Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: 3UOHmMUimZbITQTv+3ONbM1JNUbwTJQWAsjENfwS4Pg=
Subject key identifier: 79:CB:57:50:23:49:0C:2C:27:03:B7:FB:8C:17:00:02:1E:5D:86:B4
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019A228A7B6B679C9D5104B09B6CB7E87AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0977
Signing time: Sun 26 Oct 2025 22:01:31 +0000
Manifest this update: Sun 26 Oct 2025 22:01:31 +0000
Manifest next update: Mon 27 Oct 2025 22:01:31 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: 3hyiJvuKleO4+/t0YaHODBGjghc/9qgtqRcSQNlzTjI=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:7b:6b:67:9c:9d:51:04:b0:9b:6c:b7:e8:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 26 22:01:31 2025 GMT
Not After : Oct 27 22:01:31 2025 GMT
Subject: CN=79cb575023490c2c2703b7fb8c1700021e5d86b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:8b:79:e2:85:e8:f7:bf:82:40:de:61:99:
a1:16:b3:d0:7d:ec:0a:50:30:d6:f6:1f:63:3c:67:
ec:a1:fd:04:59:eb:9c:30:76:f2:94:6b:1d:92:06:
31:bf:02:dc:84:eb:2f:d8:73:b7:e6:81:54:fb:c3:
22:1f:61:51:df:a1:da:d1:3e:02:61:0c:d5:12:fc:
e8:78:78:0d:33:8c:66:79:de:6f:13:7c:fe:78:eb:
22:f2:50:19:88:c0:e1:01:73:e6:c9:81:4e:85:3b:
ce:9b:07:8c:eb:61:b2:17:c1:89:ec:05:b9:ce:c3:
ce:1c:97:de:4f:29:ce:b9:d5:2d:a7:01:14:4c:e9:
5d:fc:88:0b:db:66:c4:87:ec:8a:df:51:7a:ef:e9:
18:44:d7:02:9a:a4:bd:7d:be:fb:9c:7c:05:61:e2:
c9:7a:12:60:13:13:de:a4:6d:1a:2b:e9:42:58:a3:
ea:26:04:72:27:13:d0:49:b7:62:64:97:5d:d1:91:
c8:84:67:7d:c6:85:f4:83:54:3f:e3:dc:4b:13:9c:
d4:a7:36:1e:d1:b2:30:33:c7:f0:41:63:e0:70:30:
fb:5f:56:dc:30:a3:3e:8a:87:35:0a:96:a9:05:fa:
cd:c5:e3:d8:95:68:96:5b:98:18:d5:87:f1:64:2f:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:57:50:23:49:0C:2C:27:03:B7:FB:8C:17:00:02:1E:5D:86:B4
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:20:c7:25:79:a7:49:45:66:3d:22:d2:59:65:ee:2a:a1:
15:62:70:c5:10:76:2b:eb:8c:6d:02:b4:e7:87:da:b5:a3:87:
fe:ff:5a:ab:9c:24:a5:70:c6:56:f2:9b:88:dc:b4:08:7b:31:
e7:24:89:b6:72:28:2b:72:7c:fe:2c:39:48:47:25:15:58:d1:
f1:de:09:f0:04:ab:d1:03:42:8d:ba:2c:71:83:e6:70:a7:d5:
6c:ae:d3:e9:20:64:07:0f:49:4d:79:a3:a5:02:d6:6d:9c:41:
b2:47:27:1e:b8:35:d0:b3:81:3f:86:80:76:4d:3b:2c:4c:18:
06:4c:95:13:20:72:01:22:0e:60:9c:28:4a:d6:2f:58:f2:8d:
12:55:f5:62:5c:dc:ed:08:bb:0c:7c:b8:a4:86:48:3a:9d:60:
e2:9c:a9:20:b6:a7:be:a4:c7:c5:5f:31:10:86:11:a4:46:99:
68:a7:b1:43:6f:be:33:43:d3:67:a6:d0:ac:7a:8f:7b:36:65:
d0:ec:70:68:38:92:44:77:04:e1:4b:25:3d:11:07:98:c1:e4:
0e:30:9f:b3:98:54:04:45:10:a1:e9:56:fe:ae:cf:cd:f3:7e:
26:f0:43:2a:cf:86:13:b7:f4:70:6d:1a:a8:93:c3:cd:83:79:
ff:27:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:13:49 2025 by rpki-client