Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: iqoNbdbkrIhahHheiyjl0A4mkWmh7MTu7x5fjqUsI8M=
Subject key identifier: 77:46:5A:18:E4:3F:C5:46:5A:4C:1B:67:A8:A8:12:D7:0F:40:D7:19
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 01974C9FF096B3EFC2D4EAC1F5316400C4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0D51
Signing time: Sat 07 Jun 2025 23:00:39 +0000
Manifest this update: Sat 07 Jun 2025 23:00:39 +0000
Manifest next update: Sun 08 Jun 2025 23:00:39 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: XMd8ER5s7H2Lr11JiG7VbJurJRPehDPPgQ59qTUtnqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:f0:96:b3:ef:c2:d4:ea:c1:f5:31:64:00:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Jun 7 23:00:39 2025 GMT
Not After : Jun 8 23:00:39 2025 GMT
Subject: CN=77465a18e43fc5465a4c1b67a8a812d70f40d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:b1:df:7d:28:22:29:6a:fd:c0:ad:1e:68:
6e:16:dd:4e:a1:40:88:44:ce:e9:77:aa:51:60:75:
65:02:49:52:42:be:66:b3:8d:7b:ea:e8:d2:65:f8:
11:a0:dc:77:95:77:27:a4:3d:de:8c:c1:91:c3:0c:
ec:2e:bd:6c:22:05:9e:b3:9f:e0:53:c7:a4:c6:e7:
75:26:5d:4b:53:52:96:b7:df:91:98:1a:81:5f:14:
eb:55:da:78:82:5e:e3:ab:41:ea:3d:b3:05:75:bf:
a1:5f:db:b6:01:2f:24:d8:e8:46:5f:07:a4:2b:f0:
d4:6a:49:c7:e0:56:3c:2c:82:86:8a:77:da:72:89:
75:e5:3b:69:64:b0:77:6a:d9:86:47:ed:22:1a:52:
27:a4:67:38:f4:1c:fb:85:3d:13:13:9f:26:55:b4:
fc:80:1a:3e:d3:20:32:d3:4f:26:5c:56:98:26:b5:
ce:ba:b8:49:89:b0:57:4f:ab:05:3b:e8:5b:43:9c:
98:43:2b:07:46:e1:39:86:bc:d8:35:29:d1:06:e8:
ea:54:50:2f:89:f3:7a:87:b3:a8:ee:05:5c:ce:5c:
c4:ef:e2:23:c1:bd:7e:d2:c9:82:3f:da:b4:72:f8:
c5:6b:cd:ea:96:37:9f:aa:c0:15:17:28:d0:cb:6d:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:5A:18:E4:3F:C5:46:5A:4C:1B:67:A8:A8:12:D7:0F:40:D7:19
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:65:bc:32:43:2e:08:6e:5f:4e:97:36:5c:b2:55:df:3a:
c1:14:2c:46:96:dc:4e:a6:80:77:c6:5a:a5:84:c1:31:f2:18:
10:47:75:e0:66:f6:9f:03:00:02:59:39:67:42:37:ca:81:d1:
ae:1a:5f:d3:3e:16:e0:9b:61:04:53:97:e8:48:8b:6f:e4:3f:
f2:a8:7a:fd:07:fe:98:9c:67:82:74:dd:6f:04:d2:0f:12:31:
cc:51:d4:92:bb:5a:0f:d0:3c:a5:06:d6:cf:2a:e9:0e:bf:27:
50:d1:3d:a5:7c:bd:36:68:ee:be:89:91:ae:ef:1d:46:2a:f1:
a9:bd:c0:e9:23:30:7a:23:0f:ad:42:9d:03:76:0e:c3:bd:ff:
6a:17:9e:03:e2:87:c5:54:80:f1:9e:c7:31:53:49:32:db:8a:
4b:a6:e1:1a:65:32:37:53:e8:81:4e:8f:d9:51:c8:07:3c:07:
27:4c:8b:17:af:97:d4:ed:d4:b9:8a:26:23:66:05:16:f0:ba:
c0:a2:02:0a:88:18:32:dd:f7:53:c2:a0:4b:f1:d1:19:6e:31:
ac:8d:19:2f:2c:30:65:ca:1b:fe:4d:3c:0a:89:f7:62:02:3f:
fd:e4:c4:c4:72:4a:45:bb:fd:bf:d6:45:cf:86:94:3d:75:3a:
5d:4a:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:42:04 2025 by rpki-client