Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: 3Qj7KUNdIDEaIYEOknM3AShwq8rU52voac5wycWUxZE=
Subject key identifier: 85:9A:88:E4:B3:5C:06:38:88:0D:99:FB:20:1B:D2:1A:CF:9E:AA:E2
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01994F2DB4534F1358C92C1D5D916FDAC40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 026C
Signing time: Mon 15 Sep 2025 21:00:19 +0000
Manifest this update: Mon 15 Sep 2025 21:00:19 +0000
Manifest next update: Tue 16 Sep 2025 21:00:19 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: Sar3CffGDtS4TkUYaDg6xt9+ko9DIyou0T0C6+u39kE=)
3: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2d:b4:53:4f:13:58:c9:2c:1d:5d:91:6f:da:c4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Sep 15 21:00:19 2025 GMT
Not After : Sep 16 21:00:19 2025 GMT
Subject: CN=859a88e4b35c0638880d99fb201bd21acf9eaae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:a9:ab:35:da:fc:78:8b:56:9f:6f:6c:70:
e7:b4:9f:58:57:d3:e9:2c:db:41:21:22:b9:e6:a0:
66:b0:96:6e:ba:b9:bc:85:10:f1:be:0a:17:1d:83:
87:e5:55:56:3c:f5:5d:32:a0:af:11:69:1a:02:d0:
cc:0b:dc:40:a7:23:0f:cd:03:08:a2:15:b3:27:55:
c3:4d:4e:38:9c:bd:85:b5:e8:3d:ad:f0:26:18:39:
58:ee:32:64:0d:0a:26:60:f3:2f:9a:11:88:93:4f:
c6:35:69:ac:a6:93:a6:82:e9:ee:4a:58:ba:3e:02:
23:70:33:bf:df:57:d9:d0:79:12:cb:d9:88:74:97:
d0:63:c6:fb:6e:1c:68:ba:1d:4d:5f:26:e7:64:3f:
47:4d:06:b1:e8:7b:4f:1f:b8:64:6f:32:49:e7:6c:
a6:ef:60:ad:2b:2f:f8:b6:45:55:99:48:f2:ac:9b:
a9:fc:1f:91:6a:09:34:0f:d2:b0:36:73:2b:49:56:
37:52:ca:26:5d:94:cd:f3:ae:72:40:3e:49:00:4c:
e9:54:aa:38:d5:ab:98:22:38:0c:f8:3c:1c:60:54:
28:38:a8:f4:10:0f:1c:ca:dd:05:7e:31:53:1f:71:
1a:9d:c9:ff:f1:aa:a9:eb:03:99:d7:b2:b1:39:98:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:88:E4:B3:5C:06:38:88:0D:99:FB:20:1B:D2:1A:CF:9E:AA:E2
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:23:af:dd:0c:ce:dc:02:21:5e:25:da:fb:76:5c:b7:ba:81:
fb:86:81:97:0f:82:f7:82:d4:e0:6e:11:e7:de:6b:0f:a0:5a:
f7:5f:b6:b5:c6:5f:e0:25:d2:6a:e7:22:4a:61:87:fd:12:39:
71:12:70:45:67:f1:fe:d0:a4:e4:3e:db:36:80:0b:30:d6:00:
46:2c:4c:27:80:18:90:b4:10:1e:06:7f:1c:36:05:62:ba:f8:
70:a4:34:c3:9a:27:ae:92:ff:2e:af:32:cb:08:c3:9a:4f:b8:
5b:39:39:11:6a:dc:d3:44:82:b7:4b:84:81:87:b7:cc:0a:b9:
d5:bc:4b:0b:f4:b6:5b:9c:a1:e2:0b:f2:2a:f2:1c:ed:b4:4b:
8e:87:48:41:cc:08:af:e0:eb:ff:58:5b:27:2a:43:bb:98:94:
d0:ab:67:da:19:37:be:f7:18:5c:c3:ed:46:b5:34:d4:5b:e2:
39:cc:ca:8c:80:08:99:ad:4a:6d:3f:05:84:79:a9:86:cc:9d:
16:d1:ec:b4:07:52:fa:d1:a8:a1:0f:51:ea:4d:14:a8:16:bf:
08:14:3d:f3:70:51:fc:a7:43:1e:5f:db:94:5f:90:0f:bf:27:
3d:f5:61:07:f3:a4:89:ea:cf:33:f2:82:5c:88:6f:be:96:0e:
12:0e:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 01:32:54 2025 by rpki-client