
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: c3vsgCNCF+XJrzGiDN5xJGwd8G5ANTbq77spc6UpSNU=
Subject key identifier: A2:AA:87:27:76:00:09:11:6C:0B:18:81:77:3A:DC:F0:6C:1A:0C:A6
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 01982C6DE28F8B71B21D2AB32435F01451D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 15F5
Signing time: Mon 21 Jul 2025 10:00:55 +0000
Manifest this update: Mon 21 Jul 2025 10:00:55 +0000
Manifest next update: Tue 22 Jul 2025 10:00:55 +0000
Files and hashes: 1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: +GvpeFz9notndOZHuEKtA4+Pco5U+W5TDiGctjO2m6w=)
4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:6d:e2:8f:8b:71:b2:1d:2a:b3:24:35:f0:14:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jul 21 10:00:55 2025 GMT
Not After : Jul 22 10:00:55 2025 GMT
Subject: CN=a2aa8727760009116c0b1881773adcf06c1a0ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:fc:8e:f3:43:9a:1e:9f:62:5a:ed:19:7e:
e3:ed:12:28:fc:d7:dc:ea:d0:4b:60:37:15:8a:35:
46:a3:80:e7:b8:d7:e6:36:73:f8:a2:e5:93:8d:3a:
fa:f8:4c:34:db:83:1c:1a:5c:d2:e4:bd:3e:3b:83:
4e:2b:dc:52:48:90:e4:30:de:93:9f:b2:b8:b3:76:
23:23:46:e2:e0:f4:02:12:be:a5:e9:97:1e:72:0a:
57:bb:4f:61:d2:0a:2d:f0:9d:21:a7:7a:9c:bf:58:
8a:27:b1:bf:c8:d8:bb:f9:bc:75:ae:b9:f4:1c:4f:
11:6f:dc:cf:86:9d:90:bb:32:86:de:24:4b:7f:2f:
b4:e4:32:b4:6e:4b:bf:e7:5d:ea:ce:60:fc:35:a8:
3e:b1:f7:c5:6b:2b:c5:b4:e4:45:ac:8e:47:ef:0a:
9c:2e:f9:dc:23:d1:3b:70:70:92:0f:18:0f:ed:3e:
0d:f0:05:44:dc:fa:e7:5d:63:0b:d5:83:25:4f:d6:
3e:fb:26:67:14:51:01:c2:70:ba:07:67:95:90:db:
8b:fe:b4:6a:cf:90:63:07:c4:e1:7b:4f:9f:ec:5d:
e8:8a:39:88:47:49:2d:5a:9e:5f:56:aa:27:50:67:
39:92:e0:6e:32:ab:28:ed:ed:1a:64:ff:e0:ac:0c:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:87:27:76:00:09:11:6C:0B:18:81:77:3A:DC:F0:6C:1A:0C:A6
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:3c:cd:ed:89:7f:3e:3c:ea:f1:d5:a7:78:e2:ae:18:29:
e4:b4:26:01:3b:be:26:ce:14:6c:de:2f:8e:a5:6e:15:ea:4b:
ef:b2:80:08:ad:b5:71:28:78:1f:04:f9:92:89:8d:41:9c:3f:
2f:21:c6:ad:9b:fc:45:d1:59:ce:c2:3c:10:02:fa:5f:77:3e:
e5:e6:20:5d:eb:fe:ba:d2:f2:f7:f6:a0:01:30:a3:8d:9d:4b:
08:1d:d3:7d:44:cd:10:04:eb:24:f9:6f:ab:1c:fa:e7:d6:34:
ef:fe:c6:db:1d:92:da:ff:78:d6:0c:b3:a2:e5:0f:66:04:e1:
5d:42:ae:e4:36:ba:6f:fa:28:3b:05:79:64:a5:ed:c1:42:12:
57:05:8f:99:b3:41:e0:9a:fc:11:76:a1:8e:eb:6d:99:bc:a7:
be:64:42:6d:22:08:18:34:d5:8d:cf:c3:c3:96:45:5b:a1:23:
a9:47:de:66:0f:82:98:0c:71:6b:f6:45:12:3d:5b:70:35:3d:
7e:e5:a2:60:2a:ba:d2:aa:93:71:f9:8f:6a:2a:56:b8:30:91:
ed:32:f5:f6:6b:e3:91:e0:f7:a9:b8:29:c9:69:7d:26:4a:1f:
66:77:b1:f6:6f:4a:88:4a:46:59:42:98:3e:b7:93:be:7e:5d:
a6:88:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:50:49 2025 by rpki-client