Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: ZZvgu+nd3cgSPz5q7VzbhzIkkY7XpJ0nkb+FPuHlHwQ=
Subject key identifier: EF:75:FA:80:BA:95:FB:18:ED:28:67:25:48:00:EE:7A:C3:62:F7:C4
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019A2930DD8292B5D6E780442F4CD4D4714F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 03C1
Signing time: Tue 28 Oct 2025 05:00:59 +0000
Manifest this update: Tue 28 Oct 2025 05:00:59 +0000
Manifest next update: Wed 29 Oct 2025 05:00:59 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: hNIyno1CO5RQ56dv2J1u5wY8x5M4Oit6e/mi4FDHGJ4=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:dd:82:92:b5:d6:e7:80:44:2f:4c:d4:d4:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Oct 28 05:00:59 2025 GMT
Not After : Oct 29 05:00:59 2025 GMT
Subject: CN=ef75fa80ba95fb18ed2867254800ee7ac362f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:dd:7a:6b:b6:74:bb:45:fc:58:ba:31:8a:
69:70:d1:ba:29:12:4a:58:42:43:0a:80:76:11:48:
4c:cf:06:4b:dc:35:ca:b3:83:90:fc:17:52:24:fd:
51:c9:2b:e9:ed:0f:a7:89:99:15:c0:29:a5:b4:f1:
6a:00:0c:d5:44:e2:cf:61:16:5e:2a:8a:3a:59:2a:
ba:2b:94:0b:16:26:b5:c5:db:76:87:65:68:c9:28:
a9:9b:1b:64:4d:2a:d6:b5:4c:a1:8b:92:88:9c:26:
ab:d6:0a:3f:eb:99:42:cc:a8:c2:5c:9a:fb:0a:d5:
49:45:89:4a:02:00:23:7c:61:65:39:bc:b4:5c:2f:
54:07:77:53:89:71:34:1b:2f:06:59:13:04:41:8d:
7c:10:0f:21:aa:0e:de:95:a4:d9:6f:bf:30:e5:30:
56:48:b5:71:c0:8f:60:f4:bb:f1:c8:91:8d:e8:e1:
53:5e:55:88:0c:06:48:43:3d:31:66:a1:dc:57:dc:
09:3c:0c:8e:2e:59:bb:6e:b3:da:01:25:45:b3:b1:
6b:9b:2e:f3:57:8b:26:da:00:ce:03:e3:18:b4:ca:
11:c6:f6:a9:9d:31:f2:cf:0d:a6:7b:42:4a:13:ea:
29:d9:cc:85:03:50:95:e9:39:8e:22:a4:2d:87:e8:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:FA:80:BA:95:FB:18:ED:28:67:25:48:00:EE:7A:C3:62:F7:C4
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0e:10:9b:b9:a7:02:96:da:65:38:9d:07:32:d9:8c:b5:e6:
e4:62:ba:79:07:f7:8b:93:bd:a7:c6:34:f6:aa:17:c7:20:0c:
d5:bd:b3:68:7c:53:bb:64:56:30:6d:84:b0:e4:bc:8b:d5:ac:
57:fb:0c:40:70:4f:62:ea:39:4f:d3:3e:f5:34:09:79:36:db:
5d:96:3c:6c:0c:ce:7b:56:4a:47:65:5d:01:e4:24:6e:14:1d:
da:21:72:de:a5:09:e2:88:8f:eb:43:84:b7:53:9c:ee:ca:25:
ca:a2:ca:13:ad:fa:db:31:d9:74:43:ee:e0:d9:79:25:b2:11:
88:b0:bf:aa:61:76:49:40:f5:ae:7b:9a:3f:3f:00:a0:aa:a2:
7c:fb:49:50:2f:20:c8:2e:73:6b:6d:62:7e:30:24:e8:06:a2:
b9:2b:40:73:2a:ca:c1:6b:54:26:bd:88:ce:d5:67:17:af:3b:
fd:a6:8c:d8:09:5a:c6:e9:aa:5a:b0:87:13:4b:74:4a:7e:15:
40:aa:f2:d4:eb:0b:03:fe:a9:96:3c:7e:3d:f0:32:44:50:58:
29:2c:bc:40:bf:31:90:65:1c:4b:58:2f:e2:25:75:f0:f1:bd:
8b:20:02:57:b4:cf:cd:35:9c:c9:ac:be:04:91:93:0d:fb:22:
fb:e3:d3:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMN2CkrXW54BEL0zU1HFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm
OTRkY2EwHhcNMjUxMDI4MDUwMDU5WhcNMjUxMDI5MDUwMDU5WjAzMTEwLwYDVQQD
EyhlZjc1ZmE4MGJhOTVmYjE4ZWQyODY3MjU0ODAwZWU3YWMzNjJmN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvfdemu2dLtF/Fi6MYppcNG6KRJK
WEJDCoB2EUhMzwZL3DXKs4OQ/BdSJP1RySvp7Q+niZkVwCmltPFqAAzVROLPYRZe
Koo6WSq6K5QLFia1xdt2h2VoySipmxtkTSrWtUyhi5KInCar1go/65lCzKjCXJr7
CtVJRYlKAgAjfGFlOby0XC9UB3dTiXE0Gy8GWRMEQY18EA8hqg7elaTZb78w5TBW
SLVxwI9g9LvxyJGN6OFTXlWIDAZIQz0xZqHcV9wJPAyOLlm7brPaASVFs7Frmy7z
V4sm2gDOA+MYtMoRxvapnTHyzw2me0JKE+op2cyFA1CV6TmOIqQth+iZPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO91+oC6lfsY7ShnJUgA7nrDYvfEMB8GA1UdIwQY
MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt
NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll
LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ4Qm7mn
ApbaZTidBzLZjLXm5GK6eQf3i5O9p8Y09qoXxyAM1b2zaHxTu2RWMG2EsOS8i9Ws
V/sMQHBPYuo5T9M+9TQJeTbbXZY8bAzOe1ZKR2VdAeQkbhQd2iFy3qUJ4oiP60OE
t1Oc7solyqLKE6362zHZdEPu4Nl5JbIRiLC/qmF2SUD1rnuaPz8AoKqifPtJUC8g
yC5za21ifjAk6AaiuStAcyrKwWtUJr2IztVnF687/aaM2AlaxumqWrCHE0t0Sn4V
QKry1OsLA/6pljx+PfAyRFBYKSy8QL8xkGUcS1gv4iV18PG9iyACV7TPzTWcyay+
BJGTDfsi++PTEw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:51:40 2025 by rpki-client