2:d5:e7:ee:80:64:18:b0:c3:
bf:e8:e6:53:54:7e:2f:43:f9:80:cc:b9:56:49:da:
76:de:7d:0f:4e:a2:0d:00:ff:c0:71:a9:47:1f:bb:
11:c8:e6:3e:09:1d:1e:c9:7f:ad:68:5f:6c:86:bc:
7d:ee:30:4f:59:90:ef:b0:c0:c7:b0:eb:01:eb:5b:
8e:22:fe:5d:c5:e6:8a:f8:d4:f7:0a:24:5c:78:af:
e8:9b:be:3a:ae:88:79:54:41:e0:c0:c6:c9:50:fb:
49:7c:ab:b1:35:d6:2d:9f:a5:36:7a:a5:0f:6c:6b:
ad:c1:36:b9:3e:d3:a1:c8:cb:7f:b1:42:06:a8:f9:
c4:06:76:60:ba:fb:77:39:b9:ef:59:61:a3:08:24:
b8:54:00:49:de:04:ca:c3:cc:24:29:6b:0e:2d:00:
8c:01:4e:cb:d6:8c:15:1a:27:ee:8f:3b:87:b0:9d:
98:eb:93:67:28:f3:39:1d:27:ac:a8:0f:1f:0f:47:
6c:f6:1b:83:95:f9:af:f6:f3:ae:5b:16:9b:c3:3b:
f8:ca:b1:8e:07:ad:ea:a6:a0:56:c4:e1:6b:f0:0a:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:32:3C:59:41:D5:BE:1B:85:9D:CC:5B:92:A2:87:5B:4E:2E:0C
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:39:2f:a6:d3:67:c1:a0:7c:85:3c:87:ad:aa:25:96:1c:
6c:0e:18:6e:3a:77:c8:2c:67:a6:49:51:aa:42:c4:0c:c9:f1:
09:2a:41:33:f5:a5:fc:da:2b:57:31:34:09:81:fe:f7:f1:17:
97:6e:ca:16:ff:35:e2:83:6f:79:4e:01:50:e4:e6:25:25:4f:
d1:50:0b:5e:ad:19:61:fd:61:69:72:01:b4:5d:18:c9:2e:e9:
9d:8a:95:7f:39:cb:a0:24:45:20:28:de:c9:be:2f:9a:9a:ae:
d9:0d:af:99:50:77:e8:af:64:c5:ae:51:ea:1b:6a:16:67:14:
76:8a:30:56:34:f5:7f:11:d6:8b:da:73:ca:1d:53:c5:8a:9a:
4c:5e:32:c4:96:40:fa:d7:38:54:14:89:49:ae:ef:dd:39:08:
ed:07:c5:2b:1d:f9:28:21:39:e4:a7:a9:9b:2a:94:09:55:08:
1c:95:a5:4e:89:33:a8:1b:a0:b1:a9:0d:0b:ae:4a:77:eb:cf:
9e:f0:af:d6:88:20:f7:fc:1a:9c:c4:d5:01:bf:47:72:5a:b8:
44:89:70:a1:9b:33:cd:13:9d:f6:4b:83:7f:44:69:68:89:9e:
77:ee:28:99:fc:9d:bd:d9:9e:48:b3:59:b9:76:9d:52:39:c3:
ca:8d:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client