Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: Vp6g1bfv4X/hGPpRW0g/cvQhqkGExeNr0kCA1huIabk=
Subject key identifier: 70:49:D8:08:8C:A6:A1:5D:40:46:40:E1:19:1D:86:72:64:72:FC:20
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 019A72CA36EDCF63380B08BAB2ABCC89B283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 07D2
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: M2-x0b6h_vGkWR8MeQS23lu97CU.roa (hash: 3mmEcfVqYQ+5prex0V/rqUj30uad1M5q1mUqvz+8XW8=)
2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: fsg9KM8LlXKdePBUH1bztRyrS0cdVi01+QfvTnc5hzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:36:ed:cf:63:38:0b:08:ba:b2:ab:cc:89:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=7049d8088ca6a15d404640e1191d86726472fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:09:83:03:ae:96:64:51:5b:bb:1e:ba:f8:
0f:24:0e:d3:b6:db:50:f4:8a:c6:05:36:74:69:b4:
95:29:c5:02:5c:f3:2a:2e:32:fe:38:da:0b:6c:9d:
25:75:f0:7d:65:86:2b:c0:e8:78:1e:02:f6:3f:8f:
60:04:1a:17:41:22:87:9a:b5:b4:85:c5:bd:80:1a:
2b:db:8e:16:3f:34:f6:07:6c:d6:e1:a5:91:59:f8:
c3:fd:a3:a0:22:70:12:20:99:c5:77:78:00:b6:64:
b2:a8:22:37:c5:c1:45:77:9c:75:f4:23:77:19:3f:
4a:fb:c0:ba:6b:8a:4a:83:63:d0:f2:d5:23:ae:13:
b6:3e:4b:81:ed:68:fa:b9:b4:66:e9:91:7b:05:89:
77:21:48:a8:22:30:9b:2f:ca:da:12:9a:2d:4e:36:
74:5f:ad:1c:e9:60:4d:af:a1:4f:18:54:5d:36:5b:
17:18:2b:ee:24:70:d9:7f:89:d9:4d:76:c3:b1:36:
b5:bd:7a:86:e6:97:b5:0c:29:45:a5:31:d6:55:9f:
20:1d:42:9f:5a:a6:54:28:b2:e4:19:dc:20:11:ee:
e2:96:0e:fc:47:3f:6b:b5:37:45:62:fd:c5:95:19:
e2:a2:07:a2:05:2c:54:f5:54:9c:25:b2:f0:e4:08:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:D8:08:8C:A6:A1:5D:40:46:40:E1:19:1D:86:72:64:72:FC:20
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5b:f2:b2:8e:65:50:d2:d6:26:b4:c0:a6:cb:c0:6d:78:1b:
2e:a3:7b:66:f4:67:41:2c:db:c9:9d:55:be:0a:ef:c6:5b:57:
62:52:f4:8f:93:a0:8b:c9:f7:d1:9a:e3:72:a2:3e:73:09:6e:
30:68:b5:c6:6a:bb:0e:6b:94:19:e2:ec:5d:a6:a1:5f:9a:b3:
0a:e4:3f:72:d7:d6:71:f8:aa:a7:52:25:91:fc:e2:a9:0f:f2:
e2:75:21:eb:df:76:c8:0a:a9:5e:65:8e:fe:cf:0b:f2:82:e8:
74:35:63:70:ec:36:84:04:16:96:ee:c1:39:68:1e:0b:c4:e0:
41:d8:7f:fc:cd:c4:56:13:cb:b3:27:4a:c7:65:0b:d5:9a:d7:
b5:03:72:7e:73:6e:99:9a:32:64:b7:4b:af:41:f3:f5:a2:df:
27:e9:a7:9e:7f:94:91:27:69:89:63:67:32:0b:7a:f9:ae:c6:
72:5e:3f:7c:8d:5b:2d:61:80:2c:2c:d5:de:42:10:a5:be:70:
88:e1:2e:cb:7a:8f:88:97:e2:10:59:db:55:ee:8f:c5:1b:c1:
cf:0f:1f:e2:e3:b9:55:fe:50:da:32:a2:52:60:26:99:9e:2a:
de:50:b8:91:47:be:5a:44:e3:f7:52:ce:f0:dc:12:f3:62:5b:
cd:b9:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:30 2025 by rpki-client