Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: 5QUsVEe5MDTGYhw/oqvG0ZWim+4Sufjq1FTK48qReLA=
Subject key identifier: 83:97:68:09:30:76:86:AB:51:2C:AD:69:AE:A6:89:32:55:AE:38:B8
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01984A419580109012D3C64EB6B6B88103B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 02C9
Signing time: Sun 27 Jul 2025 05:01:08 +0000
Manifest this update: Sun 27 Jul 2025 05:01:08 +0000
Manifest next update: Mon 28 Jul 2025 05:01:08 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: XsLJ+SPKRt/SDaN1Pq22KYQwVD2YV/ik7LMM/TlojLk=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:95:80:10:90:12:d3:c6:4e:b6:b6:b8:81:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jul 27 05:01:08 2025 GMT
Not After : Jul 28 05:01:08 2025 GMT
Subject: CN=83976809307686ab512cad69aea6893255ae38b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:1d:0c:20:bc:e2:2c:46:58:c6:bb:d8:4c:
c4:17:e3:0d:09:0c:f0:ff:6c:a4:30:52:23:de:00:
a0:23:9b:e2:9c:36:64:0f:e2:33:bc:82:d6:9e:59:
fe:c0:a5:68:b8:b7:75:87:89:77:81:d8:54:44:d0:
44:16:f3:6e:39:97:fa:da:54:11:f8:5e:97:17:f9:
ca:e5:68:2d:b5:6c:e2:36:74:81:c6:4e:4d:ce:78:
ac:72:0a:83:ee:63:58:7e:ae:8b:b9:98:19:ff:99:
1a:81:71:95:0d:9d:73:a8:b3:4c:82:ca:6f:1d:e7:
52:11:19:61:bd:38:ff:cc:4a:5e:7d:2f:d1:ec:c5:
d1:08:f6:ff:32:ad:5a:63:06:fc:ed:e7:76:6f:d9:
04:3d:d0:95:05:23:ee:d1:b0:b9:eb:a1:d2:c5:ed:
16:35:66:79:cc:48:8f:c5:dd:7f:3f:cb:99:2a:90:
75:25:c7:3c:36:0f:d6:05:d1:08:6d:93:cf:bc:e8:
d6:1b:c6:a2:92:35:62:94:10:dc:f6:48:b0:b3:49:
21:0d:0e:6a:f0:ae:d7:8e:50:69:7e:2c:99:4d:3d:
2f:93:2c:59:80:59:d2:bf:22:62:18:95:60:02:8f:
90:15:a4:37:07:8a:71:92:f0:69:57:44:3b:93:6f:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:68:09:30:76:86:AB:51:2C:AD:69:AE:A6:89:32:55:AE:38:B8
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:69:81:00:39:6f:7a:c8:e1:7f:77:a7:62:09:0d:9a:ae:
05:4c:6d:67:2e:47:8f:e7:ba:75:5d:44:95:de:cc:98:c7:d0:
93:3c:b4:68:f8:28:ad:cb:ce:d1:b6:bf:48:e8:23:d9:8f:10:
fa:79:5f:d4:d2:20:ba:d0:9c:ea:66:a2:f2:40:82:ea:59:cb:
f1:55:c0:ed:4d:be:1c:aa:e8:3c:b6:f7:eb:24:8a:c2:b3:4e:
2d:eb:a4:c0:27:2f:23:d7:4e:0c:f2:08:37:ea:08:c2:d3:01:
df:27:b8:14:53:28:19:cb:38:63:f8:fa:0f:73:db:d4:74:31:
89:b3:48:1d:f5:54:4e:c7:4b:86:63:f9:e1:ce:d7:87:d2:18:
cf:41:82:8b:fe:5d:3b:8a:a5:b8:03:0b:d2:d1:7a:d9:93:86:
e7:14:e2:d2:53:ea:ff:3d:bb:81:10:7e:c7:6d:ae:bb:ee:c1:
d2:63:be:fd:43:d8:49:6f:7b:58:f2:57:f2:63:44:03:b4:97:
fd:0c:a1:7d:29:37:83:7e:7a:dd:e1:0b:f4:92:ef:24:b8:b0:
1d:6c:9b:2c:69:bc:10:b3:60:19:e3:75:ab:e2:d4:1d:a3:fc:
71:a1:eb:c4:04:80:27:d9:09:1d:da:90:1e:54:51:c3:9c:19:
21:66:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:48 2025 by rpki-client