Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier: efwZpDrscjpL/Ya5INHRZxbqVetCOdHCz8S6Ra25ZJ4=
Subject key identifier: 65:71:9B:AD:7A:94:3B:BC:6F:C7:08:81:33:22:B5:E2:A1:3A:BD:69
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 019A0CDD3EF252B2543992E464205558BCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number: 167C
Signing time: Wed 22 Oct 2025 17:00:17 +0000
Manifest this update: Wed 22 Oct 2025 17:00:17 +0000
Manifest next update: Thu 23 Oct 2025 17:00:17 +0000
Files and hashes: 1: 9llKTYz55e1x1N79z5XQiF3dT4g.roa (hash: PS5GRedQdCJlh0VR0C24dd32hYgK4alJsCFo2wKdfTY=)
2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: LlDFPQdlzrQrBjAFkc6XkGDmIe0Nzf0KT8Y1eehG7oY=)
3: pfTZ88SRK7BJ1bWmmJVB35dV26A.roa (hash: TVV4m/AajwnJi7L7QdoUgaL2HibNFWxDJ80dMIKyPdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:3e:f2:52:b2:54:39:92:e4:64:20:55:58:bc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Oct 22 17:00:17 2025 GMT
Not After : Oct 23 17:00:17 2025 GMT
Subject: CN=65719bad7a943bbc6fc708813322b5e2a13abd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:93:86:17:95:88:e2:7a:e5:f6:23:fd:a5:
26:00:85:3b:c6:93:35:9c:59:0d:52:f0:9f:00:6a:
3a:0e:0b:d3:14:de:f7:fc:80:4e:c6:94:81:96:a4:
cb:9e:de:c5:3c:60:08:2f:7d:45:88:14:b8:06:ce:
f3:c6:3a:cf:d8:39:14:2e:58:65:7e:f5:05:26:4d:
75:bf:5b:a4:f3:af:20:d9:c8:90:9f:92:c5:da:dc:
22:87:a4:72:84:0c:49:40:af:28:0e:84:93:a6:6c:
4a:f0:70:90:89:b0:14:cf:eb:e0:50:48:17:84:4c:
8e:8f:2b:bf:b8:25:7c:e9:89:f7:03:d9:23:da:98:
a2:8b:6b:0a:1f:13:a5:83:c7:00:f6:8c:75:6d:5e:
d5:cf:9d:7d:61:7c:11:89:4b:7e:12:9d:9a:3a:fd:
f7:7e:f8:2a:5d:4e:98:31:7a:73:e8:06:91:2f:ae:
27:94:d3:70:83:be:38:c6:2d:e2:83:15:b5:3d:3d:
3e:4b:09:2d:81:07:ea:df:c0:8e:fe:19:b9:51:c9:
2a:4b:42:b7:ac:2e:7e:aa:02:6a:68:b7:22:20:03:
a1:7a:3c:ca:57:d5:24:88:a6:2e:ba:66:5b:ee:d2:
65:b1:33:aa:62:e4:df:4c:36:18:96:d1:cd:5b:1b:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:9B:AD:7A:94:3B:BC:6F:C7:08:81:33:22:B5:E2:A1:3A:BD:69
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5e:aa:b3:07:ba:37:93:8b:68:e2:a7:2e:3b:6b:12:92:bb:
17:36:a6:10:a5:ea:30:40:f1:33:dc:5b:c5:4b:0f:7e:8a:40:
03:b3:9e:1e:09:3c:59:c4:13:2d:15:d8:47:2a:fe:51:e2:0c:
43:01:78:15:09:12:03:8d:45:d8:07:f5:9f:0f:54:77:2d:7a:
e4:3b:4a:fd:85:23:fb:03:12:ee:af:41:98:14:43:d8:f6:31:
d8:b5:45:2b:4c:7f:aa:1d:9a:81:fe:d6:42:d9:14:c9:4d:d4:
c4:85:a6:20:0b:e2:58:46:2a:38:03:b6:f2:93:c4:47:e7:c0:
6d:d7:cd:67:8f:75:cf:9f:6a:4e:51:26:0a:e8:88:64:c4:ef:
81:a0:3e:b6:88:a2:ae:de:fd:b0:4e:d3:b2:7e:f1:27:3b:9e:
00:91:72:9f:46:17:e9:dc:95:9b:d9:5e:2e:16:63:48:10:e8:
a5:26:55:2d:e7:bb:e0:a0:46:3b:e5:5c:f6:ef:2f:39:8c:9d:
8f:f1:d4:4e:cf:31:b3:45:ec:90:d7:a6:d9:6c:23:b2:83:cb:
e9:72:04:1f:ba:e5:fb:f3:4b:3f:a7:53:a2:5a:34:cd:8f:1e:
73:7d:93:86:fc:64:85:79:e2:a8:f4:e2:5f:76:36:e1:4f:fb:
89:1b:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:52:10 2025 by rpki-client