Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: pbpJEVQQblZIWWqOTyVV7mGEisN6iSU93zAdvF7HCsw=
Subject key identifier: A6:CE:E7:A2:00:F8:29:C7:FA:10:DE:D8:72:AE:8C:11:14:22:7D:3D
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 01992F35504F00A831B6B2D7CA6BA3EEFE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0426
Signing time: Tue 09 Sep 2025 16:00:46 +0000
Manifest this update: Tue 09 Sep 2025 16:00:46 +0000
Manifest next update: Wed 10 Sep 2025 16:00:46 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: v8ffgQYUp3S5JQ5uWAwfunRRlQHnF9KF11T+mIMUqQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:50:4f:00:a8:31:b6:b2:d7:ca:6b:a3:ee:fe:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Sep 9 16:00:46 2025 GMT
Not After : Sep 10 16:00:46 2025 GMT
Subject: CN=a6cee7a200f829c7fa10ded872ae8c1114227d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:29:2f:6a:9c:57:d9:6d:cd:5b:66:91:2b:
58:a0:cc:a8:3b:76:88:71:a1:3a:27:c7:b8:13:dc:
e8:39:bb:8c:e3:31:4e:f3:8e:c1:3a:ea:1e:0d:6b:
18:13:c6:86:86:a6:f8:46:65:8b:66:9f:5f:0b:8e:
da:19:3d:df:40:06:32:f0:af:23:1c:d7:be:73:ef:
bf:80:c2:25:b0:dd:18:43:9e:23:16:d8:07:e2:63:
76:42:7d:b8:22:f5:a5:5a:8a:f4:26:4b:0d:00:9b:
d9:dd:43:1d:ed:a1:25:5c:aa:02:f4:54:7a:55:dd:
6f:db:72:f6:e9:3d:4e:3d:69:19:29:a4:86:72:64:
0b:f7:91:37:0c:15:ae:eb:5a:4c:23:e6:94:84:47:
ce:0b:89:b7:4a:f2:8f:b8:83:b6:96:dd:ad:28:ba:
a1:af:5a:5c:f4:93:0e:0d:f1:a2:22:7c:1f:3e:42:
99:e9:7e:d2:72:83:65:5a:cf:8a:aa:f7:e0:71:33:
a1:4d:af:29:0e:b0:ca:30:e0:e1:1f:7c:f5:d2:4b:
e1:ae:49:10:c6:d0:43:a0:08:93:1f:6e:58:9e:d4:
10:0b:98:47:88:4a:20:88:c9:d0:e0:98:ad:f9:0e:
20:00:5f:c1:e8:eb:ef:80:1e:11:c0:a0:df:10:bc:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:E7:A2:00:F8:29:C7:FA:10:DE:D8:72:AE:8C:11:14:22:7D:3D
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:96:29:75:a4:16:cd:18:ec:c8:9c:7c:f8:fc:9c:af:0c:
43:fa:85:22:9b:d0:0d:be:3b:af:88:3f:90:7d:75:5e:b3:6c:
c2:c2:ec:59:89:74:09:0b:85:4f:f8:6c:1b:06:76:d3:7c:b9:
64:92:b4:4a:59:ca:68:3d:a2:6e:13:84:48:81:5c:cd:20:8d:
0f:95:25:fe:70:7d:e8:b9:11:b0:af:7b:4e:ac:17:fe:46:6e:
0d:46:3f:de:99:62:ee:d4:da:76:87:47:44:83:8b:4a:99:40:
8c:84:9a:39:1c:40:dd:41:a5:6e:24:64:c7:a9:82:9e:0c:0a:
d0:ba:5a:6e:40:a1:de:ef:1f:bb:5c:6c:a1:2c:64:16:e9:7a:
b7:bc:8e:4a:ba:ff:2e:f7:35:75:50:ec:ed:ce:60:0d:3e:29:
02:21:ce:4b:68:0e:8e:f8:8e:d1:2d:6f:d4:e3:94:1f:49:a8:
81:4d:9d:dc:8e:44:ec:8d:43:c2:48:bd:e0:99:9e:b9:b1:2f:
58:fd:71:ba:c4:f2:7d:b8:65:cd:ad:0d:e6:f5:4f:8a:19:8e:
21:51:00:c3:fc:d0:87:3d:9e:88:65:31:7f:cf:f5:b0:21:10:
81:b6:83:68:db:93:87:76:a9:90:49:1d:9d:ff:13:93:44:31:
40:a0:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:51:18 2025 by rpki-client