Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier: +dstr8+xm0b7lKKlRcZPDisJN347EnRubvb24rp96ro=
Subject key identifier: 56:07:E7:27:D5:37:A3:21:8D:4C:FE:22:F2:EE:8D:D6:A7:A5:7C:A3
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial: 0197B6A1F0F5C5BF87D58A9A98A72A676C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: D2ZCdNeWHVs+GqQkx/nRiyhtwPXryYwryzphDs9ZRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f0:f5:c5:bf:87:d5:8a:9a:98:a7:2a:67:6c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=5607e727d537a3218d4cfe22f2ee8dd6a7a57ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:71:a2:cf:9e:f1:11:50:1a:bb:d7:ee:4c:
e5:8c:9b:08:a6:fd:9e:02:37:29:6f:56:e4:f3:ef:
43:69:20:81:26:f8:dc:f1:47:77:f3:c0:fd:72:f4:
31:e8:25:71:cc:87:f0:35:ad:0e:7e:bd:8c:f6:61:
ae:58:a7:4c:f8:55:e4:0e:08:7e:8b:2e:0b:96:c9:
38:8b:aa:da:99:08:7f:ae:dd:a2:0d:e0:a4:3f:54:
c0:2a:22:d0:7a:6f:f4:9b:6b:84:31:23:76:e7:2d:
95:d8:8f:9e:94:ce:0d:d2:c6:43:64:81:23:5c:83:
8f:f4:62:f7:88:8b:5e:80:56:53:5e:00:f6:5b:2b:
23:15:4b:6b:cc:89:34:a3:0b:48:ef:33:19:2b:53:
ae:7f:ac:d3:09:8d:7c:4f:d1:46:ec:4f:cd:bc:69:
bc:0e:23:67:83:ed:e4:33:0b:13:49:5e:29:69:93:
b4:56:6d:67:60:cb:64:d2:e4:fd:bc:20:31:f0:1c:
0a:07:25:9c:b9:8a:b7:41:38:48:39:1d:f2:75:b6:
7f:06:89:e7:c5:86:a2:f4:6f:06:7d:26:d3:1c:72:
a4:95:f4:a6:b9:28:c6:46:2e:b2:75:cd:fb:05:5c:
6f:67:e7:07:06:f7:84:38:d4:fd:44:dd:09:5e:41:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:E7:27:D5:37:A3:21:8D:4C:FE:22:F2:EE:8D:D6:A7:A5:7C:A3
X509v3 Authority Key Identifier:
keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a3:b7:fa:44:b2:73:95:85:43:4e:c8:c8:df:46:ec:58:8f:
f5:a2:83:cb:1c:92:ac:db:1d:05:ce:8a:c0:ac:69:30:7e:53:
d8:c2:43:6a:8c:51:1f:1b:a9:cc:1f:e4:de:66:8a:d1:f7:83:
c5:42:ba:6c:9b:da:e3:51:78:5d:d7:8f:32:66:04:36:d0:f7:
9d:9e:ae:63:6f:76:1a:3a:a5:b0:b5:34:86:72:9c:4b:80:c9:
f2:9a:4d:cf:ca:1a:fd:b1:71:0a:95:3a:93:1e:79:cb:7d:02:
db:e5:4f:fa:e6:fc:ff:3b:d0:f8:ee:bc:4a:9b:71:bd:19:89:
aa:c7:de:d2:6b:a0:54:cb:b0:e1:79:7f:08:ae:b5:03:fe:b6:
1e:4d:45:ad:c1:00:d0:c0:b4:23:c9:c7:15:fb:e7:a3:84:ea:
ce:a0:cb:a5:28:84:4e:00:6b:a1:e2:fb:73:23:7d:4b:ba:07:
85:63:bb:1e:06:d8:3c:5e:79:6a:3f:4f:55:e4:b0:02:a2:2a:
f5:8d:c7:e4:06:c1:ae:b5:91:75:2e:e0:80:f4:a3:02:7b:d7:
bc:ff:41:0e:8a:80:0d:4c:a3:6a:8c:97:30:6e:f7:b7:5a:90:
51:f7:35:27:f9:27:43:09:fc:52:a8:bd:11:e7:27:25:e0:bd:
65:52:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:38 2025 by rpki-client