
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier: u/9nn3cu1+Kf1utPcVznlcILIgD/yydFAv6fyAQWO+0=
Subject key identifier: 48:53:BE:C3:E1:5E:1C:27:62:47:B2:17:BF:6B:FB:1A:04:9C:74:B9
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial: 019873E2E114C420BB625DB593BF9891AB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number: 15A6
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: PokIbFnAi3YoQEerXA+VruEOWpYK3P8Z80Fm+RLM6h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e1:14:c4:20:bb:62:5d:b5:93:bf:98:91:ab:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=4853bec3e15e1c276247b217bf6bfb1a049c74b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:97:87:f2:aa:95:ec:e2:3d:8c:01:e3:a8:
fa:93:a2:0a:4f:85:ec:ec:14:19:a7:cb:5e:62:fd:
01:03:e0:bb:e9:4d:e4:c2:64:f8:d7:f4:16:2d:e8:
b5:1d:8c:30:1e:f0:b5:61:c5:78:fb:64:f7:31:2c:
ba:83:60:f8:1b:5e:a1:78:cf:5d:65:ff:4d:26:52:
22:08:62:cb:b1:89:ce:05:a9:3a:c2:41:58:a6:7c:
e1:ef:6f:38:47:f5:28:65:92:ac:6d:66:e6:bf:63:
92:49:87:84:c1:fb:c4:c1:23:33:1e:e4:74:95:3f:
3c:8c:ba:4a:2a:bd:fd:dd:25:14:04:29:5f:2a:9a:
c5:56:db:5e:ab:58:2f:ca:61:8d:e3:1e:e9:ab:2a:
3b:e5:56:79:1c:d7:a7:26:3c:b0:f8:2e:96:f4:fa:
ad:19:68:e4:e2:ba:af:ef:17:c8:84:c2:55:3c:9f:
1f:a3:0d:18:7c:43:2b:0e:eb:74:a9:f7:d7:b9:d2:
64:7c:d0:9b:75:d2:9f:1f:ba:94:99:5e:54:29:8f:
bc:40:46:75:f0:a3:04:2f:94:40:2a:16:37:12:e5:
83:ad:96:4b:9a:10:36:d7:6b:db:d0:2b:f7:23:f6:
a4:80:c8:c8:82:d3:bb:9b:bd:af:a5:9e:87:82:19:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:BE:C3:E1:5E:1C:27:62:47:B2:17:BF:6B:FB:1A:04:9C:74:B9
X509v3 Authority Key Identifier:
keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:93:c0:26:b2:0f:48:e5:0a:5b:99:64:c9:8d:2a:3d:5b:
c3:63:e8:0f:8a:0c:0c:04:86:92:61:13:08:30:5c:3f:42:eb:
69:fd:2a:4c:c6:47:2d:b0:9e:ef:e8:a6:be:9b:59:05:dc:60:
07:68:db:d9:b6:ed:db:29:9e:83:91:c2:51:88:18:c5:3d:56:
d6:70:ba:3d:17:c1:04:b3:a4:57:5d:2f:42:95:2b:49:26:20:
ee:98:ae:cf:95:76:e1:35:0b:2c:69:ad:4f:09:69:a1:54:85:
73:bb:29:e3:b2:21:3f:fb:b6:83:41:4e:3b:b3:bf:9c:c4:86:
31:4e:3d:80:65:8b:e9:ee:7d:71:70:7c:8b:06:d6:de:8d:0a:
c8:fa:aa:27:da:22:0d:4f:ae:b5:e0:65:05:62:41:20:e7:5f:
f4:c4:5e:ba:4f:f2:0a:ff:f6:c3:da:15:82:14:69:ae:65:eb:
d2:cb:bb:41:13:3d:8a:d2:ed:d8:14:39:2f:6f:89:93:77:c4:
88:e6:03:e8:7e:ec:5d:08:1c:a7:ed:93:d3:61:4d:87:7b:de:
9a:7e:e4:7a:96:84:82:b4:88:3a:39:f9:9b:a6:43:e6:20:90:
44:58:9d:ed:c1:df:cc:3d:46:59:c8:54:87:cf:2b:11:9e:79:
03:26:2b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uEUxCC7Yl21k7+YkatHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWZkOTk1NGU3ZDVkMzU5ZjkzZjUyMTgyMWQ4NTE2OTUz
YzlkMzYwHhcNMjUwODA0MDcwMTQ1WhcNMjUwODA1MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg0ODUzYmVjM2UxNWUxYzI3NjI0N2IyMTdiZjZiZmIxYTA0OWM3NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHWXh/KqleziPYwB46j6k6IKT4Xs
7BQZp8teYv0BA+C76U3kwmT41/QWLei1HYwwHvC1YcV4+2T3MSy6g2D4G16heM9d
Zf9NJlIiCGLLsYnOBak6wkFYpnzh7284R/UoZZKsbWbmv2OSSYeEwfvEwSMzHuR0
lT88jLpKKr393SUUBClfKprFVtteq1gvymGN4x7pqyo75VZ5HNenJjyw+C6W9Pqt
GWjk4rqv7xfIhMJVPJ8fow0YfEMrDut0qffXudJkfNCbddKfH7qUmV5UKY+8QEZ1
8KMEL5RAKhY3EuWDrZZLmhA212vb0Cv3I/akgMjIgtO7m72vpZ6Hghk2rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhTvsPhXhwnYkeyF79r+xoEnHS5MB8GA1UdIwQY
MBaAFDdf2ZVOfV01n5P1IYIdhRaVPJ02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODct
ODUxZDU3N2QxNmFiLzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODctODUxZDU3N2QxNmFi
LzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyqTwCay
D0jlCluZZMmNKj1bw2PoD4oMDASGkmETCDBcP0Lraf0qTMZHLbCe7+imvptZBdxg
B2jb2bbt2ymeg5HCUYgYxT1W1nC6PRfBBLOkV10vQpUrSSYg7piuz5V24TULLGmt
TwlpoVSFc7sp47IhP/u2g0FOO7O/nMSGMU49gGWL6e59cXB8iwbW3o0KyPqqJ9oi
DU+uteBlBWJBIOdf9MReuk/yCv/2w9oVghRprmXr0su7QRM9itLt2BQ5L2+Jk3fE
iOYD6H7sXQgcp+2T02FNh3vemn7kepaEgrSIOjn5m6ZD5iCQRFid7cHfzD1GWchU
h88rEZ55AyYruw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:45 2025 by rpki-client