Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: hn6qNkN8xRyt4wEIrUWU55JrDmpKsIVHwcRcGtkIi9I=
Subject key identifier: 33:57:5B:E4:C1:2A:AF:BD:9F:80:B4:9C:3B:2A:5D:BA:FD:79:F4:82
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0199FE104A48E7189ABE86C504DF29ABD11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0E52
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: XH0U8/pjdokBal3GPm39YiDPGk8PwAaCENS6thD4g00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:4a:48:e7:18:9a:be:86:c5:04:df:29:ab:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=33575be4c12aafbd9f80b49c3b2a5dbafd79f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:78:10:99:06:0b:02:4b:af:14:88:3f:98:
1a:3a:b3:8c:15:8a:08:ba:31:be:ca:fe:b7:99:6c:
02:33:36:63:52:1d:f7:2e:ab:9e:f1:cd:19:1e:05:
fa:25:7b:81:cc:47:dc:5e:cd:3e:d0:90:aa:5d:a9:
99:b6:b1:c8:f5:a3:d5:e6:a5:6e:25:b1:c9:20:1a:
f9:6e:61:2c:5f:86:f6:ad:fe:84:c5:5d:0d:27:54:
bd:fe:21:bb:0c:da:81:7a:80:a2:2c:90:52:c2:f3:
2f:c1:af:a4:5f:ac:35:c5:f3:e3:a5:85:da:69:16:
80:23:b0:b6:e0:31:a9:7f:a0:62:c6:0f:49:79:d8:
cd:25:5c:2f:1f:b7:44:d9:30:4b:3c:7f:9f:db:6d:
d2:c1:d5:ce:8b:10:84:21:d5:40:41:6a:33:49:4e:
f9:3d:ce:af:5f:57:a0:04:24:25:b1:07:a7:c3:43:
70:27:22:81:af:bd:1d:2c:25:d2:b2:e5:05:79:9f:
cd:f6:6a:69:95:fe:b4:fc:d6:87:41:d9:f4:2a:16:
c2:59:bd:48:fc:94:d4:15:85:93:f1:12:3f:0c:a5:
ef:4b:ea:9d:f8:4e:85:35:fe:47:ff:d4:f7:f0:4d:
f3:09:71:74:52:a7:29:df:cb:23:1a:4c:4c:09:df:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:5B:E4:C1:2A:AF:BD:9F:80:B4:9C:3B:2A:5D:BA:FD:79:F4:82
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:f2:49:8d:dc:13:c8:d9:e2:c0:d1:96:19:ef:2a:b4:9c:
c4:81:f9:7c:2d:91:6a:6f:8b:60:05:da:8c:22:34:66:75:6b:
de:fc:88:56:77:53:1f:ea:60:c7:6b:86:57:da:9f:7e:79:4e:
77:91:dd:41:c3:cf:55:d7:99:86:03:e6:f6:fb:d3:7e:f7:b6:
6a:0e:f9:b9:aa:bd:0b:37:4c:4a:7b:f4:cc:73:1a:a2:f1:57:
b8:22:20:57:7c:80:dd:bf:2a:0f:7d:76:b8:de:73:89:25:50:
20:dc:ad:90:31:56:8c:5b:ed:e5:b1:b6:08:aa:fe:3e:6b:3f:
82:45:66:71:75:d3:78:c8:98:95:42:d4:ed:fd:a0:87:18:53:
8f:52:fa:4e:cc:70:f3:e9:e0:eb:30:d0:fc:00:c1:91:46:b3:
a9:66:d8:16:8c:1a:40:72:71:e1:69:b9:52:1e:3b:5d:fd:84:
b2:9e:3a:52:fc:a2:59:eb:7d:ce:1e:fa:cf:5b:64:46:68:90:
61:ae:7f:70:0e:59:52:c2:56:0f:89:7c:ea:6a:6b:56:99:33:
70:46:a4:38:bd:ee:2b:34:ec:64:bb:86:31:ce:1d:6f:ef:5a:
48:85:4e:3b:74:8e:e0:41:f8:0d:63:bb:39:22:87:be:92:a8:
4e:e9:35:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EEpI5xiavobFBN8pq9EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjUxMDE5MjAwMTQ0WhcNMjUxMDIwMjAwMTQ0WjAzMTEwLwYDVQQD
EygzMzU3NWJlNGMxMmFhZmJkOWY4MGI0OWMzYjJhNWRiYWZkNzlmNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gh4EJkGCwJLrxSIP5gaOrOMFYoI
ujG+yv63mWwCMzZjUh33Lque8c0ZHgX6JXuBzEfcXs0+0JCqXamZtrHI9aPV5qVu
JbHJIBr5bmEsX4b2rf6ExV0NJ1S9/iG7DNqBeoCiLJBSwvMvwa+kX6w1xfPjpYXa
aRaAI7C24DGpf6Bixg9JedjNJVwvH7dE2TBLPH+f223SwdXOixCEIdVAQWozSU75
Pc6vX1egBCQlsQenw0NwJyKBr70dLCXSsuUFeZ/N9mpplf60/NaHQdn0KhbCWb1I
/JTUFYWT8RI/DKXvS+qd+E6FNf5H/9T38E3zCXF0Uqcp38sjGkxMCd9RWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNXW+TBKq+9n4C0nDsqXbr9efSCMB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuDySY3c
E8jZ4sDRlhnvKrScxIH5fC2Ram+LYAXajCI0ZnVr3vyIVndTH+pgx2uGV9qffnlO
d5HdQcPPVdeZhgPm9vvTfve2ag75uaq9CzdMSnv0zHMaovFXuCIgV3yA3b8qD312
uN5ziSVQINytkDFWjFvt5bG2CKr+Pms/gkVmcXXTeMiYlULU7f2ghxhTj1L6Tsxw
8+ng6zDQ/ADBkUazqWbYFowaQHJx4Wm5Uh47Xf2Esp46UvyiWet9zh76z1tkRmiQ
Ya5/cA5ZUsJWD4l86mprVpkzcEakOL3uKzTsZLuGMc4db+9aSIVOO3SO4EH4DWO7
OSKHvpKoTuk1uA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:07 2025 by rpki-client