Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft
File: rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft (raw, json)
Hash identifier: bA42e6cfdGv0ovlL4loFnlTjAjDQ3XknpY91dYchKSQ=
Subject key identifier: 48:A9:26:4D:B2:70:E5:07:C2:DE:9A:49:C1:B5:F1:5C:25:1D:AF:33
Authority key identifier: AE:7D:94:21:C0:60:FD:96:7B:69:98:33:70:6B:12:24:40:17:DE:DA
Certificate issuer: /CN=ae7d9421c060fd967b699833706b12244017deda
Certificate serial: 019A718080F42F9695ECEBAF605D9C37F51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft
Manifest number: 6F
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: rn-y4SYUL_w8sGicA7quountCN8.roa (hash: g/t0pFCKiVn8PPZmfB3i7fY2ZD3J7UjYzjWRpzHev+A=)
2: rn2UIcBg_ZZ7aZgzcGsSJEAX3to.crl (hash: FjWXtswUGvYvcB2bm2U80BjX4JL2ercExvZWWLOBWjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:80:f4:2f:96:95:ec:eb:af:60:5d:9c:37:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7d9421c060fd967b699833706b12244017deda
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=48a9264db270e507c2de9a49c1b5f15c251daf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:3f:2f:e0:b4:1f:40:78:fe:6b:32:57:bb:
8b:09:77:37:e0:f3:bd:5c:af:05:e9:7e:2c:06:a7:
d8:84:bf:d7:9d:95:7f:84:2f:47:68:12:57:6a:af:
6f:a4:90:61:67:5c:99:d5:31:98:98:24:c9:1a:e1:
6f:18:1d:90:4f:5d:20:a2:bf:40:fc:7b:07:b3:e7:
cf:f2:75:2a:dc:5b:c7:70:da:dc:9b:de:f5:af:b2:
b3:d5:6c:d5:a7:81:dd:20:db:7a:29:53:16:c5:38:
9f:86:e8:98:06:ea:a0:9b:1c:e1:8a:30:d3:be:76:
f7:d1:d8:26:89:37:1c:9b:0c:74:da:5d:41:45:b4:
20:df:82:1e:46:7e:c5:07:c7:ca:af:fa:37:f8:db:
3c:91:3e:e5:26:60:33:c0:8a:fc:fe:37:ed:0f:0a:
81:1b:0d:ec:56:9c:db:67:f2:8c:56:67:ea:9c:e8:
cd:10:b8:34:c2:5c:49:20:63:a5:21:87:ff:ed:4a:
00:f4:d4:c4:11:fa:76:9a:60:15:03:f0:dc:f2:95:
52:39:f7:ff:4e:51:ca:ab:8c:46:f4:09:e4:54:e2:
44:04:b7:16:e4:49:49:8b:af:f6:a8:59:ae:99:a3:
ae:4e:3e:54:b2:df:92:cb:2b:e2:53:6e:dd:39:ea:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:26:4D:B2:70:E5:07:C2:DE:9A:49:C1:B5:F1:5C:25:1D:AF:33
X509v3 Authority Key Identifier:
keyid:AE:7D:94:21:C0:60:FD:96:7B:69:98:33:70:6B:12:24:40:17:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2a:59:97:34:b9:ef:bb:17:09:27:12:5f:b2:8d:0f:22:5c:
67:52:37:65:ba:37:fd:91:ee:f7:97:e0:99:8c:b6:54:29:f8:
1a:89:e2:fb:b1:95:e0:f2:c5:56:36:c2:35:4e:6c:ac:37:b4:
77:9d:54:22:3c:89:7f:3a:1e:5d:c4:4f:e9:1b:20:5f:9f:5e:
c5:a0:38:3f:bd:57:ca:d4:ae:e7:3d:4c:d7:0f:83:0d:4f:83:
3f:b0:7c:37:58:50:a0:2b:51:f9:e5:c6:1f:71:06:62:d9:23:
0d:7e:df:50:50:8d:37:dc:c2:dc:cd:1f:e4:2a:ab:19:90:5f:
24:77:08:1a:8c:26:ed:81:8c:fb:eb:d5:4c:c9:c7:5c:27:d7:
15:91:ae:56:0e:c8:51:be:28:be:07:3b:1b:0f:92:0c:d4:48:
62:02:6f:68:0d:6e:48:03:06:03:3d:30:ff:70:10:1d:a3:47:
5b:f3:18:2b:ea:cb:ca:63:65:48:cd:b8:ac:67:83:e8:fe:99:
83:32:4f:7d:e8:fa:eb:b0:fa:be:fa:6c:ae:d3:b0:d1:8d:6a:
39:b6:6e:f7:a8:f8:90:a0:89:a8:61:64:b4:1e:69:42:56:64:
58:3f:de:1a:7b:87:db:2c:76:0a:01:15:1c:83:42:b3:4a:a3:
b1:5e:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:18 2025 by rpki-client