Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: AFshwJv6peFiKLGd4FCjM3f3B1GLeOrPeg+RYcZmF3I=
Subject key identifier: CC:4C:E8:CE:97:26:00:60:E7:42:56:DF:40:E6:3A:29:06:E0:51:AB
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 0198D4729B9102882EF3397523CAC7889D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 08CA
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: v/3NXrqwEDNZufpalCMnn5GpDpMatIi/V0JzgIqFjD4=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9b:91:02:88:2e:f3:39:75:23:ca:c7:88:9d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=cc4ce8ce97260060e74256df40e63a2906e051ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:79:23:c2:ea:60:01:e0:8c:52:b1:26:90:
0f:0a:7c:dd:24:d4:bc:80:fd:91:51:d7:f3:95:fe:
ef:9b:eb:87:a5:8f:b6:56:e2:80:f6:d3:10:08:54:
f7:1b:b5:05:f2:cb:cb:2d:d1:af:bc:24:5f:82:96:
de:66:d8:9e:31:b5:cb:47:f5:f5:47:77:b3:93:28:
67:42:ea:ff:69:5e:de:04:5f:5f:57:17:71:b2:d1:
9b:78:b0:7f:9f:bb:00:23:e1:d2:3e:33:f8:9c:e4:
7f:eb:ed:29:32:2c:6d:c6:66:e6:85:bc:26:03:2e:
a3:c4:54:ee:10:b5:5a:46:a6:2f:90:b7:61:13:17:
8f:9a:4b:95:bb:e8:27:7f:d5:6b:5f:99:e6:3a:45:
1a:f7:64:f1:c3:3a:94:07:af:02:bd:60:e1:89:bb:
04:f9:4d:ad:34:eb:1c:e1:c7:fc:c2:39:17:07:94:
e1:4d:83:d8:06:f6:ef:11:ec:de:a9:5b:56:8b:46:
b2:2e:a7:1b:38:e1:30:24:71:b8:28:20:ad:04:31:
ad:ad:9d:9a:c3:9a:ba:19:b4:5a:7b:17:8f:e9:cb:
84:de:96:02:9f:08:fa:de:aa:3c:e0:69:52:e5:01:
87:02:63:2a:6b:39:45:5c:21:92:62:05:e0:ad:2c:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:E8:CE:97:26:00:60:E7:42:56:DF:40:E6:3A:29:06:E0:51:AB
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:42:f6:35:5c:75:b7:66:e6:31:3b:d6:94:62:f8:ef:49:27:
fc:4a:ff:9a:7c:79:8e:97:7e:1f:d5:4f:c6:30:0b:d1:0d:9a:
ce:ac:5c:42:4c:48:0f:4a:4d:49:f8:99:7a:53:23:96:4f:6b:
7a:d9:c6:b5:81:51:ce:8f:dc:51:0e:7d:a5:fc:b0:29:54:18:
97:98:72:02:00:18:d4:03:af:4d:f0:c5:3a:3d:52:61:2e:41:
5f:29:94:6e:4e:e3:68:c4:0a:38:21:fc:16:ca:e0:e1:d2:0e:
7b:ac:83:c3:1d:c3:f2:3e:a9:9d:fd:99:91:0a:a2:ca:f3:85:
bd:1e:83:d8:7f:1b:da:74:e2:d5:40:8c:1b:d6:a6:76:50:c0:
04:7c:3f:9c:6e:ea:56:ba:1f:8a:2b:0f:66:3f:2f:e4:90:53:
0f:83:9b:7d:ef:1b:9c:97:1a:32:bf:5f:38:e9:76:47:59:84:
88:35:15:28:20:b3:d7:5f:e2:43:fc:b1:41:88:83:ab:67:1a:
dc:77:f9:b2:33:a7:64:78:0a:f8:35:dc:f1:61:91:f0:d1:a2:
7a:e5:e3:eb:35:3b:1d:31:2e:b5:f3:c7:35:99:30:5c:73:68:
dd:a3:44:6a:1a:43:7f:28:25:ec:4f:2b:6e:4c:44:c4:f1:00:
13:7f:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:31 2025 by rpki-client