Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: jXuCOTuZGCwveG8a3rrS38fKdkr/NjQc7ZHN30nSny0=
Subject key identifier: A0:51:BE:9B:62:6F:BB:74:6C:93:37:6B:99:2E:57:91:8E:08:C4:18
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0198380384F60D04B5D21A0FFC31A5C63AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 03A6
Signing time: Wed 23 Jul 2025 16:00:11 +0000
Manifest this update: Wed 23 Jul 2025 16:00:11 +0000
Manifest next update: Thu 24 Jul 2025 16:00:11 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: yXw2rdazZ3J58meQcM7proJFjRa4tjhLyDzm8qbKqpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:84:f6:0d:04:b5:d2:1a:0f:fc:31:a5:c6:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Jul 23 16:00:11 2025 GMT
Not After : Jul 24 16:00:11 2025 GMT
Subject: CN=a051be9b626fbb746c93376b992e57918e08c418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:67:77:19:cc:29:ab:7f:7e:74:68:bb:87:
7a:bb:0b:a6:75:b8:67:2c:fa:37:fc:d4:45:a3:d7:
1a:8d:f1:7a:9c:03:cc:e2:52:ac:a3:4e:2b:b7:9f:
74:1d:11:a2:9f:de:f7:f4:d3:e8:12:e9:b8:92:dd:
71:37:cf:f6:0d:81:88:93:f4:a1:c9:3a:d3:15:a4:
17:10:30:44:52:1b:34:5f:73:08:d6:28:ca:ec:5e:
69:ac:4a:2a:41:58:4f:87:20:29:e6:b4:29:75:80:
c2:b4:b4:02:e9:8b:eb:7d:ce:d3:f1:0d:42:01:ba:
49:43:a9:4f:98:0f:7c:e4:8c:39:de:e4:81:d7:cc:
4f:35:2e:a7:b3:48:31:bf:84:7d:dd:04:ac:2e:02:
e2:33:3c:d9:51:2c:ed:81:39:0b:2a:0c:f4:95:cf:
14:f7:d3:87:a7:aa:e5:78:02:e1:1b:da:7c:68:7f:
d3:b2:bf:f0:fe:2d:cb:c6:48:96:a0:b5:21:80:94:
5f:86:f5:89:cf:62:69:1f:02:61:36:e9:43:c4:3c:
06:f6:b5:7e:41:17:42:35:92:f9:25:40:6a:ae:ef:
bf:60:f7:b1:92:be:11:f1:b1:92:fb:40:ee:e4:49:
05:9f:af:0b:7c:88:cb:eb:2b:98:92:a6:4b:1f:0f:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:51:BE:9B:62:6F:BB:74:6C:93:37:6B:99:2E:57:91:8E:08:C4:18
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:ae:1e:08:aa:40:6a:f6:2c:0c:f8:3f:1d:8c:e8:00:80:
a0:8c:29:39:b0:9c:40:1f:6d:9a:05:5e:29:78:67:41:6b:7b:
58:62:0d:2b:aa:21:3a:08:ff:6e:88:1f:b4:1a:7b:f1:58:dd:
3e:95:f5:5e:b8:6a:ca:0b:89:bc:73:5b:1d:ed:37:dd:97:a2:
76:a8:80:fd:39:fb:02:4b:3b:ed:08:31:af:47:5a:43:23:ef:
42:36:e5:6d:bb:6a:ee:1b:7c:48:1f:89:c8:02:8e:d3:2c:a8:
bc:5c:93:45:2c:a9:65:66:41:64:70:0c:d0:b1:04:47:1f:60:
ff:37:bc:e6:4b:b6:18:82:0d:fe:cf:63:41:af:eb:e8:60:c8:
5f:39:f6:06:85:c5:c8:c4:4c:90:51:02:7a:e2:4c:c6:39:e2:
30:a0:c5:3d:f6:c1:bd:2b:9d:78:c7:62:2c:02:81:2f:a1:ae:
e6:40:cd:64:a2:60:d9:4b:9e:41:f3:8f:1b:e9:2d:6e:d3:00:
d9:f9:07:9a:1d:2e:ac:43:7b:71:db:58:a1:97:1f:66:6e:46:
af:78:ec:58:e3:84:ac:4b:26:3c:e4:ae:47:8f:c6:15:43:04:
e0:fb:a9:96:b9:a6:c3:b5:8a:19:9a:fc:4c:bc:81:ae:e8:52:
74:3b:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:09:50 2025 by rpki-client