Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: zKNPrnOpA94HFIyGi+OTRW+HS2kSLOiU0gNDRIkolMo=
Subject key identifier: 10:63:72:A6:BF:CB:7A:DA:25:82:C8:39:AC:A4:B7:FA:3E:82:98:6B
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 019A71EED71EF95E4636F4B27E268B78FA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0EF2
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: O4xGsANndUdbo9zTrM9YuTAiIS2eExp9np1zNsAcU8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d7:1e:f9:5e:46:36:f4:b2:7e:26:8b:78:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=106372a6bfcb7ada2582c839aca4b7fa3e82986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:d2:91:33:d7:c3:2b:44:40:db:67:ee:da:
91:1f:cd:d4:9e:b1:9f:00:b0:a6:45:ff:33:ea:03:
c3:8b:f2:04:55:c8:12:1d:37:2d:a1:22:c9:8b:06:
97:66:7f:6b:86:cc:7e:8a:c5:36:bc:f5:1a:57:55:
4c:a7:b9:5e:d6:f9:45:5a:dd:2a:86:5f:c4:fe:a9:
c7:bf:9d:35:c7:cc:69:f5:38:cc:68:93:17:e1:7b:
e7:fb:f0:d2:c9:a7:02:33:fa:a2:d6:d9:eb:ef:39:
51:59:1c:82:67:b9:e2:fe:d5:d2:72:02:06:7f:3e:
28:e6:50:51:ef:14:c4:d0:31:5d:0f:65:88:bd:9a:
7b:d8:d8:94:65:a8:97:b8:fd:08:20:9f:0f:76:2e:
f1:33:1c:27:52:a1:2d:1c:5d:d3:d1:b4:45:bc:5a:
f8:0a:97:cd:c5:de:b9:75:df:af:a1:b4:bc:36:fb:
8c:cb:5a:6e:ad:09:64:5f:da:59:ee:ca:0d:7e:a4:
d4:67:a6:73:73:1a:96:1f:21:bf:ff:4e:94:6a:88:
2d:0f:3f:81:c7:39:ba:38:35:42:5e:8c:4c:72:9a:
c5:a1:58:23:a5:46:ca:7b:b5:19:ba:e3:31:23:1d:
3d:90:5c:76:ee:e3:67:f4:3f:d8:43:2e:ee:01:a9:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:63:72:A6:BF:CB:7A:DA:25:82:C8:39:AC:A4:B7:FA:3E:82:98:6B
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:91:9d:36:f9:bc:95:0e:fd:2e:37:80:ad:11:da:83:f5:
b2:a4:01:73:6d:0e:02:8c:5b:2e:85:99:57:6c:da:90:5a:61:
a5:f3:48:c3:7e:c9:14:a8:35:5a:59:e1:55:00:92:84:7e:14:
cb:7c:96:ac:e6:b2:e4:9f:03:4f:1f:7f:f1:19:5d:b9:80:69:
be:5e:26:b5:2d:50:84:5f:16:23:72:69:db:51:01:2a:c7:78:
87:09:2a:17:a1:14:fa:37:23:d3:6c:9d:0c:00:53:27:30:39:
70:ad:f4:99:06:10:a9:69:c9:3c:a7:56:d6:80:93:17:be:6b:
c3:92:c8:6e:99:9a:02:19:be:7e:74:4d:dc:3d:3a:59:74:d5:
f5:72:f8:73:2b:d6:68:7f:70:05:03:5c:f1:fb:48:1b:a8:3a:
53:97:ac:c8:1c:e7:af:1d:85:26:4b:8a:6e:a2:b1:78:a1:ee:
22:30:1d:57:81:b9:90:a8:00:2e:26:97:e0:a2:08:3f:9d:10:
4b:0c:13:32:ae:0d:de:08:6e:29:d3:72:d1:d9:55:93:32:a0:
83:83:25:3d:a7:4a:a2:91:c8:2b:7f:88:e6:04:74:8d:7d:f2:
55:97:e7:d9:63:19:0b:4d:65:f2:39:2c:ed:d2:e8:2c:57:1c:
14:ca:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client