Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: OI2FPwmRLbGo4slKjGsV43SWXohUH+/CaTPjLSwVZ9A=
Subject key identifier: 51:E8:49:88:38:09:AB:5C:57:C1:2C:E0:18:A7:55:0B:89:BE:3B:35
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019A63FBDD4E1E20741D7E7BFB99173DFE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 02FC
Signing time: Sat 08 Nov 2025 15:00:41 +0000
Manifest this update: Sat 08 Nov 2025 15:00:41 +0000
Manifest next update: Sun 09 Nov 2025 15:00:41 +0000
Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 6ad93eQpP0Ht80TEjQ9L1ZOD05Gz/Ws8D+K3kjsdq7w=)
2: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=)
3: IK6BLrV0EEpKCWmR8y07wOSk68U.roa (hash: 2f+csqFlNzMlLrmcJAwXYvsvPfVBQ0wkksbKjz0lRi0=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:63:fb:dd:4e:1e:20:74:1d:7e:7b:fb:99:17:3d:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Nov 8 15:00:41 2025 GMT
Not After : Nov 9 15:00:41 2025 GMT
Subject: CN=51e849883809ab5c57c12ce018a7550b89be3b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:35:54:40:43:28:d5:7e:32:a2:26:22:88:
f2:75:9b:43:57:87:d5:c7:db:94:8c:37:82:b8:f4:
5a:9a:36:f2:17:37:b2:4c:c2:4b:d0:38:bd:91:b6:
f4:e0:72:20:14:44:eb:24:60:6c:d6:23:b5:cf:7a:
9e:95:d7:95:82:86:81:8d:48:a0:4c:76:af:1c:37:
81:97:d5:0f:d6:7d:a0:97:03:ea:9f:77:07:f2:c6:
63:ae:79:29:b8:ea:a5:9b:62:b2:a9:cb:35:5a:3a:
ca:d2:ff:d1:73:01:b5:a5:0c:a7:73:11:04:fd:05:
b8:ba:99:cb:c9:19:c6:d2:70:a3:8b:19:ed:11:5e:
c5:f8:cb:a1:d7:b6:16:d4:d8:07:82:b1:84:07:a4:
20:aa:40:b1:b1:8d:47:0a:32:ec:04:da:37:7c:15:
87:f2:bb:be:f3:eb:9e:2c:23:2f:78:2a:24:fe:dd:
81:de:a3:46:e8:61:2b:f5:d5:95:5d:4c:74:6a:a3:
4b:31:15:dc:1a:fb:a8:37:9f:8b:d1:1a:7d:2a:1c:
26:8a:54:70:82:af:87:70:11:e2:4a:85:d0:e3:7c:
a9:94:5e:fc:90:5c:3b:8c:03:7c:48:ed:41:f5:8f:
f6:64:84:7b:90:0a:9f:99:29:5f:5d:25:43:c0:79:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:49:88:38:09:AB:5C:57:C1:2C:E0:18:A7:55:0B:89:BE:3B:35
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3e:67:1c:2c:93:c9:40:80:23:b6:7c:ba:78:43:1b:3d:ed:
3e:c7:b0:c1:38:6e:00:55:d9:d4:80:80:1b:3d:fd:e9:f1:f4:
70:25:54:44:1b:6c:b1:df:41:de:f9:11:cb:f3:a0:ad:3c:51:
08:5f:17:20:9d:78:92:07:72:3e:27:26:58:1b:d3:33:bb:aa:
c7:65:a9:cb:ff:98:1a:05:8f:b4:2b:33:2b:30:26:08:b0:4d:
14:e5:99:d4:09:37:d2:6f:2c:bf:63:57:1b:7e:33:b6:2f:2e:
b8:d2:01:0a:13:e1:90:bd:07:29:20:d6:62:e2:f3:27:95:14:
71:c1:fc:b0:85:28:ad:47:1a:bd:8f:88:56:34:e8:ae:63:9a:
d7:a7:c5:c5:6f:18:b5:46:fd:5a:97:b5:cf:dc:b7:e1:41:b9:
4b:e6:46:8f:21:73:37:d6:83:02:96:44:60:bd:8d:3d:7d:96:
fd:53:46:fa:53:77:6b:b3:95:98:73:53:06:d2:97:a7:82:cf:
b1:c5:d0:f1:dc:1e:27:2e:80:a5:75:89:ca:06:69:5a:cb:88:
d7:3b:9e:d3:7e:89:14:c4:54:de:d9:8a:f6:a3:54:57:11:c8:
cd:61:52:4f:a1:ee:e6:1c:d7:db:37:49:d5:51:74:13:bc:77:
be:16:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:23:07 2025 by rpki-client