Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier: ehVSKtA8P0l/QJezVeMy20QmiqnU/ZMoTCQhDfZYbB8=
Subject key identifier: 68:26:5B:C4:F6:3D:90:A9:99:B4:4C:DE:7F:EA:6F:D4:BB:67:F4:85
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial: 01967BD7BDCBF2E5F84EE57F667BF110EF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number: 14A1
Signing time: Mon 28 Apr 2025 10:00:58 +0000
Manifest this update: Mon 28 Apr 2025 10:00:58 +0000
Manifest next update: Tue 29 Apr 2025 10:00:58 +0000
Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: g5zJLFVYokje4oLAT1uXWQ+tKmHmy6jOpzxFT1G1lBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:bd:cb:f2:e5:f8:4e:e5:7f:66:7b:f1:10:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
Validity
Not Before: Apr 28 10:00:58 2025 GMT
Not After : Apr 29 10:00:58 2025 GMT
Subject: CN=68265bc4f63d90a999b44cde7fea6fd4bb67f485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:46:6b:44:73:80:42:2c:c6:79:ca:f8:56:
98:8e:66:e3:f2:04:65:17:7c:d3:3c:51:92:ad:47:
9f:f9:a4:bb:12:03:30:e8:d2:72:ec:5c:a9:33:4d:
4f:e9:c5:76:b6:18:00:0c:98:99:27:fc:79:19:54:
9b:7f:72:93:45:62:07:71:aa:14:39:45:4a:54:ca:
a0:b0:75:a7:2a:e9:c9:8a:b7:2c:c0:0d:fb:a9:91:
3a:b7:b7:94:dc:d1:c0:ab:f0:ea:57:43:d7:09:d8:
b2:f5:de:c0:db:3f:ba:d0:e8:65:91:2d:54:08:ae:
e9:66:6a:a8:5c:9a:e6:2a:39:8d:4c:23:fe:46:1f:
58:20:06:4d:52:90:7d:df:e4:0b:00:0a:18:16:28:
f4:42:c1:b8:59:3d:01:d4:7e:78:e2:b9:0d:09:18:
d9:50:4d:a6:27:d9:9a:ba:30:b0:ff:3b:6a:ef:e7:
3f:f9:37:a9:95:94:11:5e:53:0d:9e:f1:a0:9e:46:
e0:33:e3:6b:1c:93:a3:5a:94:8f:7b:d8:a8:33:ff:
c6:10:12:54:68:28:2b:30:e9:34:59:0b:c6:f5:3b:
84:92:0b:df:bd:5c:cf:b2:7d:1c:5f:3f:dd:d9:36:
03:b2:1b:a5:c5:af:b6:15:71:4b:0f:e9:05:f5:3d:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:26:5B:C4:F6:3D:90:A9:99:B4:4C:DE:7F:EA:6F:D4:BB:67:F4:85
X509v3 Authority Key Identifier:
keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:0e:a5:f8:39:ca:55:ad:d9:98:e8:16:e9:79:f6:ee:91:
92:42:55:fb:6b:ce:d9:14:cc:c7:ab:7c:43:d2:20:6b:48:bb:
b3:53:57:0c:9c:c5:d6:5c:23:5f:ee:76:7c:98:6b:b8:c6:b7:
a4:f8:bf:00:84:f2:8c:56:75:8a:04:e7:90:5f:46:b7:32:76:
ee:36:99:1f:ba:72:28:35:44:5d:1e:af:2d:dd:3c:1e:a8:f6:
38:e0:26:d9:bd:7d:86:0b:a6:25:c2:b5:75:cf:0f:af:26:7b:
07:16:f4:55:6f:33:4a:58:c2:7f:a0:41:79:36:01:76:17:2d:
1c:b0:6a:b6:1c:b0:cd:5a:34:6f:d8:4f:1d:bd:b0:39:46:da:
fc:95:79:db:1a:b4:86:56:9e:1e:b1:8a:2f:c5:fe:32:89:df:
f3:c7:bd:de:08:8d:2f:71:c0:c2:36:24:0b:37:b8:d3:f7:0e:
a2:39:73:50:9b:f3:a4:72:24:73:1b:24:e5:b4:e9:9f:c8:6e:
ea:cc:09:16:d5:58:d5:fa:7a:9d:0f:87:01:80:49:79:0f:14:
a2:e5:3d:40:05:e1:b3:6e:2d:31:7b:ef:61:99:d0:ec:00:5a:
22:c2:10:ce:75:35:79:9c:82:99:dc:a9:40:a2:0b:e4:49:47:
5c:06:b9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7173L8uX4TuV/ZnvxEO9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWZkOTk1NGU3ZDVkMzU5ZjkzZjUyMTgyMWQ4NTE2OTUz
YzlkMzYwHhcNMjUwNDI4MTAwMDU4WhcNMjUwNDI5MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2ODI2NWJjNGY2M2Q5MGE5OTliNDRjZGU3ZmVhNmZkNGJiNjdmNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLtGa0RzgEIsxnnK+FaYjmbj8gRl
F3zTPFGSrUef+aS7EgMw6NJy7FypM01P6cV2thgADJiZJ/x5GVSbf3KTRWIHcaoU
OUVKVMqgsHWnKunJircswA37qZE6t7eU3NHAq/DqV0PXCdiy9d7A2z+60OhlkS1U
CK7pZmqoXJrmKjmNTCP+Rh9YIAZNUpB93+QLAAoYFij0QsG4WT0B1H544rkNCRjZ
UE2mJ9maujCw/ztq7+c/+TeplZQRXlMNnvGgnkbgM+NrHJOjWpSPe9ioM//GEBJU
aCgrMOk0WQvG9TuEkgvfvVzPsn0cXz/d2TYDshulxa+2FXFLD+kF9T0/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgmW8T2PZCpmbRM3n/qb9S7Z/SFMB8GA1UdIwQY
MBaAFDdf2ZVOfV01n5P1IYIdhRaVPJ02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODct
ODUxZDU3N2QxNmFiLzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODctODUxZDU3N2QxNmFi
LzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1UOpfg5
ylWt2ZjoFul59u6RkkJV+2vO2RTMx6t8Q9Iga0i7s1NXDJzF1lwjX+52fJhruMa3
pPi/AITyjFZ1igTnkF9GtzJ27jaZH7pyKDVEXR6vLd08Hqj2OOAm2b19hgumJcK1
dc8PryZ7Bxb0VW8zSljCf6BBeTYBdhctHLBqthywzVo0b9hPHb2wOUba/JV52xq0
hlaeHrGKL8X+Monf88e93giNL3HAwjYkCze40/cOojlzUJvzpHIkcxsk5bTpn8hu
6swJFtVY1fp6nQ+HAYBJeQ8UouU9QAXhs24tMXvvYZnQ7ABaIsIQznU1eZyCmdyp
QKIL5ElHXAa5Eg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:53 2025 by rpki-client