Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier: MQiI+Al2IVyXHsIE9FLGxqr+riER/yg2zEWf8dkfajo=
Subject key identifier: A5:17:7B:D4:7E:CB:87:EE:38:2D:CD:20:C1:34:B6:D9:80:7E:67:41
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial: 0199239F8E2E40832465D7B9BB4A3A3632EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 10:01:23 +0000
Manifest this update: Sun 07 Sep 2025 10:01:23 +0000
Manifest next update: Mon 08 Sep 2025 10:01:23 +0000
Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: l9VXbWigH4xnQzTXz6f4vCsjdnDAl0813NHlCCAnCqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:8e:2e:40:83:24:65:d7:b9:bb:4a:3a:36:32:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
Validity
Not Before: Sep 7 10:01:23 2025 GMT
Not After : Sep 8 10:01:23 2025 GMT
Subject: CN=a5177bd47ecb87ee382dcd20c134b6d9807e6741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:43:5b:5f:68:2f:51:ad:e0:55:08:7a:26:
40:46:7c:50:8b:b0:78:a6:68:73:d2:98:79:f9:ea:
d9:1a:9d:c6:90:d4:35:45:c9:90:cd:b2:ed:c7:89:
4b:f1:95:47:55:58:ed:df:4e:9d:95:a4:67:36:91:
73:f9:cc:10:c6:d7:5e:7f:69:9f:56:0a:9d:54:d5:
96:d6:ab:f5:e3:e0:d9:ea:bc:ea:31:de:90:b3:ac:
82:9c:14:9c:75:6a:a0:6a:3e:71:72:aa:6e:c3:c6:
54:ce:86:16:b6:a2:bf:f1:fe:2c:09:66:34:44:33:
7d:04:bb:62:7d:12:49:7e:66:2c:cb:88:dd:c9:98:
e2:2a:88:b2:e9:68:3b:d5:a8:32:d5:28:f0:85:54:
ba:d3:df:38:3d:64:bc:ad:f3:33:d2:66:a3:63:79:
95:c2:a1:bd:08:e2:56:1b:57:7b:9e:11:55:c9:f3:
6c:82:f8:15:69:3b:5a:94:e1:2f:d7:b3:a3:01:c9:
29:bc:19:cf:4a:76:f8:96:28:ac:10:1f:40:ed:d3:
ee:21:4f:6f:c3:02:26:d7:c8:d4:b2:97:55:5e:36:
59:2f:55:51:33:8c:14:92:fc:97:d8:fb:28:ee:b2:
ae:51:59:91:0e:10:0e:22:c9:1a:c5:f9:e7:e0:6f:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:7B:D4:7E:CB:87:EE:38:2D:CD:20:C1:34:B6:D9:80:7E:67:41
X509v3 Authority Key Identifier:
keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b1:fc:8f:d5:4f:cf:48:fb:69:2e:72:1a:8b:0d:ef:3d:c1:
11:bd:86:b7:4d:61:17:6e:72:99:78:ea:63:c3:f6:be:8d:df:
01:b0:17:34:ed:f7:65:cf:a8:c8:da:d2:55:60:a7:dd:90:40:
81:6d:3c:9a:9c:ac:9c:8c:e7:dc:c4:dd:5b:06:4e:99:3e:44:
06:28:51:f0:48:8f:84:11:b9:39:df:16:60:2a:b5:8c:30:13:
ae:9f:3b:8f:f9:69:8d:38:a7:ac:d3:0e:ed:b0:e9:79:b7:f8:
4b:35:fc:35:f8:05:f3:ee:cb:39:55:a4:3f:ff:b5:1c:14:48:
cc:6c:3f:3f:ae:29:c5:b6:51:52:7d:78:b4:ef:43:3d:4b:ca:
2b:51:13:7c:a7:05:ef:a7:cf:c9:3d:29:bb:7e:fd:9f:e3:5f:
7f:cd:a2:44:54:18:4f:10:2d:0d:ce:ec:8c:ea:9a:19:9e:b0:
3f:81:eb:29:71:9a:e2:0c:9a:e7:7e:91:a4:90:b5:6e:ba:2b:
7c:51:9b:81:91:d7:f1:ce:8d:ba:d8:bd:87:96:32:18:e4:06:
81:81:9b:8f:ca:fc:0e:0f:87:ee:06:53:26:fe:39:87:01:14:
59:03:b9:d5:c5:93:d1:30:20:e8:c7:f3:da:1a:c7:bc:49:e6:
5b:ce:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:15 2025 by rpki-client