Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: XjdBA2zTY2o4S16ASYXFxLiAupobgHxCbgE91Mt4/xM=
Subject key identifier: D6:00:B4:32:B5:6D:0E:F8:10:12:99:7E:84:4A:70:90:64:C9:CB:8B
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019A7294054FFF41A9245414EFF8FBF9D80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=)
2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=)
3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: iC9cWFDBVZeC71l+oGHWUWcIx00ao5nnm2uDMEwb46A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:05:4f:ff:41:a9:24:54:14:ef:f8:fb:f9:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=d600b432b56d0ef81012997e844a709064c9cb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:8d:54:1d:88:3b:44:77:68:c7:3b:23:6c:
95:4f:f6:db:c8:71:46:40:06:6e:5f:e1:ca:43:be:
f4:32:5b:11:f4:35:63:0f:b6:a3:7b:a2:81:40:b7:
8e:22:46:32:4a:8e:dd:2b:20:ac:a3:21:5a:5c:9c:
ee:37:df:e8:8a:b8:7d:70:99:89:a7:69:47:8a:32:
6f:6f:49:6a:05:63:0c:25:a1:41:9b:f8:bc:1c:4b:
be:d4:97:37:f4:0b:be:c4:fa:6d:4b:36:33:03:55:
97:5b:38:b2:75:b8:d9:a7:20:1b:40:b1:e5:8a:1a:
71:57:9c:46:21:2b:a1:6b:c3:e2:63:ac:7c:62:ff:
cd:3e:d2:e3:1f:a1:9c:f4:b7:61:a6:23:60:c5:15:
7d:08:cb:4a:23:cd:49:78:19:b7:0c:6b:18:90:e7:
0d:1d:3f:a7:36:76:97:94:f5:2a:b1:49:96:c0:0d:
1c:99:98:11:37:cb:20:2d:9d:6f:51:67:3b:b1:bd:
1c:a7:a0:09:c0:30:bc:08:ec:9b:26:a3:8d:3f:76:
b8:97:1f:ea:ab:c0:c1:2b:b4:fb:33:07:46:b7:39:
ac:3f:9e:16:cb:e2:a2:79:b8:6a:e9:c6:97:19:19:
95:51:2e:85:67:0d:fe:bf:50:7a:48:16:7d:bc:93:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:B4:32:B5:6D:0E:F8:10:12:99:7E:84:4A:70:90:64:C9:CB:8B
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:d9:78:e8:c1:77:21:bf:e9:13:3a:58:15:4e:d6:6f:99:
a6:a4:23:e8:4a:31:a0:5a:80:bc:43:f4:39:3f:ed:09:23:c5:
44:a1:d2:cc:2e:49:96:ac:b6:9c:ef:39:cc:d1:57:b0:af:9e:
66:9d:90:89:b8:fd:ab:42:29:84:cb:17:3b:3e:bf:43:05:4d:
2d:3c:79:54:e2:e8:21:bf:3e:6c:22:36:df:6b:07:24:43:69:
41:aa:bb:a0:21:bb:88:12:35:a4:ec:bb:d1:a3:82:75:e4:6f:
ba:df:de:ad:78:53:28:d2:b1:74:43:cc:d7:ff:a4:e6:f9:30:
d6:06:fd:9a:58:b4:24:6f:8a:69:ce:e9:03:f9:a1:e8:01:da:
7f:a3:30:6c:b7:15:4e:cb:27:72:f9:c1:00:35:31:69:4f:dd:
aa:5f:9d:59:a0:66:31:8f:43:3e:8c:f8:17:54:3b:ea:6a:a6:
1a:49:23:45:87:ae:5b:1d:c2:fe:a1:66:25:9e:b2:42:94:af:
68:15:fe:5c:8f:1c:ad:65:9c:6d:97:50:21:a8:7d:c9:f2:02:
3c:18:3d:96:1a:70:68:e0:7e:5e:ee:d3:d8:32:b2:9e:d2:78:
83:0c:aa:5c:38:17:a0:84:f4:24:2c:dc:77:c1:6c:7a:f2:44:
03:eb:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:56 2025 by rpki-client