
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: XVFxc9cN3WQIqS7RyPPE4R0Qgzl5qPPObK2NRUHn5cE=
Subject key identifier: AF:F3:88:36:F4:97:87:E0:0F:1E:C7:27:D9:0B:C7:2C:FD:7C:41:AE
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 0199FBB3600804D58D9D128AD5D93E67DAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 54
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: 9PLOntgg2y4TExbGnhcQF5b7lypMCcoy+CRTOCPstXU=)
2: pxwnw1PcgrCjP2FI0u6V3im7xqk.roa (hash: f0v/CDub2SSdoEUZ7uzF5yhPQYzLwuNhqz6tW+qNh1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:60:08:04:d5:8d:9d:12:8a:d5:d9:3e:67:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=aff38836f49787e00f1ec727d90bc72cfd7c41ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:94:6f:82:78:2f:f9:84:3d:24:1c:b3:0a:
e1:da:0b:68:45:52:bf:14:4e:99:a0:4f:2f:0c:1f:
69:71:24:eb:46:b6:d1:0e:ee:a0:89:b6:bc:71:98:
03:c2:c4:b2:bd:e6:3b:28:81:2e:ce:3e:4a:1c:e4:
66:bd:9d:82:39:df:c1:b3:5f:fe:68:0a:7f:e0:cb:
7b:8b:39:cd:25:f1:97:b9:bd:2c:ab:ce:3d:74:73:
72:aa:38:e2:fc:72:90:36:bb:71:80:21:af:27:f3:
70:43:65:b6:89:e4:7e:ef:05:6f:1f:45:7c:8b:5c:
1e:29:2f:98:cd:c1:ef:72:c1:98:66:57:b4:a2:21:
30:2f:b4:43:dc:6b:5d:6d:dd:44:87:24:ab:7b:49:
ff:d0:a7:38:b9:2e:dd:23:c5:5d:4c:c6:41:07:c9:
be:2b:80:aa:87:74:66:a2:7d:d1:ea:cb:1e:bb:97:
14:43:c2:14:14:88:8a:9a:75:68:5b:4d:fd:b3:af:
fe:d8:d5:cb:d2:38:f3:82:7a:43:9f:a6:9b:a0:fa:
90:1c:4e:5c:8b:b9:c8:4f:30:3e:43:20:02:42:96:
b4:e7:ad:a2:4e:bf:51:23:d7:76:c8:02:bc:6b:9e:
73:a0:b5:a3:0c:9f:83:ad:b0:c6:02:e7:79:e4:9f:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:88:36:F4:97:87:E0:0F:1E:C7:27:D9:0B:C7:2C:FD:7C:41:AE
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:a9:41:9c:d7:b2:ce:ea:ef:de:30:9e:b0:10:21:d1:d5:
aa:42:f8:9d:7e:d5:bd:60:88:46:81:55:18:ca:c2:be:67:e8:
05:08:d4:b6:95:25:a4:9b:36:bf:9e:b4:5c:37:f7:45:86:5a:
80:05:b1:0d:31:fe:31:14:c2:97:31:e3:38:a3:1b:88:58:ff:
ef:38:ac:3d:b1:a1:e3:b1:d9:71:b8:0c:ae:f1:46:32:93:8f:
c3:1b:08:38:d1:9a:a2:e7:3f:84:08:e3:d3:8f:f0:e3:19:11:
fe:c8:fa:42:3f:21:43:09:ab:2f:c3:60:cd:02:58:9f:ee:33:
52:fa:f5:19:a8:c1:9f:68:7d:e0:17:d0:cb:38:20:fb:3e:18:
2c:dc:01:f2:9b:8d:c4:93:9d:20:38:09:81:1a:fd:22:06:a2:
be:f7:5c:c1:c8:1a:11:ea:b7:08:1e:cb:58:0f:2d:3b:66:b4:
20:43:0b:fe:db:20:e1:eb:34:36:69:ec:fa:df:97:22:b1:f3:
5a:07:bc:41:e4:f8:14:a3:86:e0:5f:08:82:7f:05:9b:cd:1c:
11:2c:2a:5d:5a:de:aa:f4:fe:82:2f:a2:e7:0b:ab:69:82:f7:
cb:93:dc:5b:57:fe:9e:07:4e:2b:38:53:0e:a6:aa:ac:3e:f7:
8d:ee:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:03 2025 by rpki-client