Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: MH9XPhIXQPb9fc+J0pZt4IW1AE6r0O78U5gRuCyulus=
Subject key identifier: 11:95:DB:64:1C:54:EA:75:67:23:BE:D9:27:E2:AD:A2:1B:5A:83:D3
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 0199FDD9AD8C62605CA1313F4DE26DDEEC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0964
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: h21+qvekvl/r88zLHepjCyKMJaqc1gQLPDijn/P9PKc=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ad:8c:62:60:5c:a1:31:3f:4d:e2:6d:de:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=1195db641c54ea756723bed927e2ada21b5a83d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:e6:e6:c9:c0:f4:91:ad:ca:67:40:d1:7e:
3e:14:d9:ee:65:40:8a:db:f7:e2:ff:f1:8a:86:56:
c7:a5:31:c3:a8:f1:73:a6:f2:e3:e4:f7:54:97:d8:
bf:fa:1a:18:fb:77:15:d4:4d:9d:62:ea:87:af:bc:
50:83:ee:f5:7c:13:90:39:a8:a6:f7:47:2a:19:49:
c1:01:56:73:22:41:73:dd:f5:a2:af:98:bb:9a:fb:
fc:94:32:3b:61:70:8e:67:a4:ae:37:42:27:b9:8d:
b7:7b:81:45:79:5d:01:bb:72:a3:b0:43:54:b6:2a:
8e:86:d2:c9:0e:89:b0:5c:d2:36:20:14:a0:fd:48:
49:1b:62:88:f9:b8:32:aa:7a:34:e1:8c:61:c3:1d:
3f:52:0d:34:ec:f1:d9:9f:2c:a0:28:3e:f6:a0:b6:
b7:9d:82:cb:81:24:f1:50:36:5e:3e:81:0a:19:d8:
19:73:f4:e7:c1:d4:c0:59:14:50:bd:30:fe:74:9f:
59:d8:dd:b6:59:37:5e:9e:db:16:23:67:2f:b0:8f:
cb:9d:ec:70:7b:23:16:2c:06:b5:4f:60:86:7a:da:
14:c7:bd:9d:29:6a:ed:ef:79:03:e4:4d:d5:55:67:
59:c0:a5:ec:46:0c:5f:bf:16:c8:b8:b2:8a:a2:21:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:DB:64:1C:54:EA:75:67:23:BE:D9:27:E2:AD:A2:1B:5A:83:D3
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:31:b5:8e:0e:e3:dd:37:57:4e:bc:59:ba:61:3c:f7:6b:b5:
e3:65:9c:c0:ec:0b:d3:9a:0b:b9:dd:a4:25:2c:0b:b9:03:f8:
13:71:51:da:23:df:6b:30:99:d7:6e:46:a7:53:7a:84:64:43:
53:85:9b:88:8b:d5:ee:6c:c6:2d:b5:de:7f:35:56:ca:70:45:
4c:19:4f:a9:12:17:87:17:b8:3d:8b:dd:48:a1:54:c9:af:9a:
11:c1:1d:98:fa:06:b1:c7:4f:76:68:63:21:d8:fb:60:b3:03:
c1:16:a0:02:71:54:3c:75:a3:a1:ab:ed:c9:b3:41:5a:f0:47:
36:ee:ae:c4:3b:a3:a1:36:08:9d:2d:d3:a2:4a:c7:66:10:b8:
f3:84:a2:e7:76:8d:5a:eb:b9:ba:5b:5f:2e:ff:99:e7:6b:2f:
2f:cb:83:31:05:8c:c2:14:e3:47:d0:d6:54:c6:63:36:b8:10:
a7:d6:57:7d:e8:6b:f7:29:e0:6f:09:01:c7:67:63:dc:fc:c5:
19:f7:5a:38:d4:71:63:4b:92:a3:b1:83:9f:55:a4:9c:b2:1e:
c6:0a:67:b1:22:ed:12:e4:33:3e:f6:5c:8a:d0:d0:95:65:52:
14:8d:3b:f3:bf:cb:03:85:06:6e:07:9a:aa:99:9c:35:e5:ea:
48:73:7e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92a2MYmBcoTE/TeJt3uwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjUxMDE5MTkwMjA1WhcNMjUxMDIwMTkwMjA1WjAzMTEwLwYDVQQD
EygxMTk1ZGI2NDFjNTRlYTc1NjcyM2JlZDkyN2UyYWRhMjFiNWE4M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoXm5snA9JGtymdA0X4+FNnuZUCK
2/fi//GKhlbHpTHDqPFzpvLj5PdUl9i/+hoY+3cV1E2dYuqHr7xQg+71fBOQOaim
90cqGUnBAVZzIkFz3fWir5i7mvv8lDI7YXCOZ6SuN0InuY23e4FFeV0Bu3KjsENU
tiqOhtLJDomwXNI2IBSg/UhJG2KI+bgyqno04Yxhwx0/Ug007PHZnyygKD72oLa3
nYLLgSTxUDZePoEKGdgZc/TnwdTAWRRQvTD+dJ9Z2N22WTdentsWI2cvsI/Lnexw
eyMWLAa1T2CGetoUx72dKWrt73kD5E3VVWdZwKXsRgxfvxbIuLKKoiHqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGV22QcVOp1ZyO+2SfiraIbWoPTMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDG1jg7j
3TdXTrxZumE892u142WcwOwL05oLud2kJSwLuQP4E3FR2iPfazCZ125Gp1N6hGRD
U4WbiIvV7mzGLbXefzVWynBFTBlPqRIXhxe4PYvdSKFUya+aEcEdmPoGscdPdmhj
Idj7YLMDwRagAnFUPHWjoavtybNBWvBHNu6uxDujoTYInS3TokrHZhC484Si53aN
Wuu5ultfLv+Z52svL8uDMQWMwhTjR9DWVMZjNrgQp9ZXfehr9yngbwkBx2dj3PzF
GfdaONRxY0uSo7GDn1WknLIexgpnsSLtEuQzPvZcitDQlWVSFI0787/LA4UGbgea
qpmcNeXqSHN+XQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:30 2025 by rpki-client