Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: l3I/UrCQWbQXHk4i6oz0loh8Rg02IpWz8Zily3WhP10=
Subject key identifier: 1C:50:9E:65:EB:41:DB:A9:E0:5B:94:34:E1:F1:57:28:48:EE:8A:DD
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 0198499C104DC576E24F8772551171B38989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0DD4
Signing time: Sun 27 Jul 2025 02:00:21 +0000
Manifest this update: Sun 27 Jul 2025 02:00:21 +0000
Manifest next update: Mon 28 Jul 2025 02:00:21 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: OKESDCPo3BBL4tTI5Zw5YvbxJdvejMtTIuFynTOaLSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:10:4d:c5:76:e2:4f:87:72:55:11:71:b3:89:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Jul 27 02:00:21 2025 GMT
Not After : Jul 28 02:00:21 2025 GMT
Subject: CN=1c509e65eb41dba9e05b9434e1f1572848ee8add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:c6:da:ef:e7:73:53:f9:ca:b5:09:3d:c7:
43:01:39:cb:16:23:2b:8f:d2:20:d7:68:a0:62:22:
5b:97:94:c0:73:c7:a3:51:d0:51:0d:d2:97:ba:95:
cb:7b:80:d6:a1:40:4e:b0:bf:ec:88:31:b1:12:d9:
e1:1b:d6:52:66:5d:2b:0f:3f:a4:99:8f:82:09:79:
4f:61:be:5e:e7:da:e6:77:85:6f:5c:43:d1:21:31:
e1:0d:c8:70:24:02:2c:39:42:dd:f8:12:52:83:bf:
2c:f3:fc:23:c6:45:0b:5f:29:a4:9d:a7:d9:da:f3:
cf:e8:d6:79:46:ff:e0:43:b3:48:47:52:4d:1b:1e:
28:e2:45:ed:30:e5:19:dc:51:b1:2f:88:fb:e7:87:
d8:00:99:64:e6:e2:33:f9:76:09:f2:c7:79:9f:96:
1e:e1:f5:6b:df:20:e9:c8:2f:1e:8f:cc:36:2b:5f:
03:6a:f2:41:0d:c8:a6:82:ab:cb:ad:08:d1:99:ee:
e2:77:b3:2d:ce:02:c4:d7:d4:15:f4:8e:19:f9:da:
89:d5:dc:92:c1:2f:c4:71:85:6a:04:09:7a:4a:11:
ee:cd:a7:cc:8b:19:c8:06:52:42:45:e6:fa:9e:48:
cb:f3:26:66:56:92:1b:6f:53:7c:0f:90:ce:a5:e8:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:50:9E:65:EB:41:DB:A9:E0:5B:94:34:E1:F1:57:28:48:EE:8A:DD
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:9f:f3:e9:fd:1a:19:b8:8e:40:52:f2:d2:38:d6:10:9f:
c2:43:d5:07:8a:b2:8f:1c:4b:52:b0:f7:db:d6:bd:ec:89:fc:
17:77:83:af:fc:c9:dc:1f:65:71:8e:c3:c6:e8:47:70:25:3c:
70:b3:64:9f:38:af:e9:8d:9e:38:ac:84:f0:ce:ae:f9:df:78:
09:06:34:43:b8:8f:c5:af:bc:c2:c8:17:5d:27:56:22:d5:8d:
ca:1f:36:d6:d9:3e:1b:eb:c5:28:f6:bd:d1:31:ee:67:98:a8:
ab:5d:1c:01:60:06:ea:36:1e:21:1a:9a:12:9d:39:46:ff:f9:
49:de:eb:c2:93:92:51:9c:3c:86:96:1c:e9:95:5e:d9:23:ed:
e3:5e:1b:02:e1:9f:76:5e:96:87:11:fc:95:3a:52:12:1a:7b:
e5:1b:02:b9:07:19:e1:34:fc:1c:52:18:44:e6:77:26:4d:b5:
4e:9f:ac:03:3f:eb:7b:dc:b3:8e:5d:e0:33:f8:fb:13:fe:98:
67:52:7b:f6:65:72:83:e9:0a:b4:7c:44:46:2f:f4:98:48:f8:
d4:20:b2:42:99:0c:14:3c:81:2b:11:fd:6d:01:3f:c5:34:5c:
4e:6a:4e:c4:25:78:50:85:59:70:30:8c:62:1f:01:b5:7f:63:
96:d9:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:08 2025 by rpki-client