Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: iTp4KQ5uXk4F0b2yWlIWlhmo4zM/pBqX63BhKpQ7wAM=
Subject key identifier: 6E:8F:80:11:E6:87:47:AD:52:E9:E1:E3:70:4B:55:1F:0E:78:AC:42
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 019A71EEF22CDF05CC0F64D7E80A5D56C526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0E8E
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: 45TIlR/oZydAaIlRCP+FTzlsUvrKbL5tpDSeTpc7RPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:2c:df:05:cc:0f:64:d7:e8:0a:5d:56:c5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=6e8f8011e68747ad52e9e1e3704b551f0e78ac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:5b:9d:47:3b:e4:ab:96:42:ee:42:6c:65:
a8:ba:d2:1d:d4:6d:a6:93:d2:f2:d7:06:52:25:3a:
32:43:90:ff:5a:be:c9:30:99:5b:93:00:11:3a:5f:
4d:80:1f:04:9d:98:a1:9c:46:fa:8c:9b:3c:12:06:
c0:a4:ad:0d:c1:73:f1:48:c5:dd:7d:39:b5:a1:80:
ef:ee:cf:61:06:8e:ef:be:a6:eb:d4:cd:ae:6c:4f:
63:36:79:d5:fc:a8:b6:9e:f6:b2:8f:b8:25:eb:ee:
a5:3d:10:8e:21:ac:61:69:18:9c:82:8d:a5:f4:a5:
4f:6b:ec:19:e0:de:03:04:9e:ad:25:67:0c:3c:fe:
ae:a5:42:29:a4:2f:e4:b2:01:a9:52:17:a6:d2:d5:
4a:c4:0a:72:a9:1f:91:24:f8:13:58:2f:be:ea:8a:
f4:19:4c:02:ee:0d:9d:c0:3d:2d:ca:f6:62:02:ba:
4a:8a:8b:13:0e:7b:a5:c5:4b:4d:d6:c9:85:0b:46:
fc:e7:a4:45:5d:a6:01:b5:ed:ec:91:c8:d7:46:e8:
bc:df:fc:72:e8:c4:08:8f:66:a3:ac:f9:7f:19:44:
9f:96:99:4c:52:4c:ad:2f:db:ec:36:b9:c2:d4:63:
05:c2:ae:b5:7d:a9:4a:e5:4c:14:7b:ce:ce:91:e1:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8F:80:11:E6:87:47:AD:52:E9:E1:E3:70:4B:55:1F:0E:78:AC:42
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:47:42:df:e2:62:6c:55:03:89:c2:55:5a:bd:6f:85:1f:
e9:e2:52:7c:39:57:85:1b:64:36:5d:58:09:3d:71:71:78:b3:
31:19:58:15:ec:f9:90:41:42:c6:fd:09:bf:bd:91:06:46:17:
e4:7b:fa:d2:de:28:82:0a:52:6b:24:f3:13:4c:fc:87:73:30:
79:af:b7:17:5f:d6:b4:37:93:02:12:42:a6:85:3b:de:79:c4:
77:3e:94:de:03:6f:0e:54:08:f3:b2:b1:25:91:30:5f:ad:3b:
f9:77:1f:5c:60:70:bc:b3:51:53:21:19:91:38:15:e7:45:86:
cb:c1:00:35:14:14:15:97:51:bf:cf:4a:b4:1b:ac:77:2d:5b:
2c:89:f8:bc:bc:1e:72:53:ff:c6:3b:c1:27:0b:6f:c3:40:36:
ab:fe:7b:85:b0:e6:a1:0d:8e:ac:03:e1:9b:91:20:b6:dd:d2:
ce:d3:65:fb:71:ef:6f:04:fd:36:2f:86:2e:af:56:5d:68:8d:
92:b8:a2:68:fe:fa:44:5f:76:df:b9:2a:34:19:21:c3:bf:45:
f7:9a:46:ec:1b:90:ee:7d:a9:7f:19:73:c8:db:6d:07:ba:da:
d3:e6:5e:3c:f2:f8:62:53:df:d4:33:dd:6c:b9:7d:21:60:ce:
ec:4d:b4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vIs3wXMD2TX6ApdVsUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjUxMTExMDgwMTE2WhcNMjUxMTEyMDgwMTE2WjAzMTEwLwYDVQQD
Eyg2ZThmODAxMWU2ODc0N2FkNTJlOWUxZTM3MDRiNTUxZjBlNzhhYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KNbnUc75KuWQu5CbGWoutId1G2m
k9Ly1wZSJToyQ5D/Wr7JMJlbkwAROl9NgB8EnZihnEb6jJs8EgbApK0NwXPxSMXd
fTm1oYDv7s9hBo7vvqbr1M2ubE9jNnnV/Ki2nvayj7gl6+6lPRCOIaxhaRicgo2l
9KVPa+wZ4N4DBJ6tJWcMPP6upUIppC/ksgGpUhem0tVKxApyqR+RJPgTWC++6or0
GUwC7g2dwD0tyvZiArpKiosTDnulxUtN1smFC0b856RFXaYBte3skcjXRui83/xy
6MQIj2ajrPl/GUSflplMUkytL9vsNrnC1GMFwq61falK5UwUe87OkeEh4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6PgBHmh0etUunh43BLVR8OeKxCMB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep5HQt/i
YmxVA4nCVVq9b4Uf6eJSfDlXhRtkNl1YCT1xcXizMRlYFez5kEFCxv0Jv72RBkYX
5Hv60t4oggpSayTzE0z8h3Mwea+3F1/WtDeTAhJCpoU73nnEdz6U3gNvDlQI87Kx
JZEwX607+XcfXGBwvLNRUyEZkTgV50WGy8EANRQUFZdRv89KtBusdy1bLIn4vLwe
clP/xjvBJwtvw0A2q/57hbDmoQ2OrAPhm5Egtt3SztNl+3HvbwT9Ni+GLq9WXWiN
kriiaP76RF9237kqNBkhw79F95pG7BuQ7n2pfxlzyNttB7ra0+ZePPL4YlPf1DPd
bLl9IWDO7E209g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:35 2025 by rpki-client