Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: eIgrSUN7NoOYTrLuAuYl0cOyHOcuEh7znNEf++8sHFg=
Subject key identifier: 94:23:50:52:B6:8D:BD:45:EC:86:19:15:5A:14:F3:C2:58:1D:35:FF
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 0199FAD84D02BB809BBD7BA19C064F3F3011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 03A9
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: PiH520UqSRpSae+cJ4FDam0hVnci00vlmkCL+3OhgZE=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4d:02:bb:80:9b:bd:7b:a1:9c:06:4f:3f:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=94235052b68dbd45ec8619155a14f3c2581d35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:4c:bc:cc:b2:6d:c4:b1:a7:d4:e4:29:2e:
45:ae:3f:4b:82:64:e9:c1:b4:c2:37:db:68:47:e4:
26:1e:17:6c:34:4d:36:80:b1:60:6e:f4:aa:6b:b9:
65:57:05:48:1e:f4:ac:f6:b9:62:84:ef:8d:e3:58:
64:fa:5e:1d:9f:8a:45:1c:08:c4:5b:75:05:cc:3d:
d1:3e:1c:84:be:e5:b4:c7:61:53:f0:76:40:a5:21:
30:05:ea:cb:2d:bb:25:51:01:48:97:5e:f2:ee:32:
cc:01:f5:36:fd:e9:57:c9:fd:90:24:5c:9a:69:54:
d4:5e:7d:62:f0:04:de:01:83:42:cc:66:38:61:d6:
5d:aa:c9:71:b1:dc:c3:ed:c3:34:7e:7c:82:dc:6e:
ff:27:53:f3:86:01:f9:f0:64:38:b2:24:1a:de:b9:
9d:26:28:51:7f:54:82:21:1d:5d:24:81:80:41:07:
08:38:49:30:06:1c:59:5e:a7:23:c4:bb:8a:10:b9:
44:41:74:f6:60:bc:f6:57:71:38:67:eb:c1:b1:19:
23:43:8d:39:7f:48:49:c0:9a:bb:35:f5:02:28:11:
45:54:e3:29:98:54:49:bb:2b:51:c6:7b:64:f4:80:
13:0f:31:6f:70:fa:48:49:ec:9e:5b:40:df:ae:b1:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:50:52:B6:8D:BD:45:EC:86:19:15:5A:14:F3:C2:58:1D:35:FF
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:91:00:32:d5:78:b8:b6:ee:40:cc:25:79:eb:9b:45:0b:ea:
a7:3e:92:5a:f6:39:8d:0d:24:1d:0c:97:95:d0:21:ad:ad:cd:
cb:6e:66:65:c0:82:dd:83:9b:35:d3:bd:dc:fb:f3:8f:ec:f6:
de:ce:6b:25:28:25:db:8c:7c:ed:be:f5:53:c9:ed:6e:f5:68:
ff:81:0f:4e:07:68:60:d4:29:6b:89:60:22:a1:2d:f3:33:f5:
9b:12:4e:57:cb:6c:29:a2:74:9e:b1:ff:f5:70:16:4f:aa:00:
95:67:37:39:e1:60:1d:af:cc:a1:0c:a7:33:a7:6b:fb:d3:79:
5b:58:e7:d9:28:96:58:5b:10:09:5f:a6:56:c5:2b:8e:97:c7:
e4:00:09:a0:cd:98:d4:39:97:d6:93:be:0a:0c:3b:8b:b3:1d:
23:74:c9:ec:72:56:b1:f3:55:18:77:35:85:ed:fc:66:58:ad:
61:b6:0c:de:03:47:1b:15:41:a7:90:11:76:0f:ff:32:9f:d0:
45:bd:4e:69:52:02:38:b3:98:89:63:7d:a9:ce:ab:1c:b6:e9:
e1:2d:5a:29:f8:ce:40:0d:07:b0:df:9d:94:34:6b:44:a4:3c:
05:15:07:ad:4b:d2:91:c4:8c:bc:ce:e5:78:c2:3b:70:14:0c:
fa:fb:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client